DISCLOSURE PURSUANT TO ART. 13 AND 14 OF THE EUROPEAN GDPR – EU REGULATION N. 679/16
and also INFORMATION PURSUANT TO ART. 13 OF D.LGS. N. 196/03
In compliance with articles 13 and 14 of the European Regulation on the Protection of Personal Data, in the acronym GDPR (ref. EU n. 679/16) and at the same time also with regulatory transition pursuant to art. 13 to Legislative Decree June 30, 2003 n. 196 (Privacy Code) Elettrotec S.r.l. as an indipendent Owner of Personal Data, releases this information to users (hereinafter: “User” or “Data Subject”) of its Site and has the purpose of describing the Site’s managing methods with reference to personal data processing, and in particular to allow Site Users to become aware the Owner’s purposes and methods of processing personal data.
The information is to be considered valid only for this website and not for other websites that may be consulted by the user through links. The Owner is not to be considered in any way responsible for third party websites.
The data controller is Elettrotec S.r.l., with headquarters in Via Jean Jaurès, 12 – 20125 – Milan (MI) – Italy, in the person of the Sole Director, Adriana Sartor.
DATA TREATEMENT RESPONSIBLE
External subjects are appointed as Data Processors by the Data Controller. The updated list of Data Processors is kept at the headquarters of the Data Controller in via Jean Jaures, 12 – 20125 Milan (MI).
The updated list of Data Processors can always be requested to the Data Controller.
DATA PROTECTION OFFICER (DPO)
The Data Controller has not appointed a data protection officer (DPO), because it is not applicable.
PLACE OF TREATEMENT
The treatments connected to the web services of this site take place at Elettrotec srl and are only handled by the staff in charge of the treatment and by the provider in charge of the Internet and hosting / housing services of this site.
Furthermore, these treatments are handled exclusively by technical personnel in charge, or by any persons in charge for occasional maintenance operations under the strict control of the Owner.
The Owner believes that the privacy of its users is a fundamental element to be safeguarded in the context of its business The Data Controller guarantees that the processing of personal data will be performed in consideration of fundamental rights and freedoms as well as the dignity of the data subject, and in accordance with the legislative provisions of the Applicable law and the confidentiality clauses included therein. In particular, the processing of personal data will be carried out in accordance with the principles of lawfulness, fairness, transparency, accurancy, purpose and storage limitations, data minimisation integrity and confidentiality.
NAVIGATION DATA COLLECTION
During their normal operation, the IT systems and the technical and software procedures underlying the operation of the Site acquire certain personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected in relationship of the users, but due to its inherent nature, such information could enhable the users to be identified via processing and associations with data held by third parties.
Each time the User connects to the Site and each time he calls up or requests content, the access data is stored on our systems, in the form of tabular or linear data files.
This category of data includes, for example, IP addresses or domain names of computers used by users who connect to the Site, the request by the User’s browser, in the form of addresses in URI (Uniform Resource Identifier) notation, the date and time of the request, the method used in submitting the request to the server, the amount of data transmitted, the numeric code indicating the status of the response given by the server and other parameters relating to the operating system and IT environment of the User.
Cookies are small text files that allow websites to remember and store Users’ preferences. Cookies differ according to the function performed. The User can disable or accept cookies through the security options of his browser. If cookies are disabled, navigation in some sections may be incomplete and some features of the site may not be available.
Please refer to the web page https://www.elettrotec.it/IT/cookies.asp for complete information on the types of cookies used on the Elettrotec website.
USER’S VOLUNTARY DATA COMMUNICATION
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this website, and the presence of data entry forms (web form), entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data. Specific summary information is shown on the website pages prepared for data collection (web form).
PURPOSE OF THE TREATEMENT
Personal data collected automatically through consultation of the Site as well as those of a personal nature voluntarily provided by the User by filling in the forms will be processed, without prejudice to the rights referred to below, for the following purposes̀:
navigation on this website;
any contact request, by sending the requested information;
supply of ordered products and services and fulfillment of contractual obligations;
fulfillment of obligations under laws and regulations;
bookkeeping, invoicing, credit management and administrative-accounting activities in general. For the purposes of applying the provisions on the protection of personal data, the treatments carried out for administrative-accounting purposes are those connected with the performance of the activities of an organizational, administrative, financial and accounting nature, regardless of the nature of the data processed. In particular, the internal organizational activities, those functional to the fulfillment of contractual and pre-contractual obligations, the information activity pursue these purposes;
sending newsletters and e-mail communications
all company activities generally related to the existing relationship.
WAY OF TREATMENT
Personal data are processed with automated tools for the time needed to carry out the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
The processed data will not be disclosed, sold or exchanged with third parties without the express consent of the interested party. The scope of data communication is exclusively limited to the competent subjects for the fulfillment of contractual operations and compliance with legal obligations. They can therefore be communicated to third parties belonging to the following categories:
external IT suppliers;
Administrations, public bodies and competent authorities, for the fulfillment of legal obligations and / or provisions of public bodies;
Group companies and / or the network of companies or private subjects directly involved in the performance or legitimated to know the data according to the law.
Only necessary data, relevant to the purposes of the processing for which they are responsible will be communicated to the aforementioned subjects.
OPTIONAL NATURE OF THE CONTRIBUTION
Apart from that specified for navigation data, the user is free to provide personal data contained in the forms on the website (web form) or to request the sending of newsletters, information material, commercial offers or other communications.
Their absence could interfer in obtaining what is requested.
TRANSFER OF DATA IN NON-EU COUNTRIES
There is no transfer of personal data collected in non-EU countries.
RETENTION PERIOD OF THE COLLECTED DATA
The personal data collected for the purposes above outlined will be stored for the time needed to carry out the related activities; when this period has been reached, the data shall be deleted (right to be forgotten).
Some data may be kept for longer times for tax purposes or other purposes provided by law and regulations, according to the duration of the established legislation.
WITHDRAWAL OF CONSENT
The consent expressed herein can always be revoked pursuant to art. 7 p.3 and pursuant to art. 17 p.1 lett. b).
The revocation can take place by writing to our Owner, through the references shown in the previous paragraph.
RIGHTS OF THE INTERESTED PARTIES
In relation to the aforementioned treatments, the rights referred to in Articles 15-22 of the EU GDPR n. 679/16, that is:
1) to obtain without delay:
– confirmation of the existence or not of the User’s personal data, even if not yet registered, and the communication in intelligible form of the same data;
– their identity indication, the purposes and methods of treatment, as well as, in the event that the treatment is carried out with electronic tools, the logic on which the treatment is based;
– identity indication of the owner or any responsible;
– subjects’ indication and categories to whom the personal data may be communicated or who can learn about them as appointed representatives in the State territory, managers or agents;
– updating, adjusting or data integration, if the User has an interest in it;
– cancellation, transformation into an anonymous way or blocking of data processed in violation of the law, including those whose retention is unnecessary for the purposes for which the data were collected or subsequently processed (right to be forgotten);
– the confermation that the operations referred to in numbers 5) and 6) have been brought to the attention, also as regards their content, of those to whom the data have been communicated, except in the case where this fulfillment proves to be impossible or involves a use of means manifestly disproportionate to the protected right.
– the receipt of personal data in a structured format, commonly used and readable by an automatic device and transmission to another holder without impediments (right to portability).
2) The right to object, in whole or in part, for legitimate reasons, to the processing of personal data concerning the User, even if pertinent to the purpose of the collection;
3) The right to object, in whole or in part, to the processing of personal data concerning the User, provided for the purposes of commercial information or for sending advertising materials or direct selling or for carrying out market research or commercial communication.
4) The right to revoke consent where provided.
5) Right to complain to the Supervisory Authority (Privacy Guarantor) for any alleged violation of the Regulation.
In relation to the aforementioned treatments, the rights referred to in Article 7 of Legislative Decree 196/2003, within the limits and under the conditions set out in articles 8, 9 and 10 of the aforementioned legislative decree.
The above rights can be asserted by writing to the e-mail address email@example.com or directly to the Data Controller or Data Processor at the following address:
Elettrotec S.r.l., Via Jean Jaurès 12, 20125 Milan
The registered references of the Ownership are:
ADRIANA SARTOR – firstname.lastname@example.org
as Sole Director of the company name ELETTROTEC S.R.L., independent Data Controller of the personal data.
The Owner reserves the right to modify, update, add or remove parts of this information at its discretion and at any time. The persons concerned are required to periodically check for any changes. In order to facilitate this verification, the information contains an indication of the update date.
The use of the site after the publication of the changes will constitute acceptance of the same.
Update date: 08/01/2020