Information notice pursuant to article 13 of Regulation (EU) 2016/679 (GDPR) for the Website.
Dear User, Pursuant to article 13 of Regulation (EU) 2016/679 and with regard to the personal data which will be obtained by M.V.M S.r.l. (hereinafter the "Company" or the "Data Controller"), we would like to inform you of the following.
The data controller is M.V.M. S.r.l., 14, Via del Progresso - 42015 Correggio (RE) Italy - Tel. +39 0522 632266 - Fax +39 0522 642011 - firstname.lastname@example.org, in the person of its interim legal representative.
Purposes of data processing.
1: Your Personal Data will be processed by the Data Controller so that you may receive newsletters, send requests for information or for direct contact via the telephone numbers of the Data Controller and the e-mail addresses indicated on the site;
The Processing of your Personal Data is therefore based on a request by the user for information and/or precontractual and contractual activities with the controller in compliance with the provisions of article 6 paragraph 1 letter b of the EU Regulation.
So that the Data Controller may carry out the Processing operations for the aforementioned purposes, the provision of data marked with the symbol * is mandatory. If even one of the data marked with * is missing, the Processing of your Personal Data will not be possible and, consequently, you will not be able to complete the request for which the provision of your Personal Data is required.
2: Your Personal Data will be processed by the Data Controller so that you may receive commercial and advertising information, communications relating to events, trade fairs, new products and direct marketing from M.V.M S.r.l. and its related companies. The Processing of your Personal Data is, therefore, based on the request of explicit consent from the user, pursuant to the provisions of article 6 paragraph 1 letter a of the EU Regulation. The possible refusal on the part of the user to provide consent does not preclude the activities under point 1. The right of modification of the consent may be exercised at any time.
Data requested by the site
The Personal Data that you will be requested to provide for the achievement of the aforementioned purposes will be the data mentioned in the contact form, namely, by way of a non limiting example: name, surname, address, e-mail address, landline and/or mobile telephone numbers.
Data related to the navigation of the site
IT systems and software procedures used for the operation of this website obtain, during normal operation, some personal data, the transmission of which is implicit in the use of Internet communication protocols.
This information is not collected to be associated to identified data subjects but may, by its very nature and through processing and association with data held by third parties, allow the identification of users.
This category of data includes IP addresses or domain names of the computer used by the users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used in the submission of the request to the server, the size of the file obtained in reply, the numerical code that indicates the status of the reply given by the server (successful, error, etc.) and other parameters related to the user's operating system and IT environment.
These data are used for the sole purpose of retrieving anonymous statistical information on the use of the Site and to control its correct operation and are deleted immediately after processing.
The data may be used to ascertain liability in case of any computer crimes to the detriment of the Site.
Disclosure of data.
Third parties that carry out part of the Processing operations and/or operations connected to and fundamental therefore on behalf of the Data Controller. Such persons have been appointed as data processors; pursuant to article 4 point 8) of the Regulation, the term must be understood to mean "a natural or legal person, public authority, agency or other body which processes personal data on behalf of the controller" (hereinafter the "Data Processor");
Individuals, employees and/or associates of the Data Controller who have been tasked with specific and/or other Processing operations on your Personal Data. Such individuals have been given specific instructions regarding the security and the proper use of the Personal Data and are defined by article 4 point 10) of the Regulation as "persons who, under the direct authority of the Controller or Processor, are authorised to process Personal Data" (hereinafter the "Authorised Persons").
Where required by the law or in order to prevent or suppress the commission of a crime, your Personal Data may be disclosed to public bodies or to the judicial authorities, without these parties being defined as Recipients. In fact and in accordance with article 4 point 9) of the Regulation, "public authorities which may receive Personal Data in the framework of a particular inquiry in accordance with Union or Member State law shall not be regarded as Recipients".
Methods of data processing.
The processing will be performed by automated and/or manual means, in compliance with the provisions of article 32 of Regulation (EU) 679/2016 with regard to security measures, by duly authorised persons and in conformity to the provisions of article 29 of the Regulation.
Dissemination of data.
Your personal data shall not be subject to dissemination
Data profiling and/or automated decision-making processes.
Your Personal Data shall not be subject to profiling and/or automated decision-making processes.
Transfer of data abroad.
The Personal Data will be processed by the Data Controller inside the territory of the European Union.
If, for technical and/or operational reasons, it is necessary to use the services of persons who reside outside the European Union, we would hereby like to inform you that said persons will be appointed as Data Processors pursuant to and for the effects of the provisions of article 28 of the Regulation and that the transfer of your Personal Data to said persons, exclusively so that they may carry out specific Processing operations, will be regulated in compliance with the provisions of chapter V of the Regulation. All necessary safeguards will, therefore, be adopted to guarantee the most complete protection of your Personal Data by basing such transfer: (a) on adequacy decisions of the recipient third countries taken by the European Commission; (b) on appropriate safeguards provided by the third-party recipient pursuant to article 46 of the Regulation; (c) on the adoption of so-called corporate binding rules.
In any case, you may request further details from the Data Controller if your Personal Data were processed outside the European Union, requesting evidence of the specific safeguards provided.
Period of storage of data.
One of the principles that apply to the Processing of your Personal Data concerns the limitation of the storage period, which is regulated by article 5 paragraph 1 point e) of the Regulation that reads as follows: "the Personal Data are kept in a form which permits identification of Data Subjects for no longer than is necessary for the purposes for which the personal data are processed; Personal Data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with article 89(1) subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the data subject".
In light of this principle, your Personal Data will be processed by the Data Controller exclusively for the time necessary to achieve the purposes under point 1 of this Information Notice. Specifically, your Personal Data will be processed for the minimum necessary time, as indicated in Recital 39 of the Regulation, namely until the end of the existing contractual relationship between you and the Data Controller, without prejudice to a longer storage period that may be imposed by the law, as foreseen by Recital 65 of the Regulation.
With regard to processing performed for the achievement of the purposes under point 2 of this Information Notice, the Data Controller may lawfully process your Personal Data until such time as you communicate, in one of the ways provided for by this Information Notice, your desire to withdraw consent to one or all purposes for which it was requested of you. Said possible withdrawal of consent will, in fact, oblige the Data Controller to cease the Processing operations of your Personal Data for said purposes.
Rights of the data subject
The Regulation grants the persons whose personal data are processed specific rights, among which:
- the right to obtain the confirmation that the personal data that concern him/her are being processed and to obtain access to said data (article 15 of the Regulation);
- the right to obtain the rectification of inaccurate personal data (article 16 of the Regulation);
- the right to obtain the erasure of any personal data that concern him/her, in compliance with the right to be forgotten (article 17 of the Regulation);
- the right to obtain the restriction of processing by the Controller (article 18 of the Regulation);
- the right to obtain his/her personal data in a structured, legible and understandable format, as well as to obtain the transmission of said data to another data controller without hindrance (article 20 of the Regulation);
- the right to object to the processing of his/her personal data (article 21 of the Regulation).
Right to lodge a complaint with a supervisory authority.
You have the right to refer to the supervisory authority (Privacy Authority) at any time, if you believe that your data were not processed correctly.
You may at any time withdraw the consent given to the Data Controller, without such withdrawal having an impact on the processing performed until that moment by the Data Controller.
You may exercise your rights by sending a written request to the Company, to the address of the registered office or to the e-mail address: email@example.com
This information notice may, in time, be amended - such amendments may be related to the possible entry into force of new rules and regulations of the sector, the update or provision of new services or advancements in technology; we, therefore, would like to invite you to consult this page from time to time. - Version: May 2018.