Seleziona una pagina

PRIVACY POLICY

Information on the basis of article 13 and 14 of the General Data Protection Regulation EU 2016/679
D.Lgs. June 30th 2003 n. 196 (T.U. Privacy)

This Privacy Policy intends to describe the methods of use of users’ personal data that are processed by the Controller through the website: https://www.cmiadvanced.it.
In compliance with the provisions of Legislative Decree 30 June 2003 no. 196 (hereinafter, also simply “Privacy Code”), as well as the articles 13 and 14 of the European Regulation on Privacy 2016/679 (hereinafter, even simply “GDPR”) we are providing you, as “data subject”, the necessary information regarding the purposes and methods of processing your personal data, as well as the communication and dissemination of the same.
Browsing the website, using its services or interacting with the Company, the Controller, the user confirms that he/she has understood this Privacy Policy and accepts the treatment by the Controller.
If the user does not accept the terms and conditions of this Privacy Policy, please do not visit the website, do not send requests through the “Contact Us” section, do not sign up for the newsletter and do not otherwise use this site, or not give your consent when this option is required pursuant to current legislation.

1. COLLECTION OF INFORMATION

Most sections of the site do not require any form of registration, allowing access and consultation without identifying the visitor. Otherwise, some areas of the site (for example, section “Contact Us”, “Newsletter”, “Register”) may require to the user to send personal data in order to use specific functions. In such eventuality, failure to provide the personal data requested (for example name, surname and e-mail address) makes it impossible for the Controller to respond to requests received and/or send newsletters and/or grant the user the download of the catalogs by the website.
The Controller processes personal data collected for specific and limited purposes in relation to which information is given at the time of requesting information. By way of example, the collection and use of personal data could be aimed at responding to your requests for further information regarding the products and/or services of the Controller, as well as to send you illustrative and promotional material also via newsletter.
If the user provides the Controller with the personal data of third parties (for example, family members, friends, etc.), he must ensure that these third parties are informed and that they have authorized the use to assign them on the basis of an appropriate legal basis that legitimates the processing of the data in question. In these specific cases, the user acts as an independent Controller and assumes all legal obligations and responsibilities. Therefore, the user in the case in which he/she provides third party data gives the broader indemnity to the Controller with respect to any possible dispute, claim and request for compensation for the damage that should come from them to the Controller.

a) Passive collection of information: Cookie

It is possible that, while browsing on this site, some user information (i.e. information that the user does not actively provide, for example the IP address) is collected in passive form by means of different technologies and tools, such as Internet Protocol addresses, cookies, internet tags and browsing data collection.
Therefore, we invite the user to read the Cookie Policy for detailed information on this and other technologies used on the Site. The Cookie Policy also contains instructions on how to disable cookies.

b) Types of data collected:

The Company may collect and use different types of personal data according to the specific purposes pursued and described below:

– navigation data, such as for example: the IP address, the domain names of the devices used to connect to the site. The computer systems of the site, in fact, collect some data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with the user, but which by its very nature could, through processing and association with data held by third parties, allow the user to be identified. This data is used only for statistical information and to check the correct functioning of the website.
– data voluntarily provided by the user, in the knowledge that this entails data processing by the Owner, such as, for example: name, surname, address, Company, e-mail address, telephone and/or mobile number, fax.

2. DATA PROCESSING PURPOSES

The Controller uses the information provided by the user, for the purposes and in the manner described at the time of collection in compliance with the current privacy legislation.

Furthermore, the owner, with the user’s consent, in compliance with the current privacy legislation, uses the information acquired by and/or concerning the user for:

a) answer questions and satisfy user requests, as well as grant the user to download the catalog of his products;
b) commercial purposes of CMI Advanced Srl, for direct marketing, also through newsletters, by sending communication and/or informative and promotional material, also via e-mail, ordinary mail, SMS/MMS or similar systems relating to activities/promotional initiatives of CMI Advanced Srl, if you have given specific consent;
c) commercial purposes by the group companies of which CMI Advanced S.r.l. is part (CMI S.p.A. group, subsidiary, controlling and participated companies), for direct marketing, also through newsletters, by sending communication and/or informative and promotional material, also by e-mail, ordinary mail, SMS/MMS or similar systems relating to promotional activities/initiatives by the companies of the group of which CMI Advanced Srl (subsidiary, parent and investee companies), if you have given specific consent.

3. DATA PROCESSING METHODS

The processing of personal data voluntarily provided by the user is carried out pursuant to art. 5 of the GDPR. The data subject will be processed lawfully and fairly, will not exceed the purposes referred to the art. 2 of this privacy policy and will be kept for 3 years from their registration or from the last request sent by the user (and in any case from the moment in time more recent between the two) except for higher terms imposed by the law, and saves the actual transformation in anonymous form as envisaged by current legislation. The interested party may at any time request unsubscription for the purposes referred to in the art. n. 2 lett. b) and c) of this privacy policy opt-out at the bottom of each communication.

The personal data will be process on magnetic or electronic support and/or in written form by the processor and by the persons who, under the direct authority of the Controller or Processors, are authorized to process personal data.

In the event of withdrawal of consent, the data will be deleted within 3 months of the request, subject to specific legal obligations regarding the conservation of the documentation.

The treatment is carried out by the operations or set of operations as set forth in art. 4 n. 2 of the GDPR and more precisely: the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking , communication, dissemination, deletion, destruction of data, even if not recorded in a database.

The operations will be carried out both with electronic instruments and with paper supports and according to logics fully compliant with the aims pursued.

The processing of personal data is carried out by the Controller, by the Processor and/or by the persons who, under the direct authority of the Controller or Processors, are authorized to process personal data.

4. NATURE OF THE PROVISION OF DATA, LEGAL BASIS OF THE TREATMENT AND REFUSAL OF DATA PROVISION

The provision of personal data is optional and is strictly necessary for the purposes of carrying out the activities referred to the art. 2 lett. a) of this privacy policy that is to answer your questions and requests, and does not require the explicit consent of the person concerned, pursuant to art. 6 n. 1 letter b) of the GDPR. It should be noted, however, that any refusal by the interested party to provide personal data will make impossible to answer your questions and satisfy your requests.

The provision of personal data in relation to art. 2 lett. b) of this privacy policy is optional and requires specific and free consent from the interested party pursuant to art. 6 n. 1 letter a) of the GDPR to allow the Controller to carry out direct marketing activities by sending communication and / or informative and promotional material, also by e-mail, ordinary mail, SMS/MMS or similar systems relating to promotional activities/initiatives of CMI Advanced Srl. It should be noted, however, that any refusal by the interested party to provide personal data will make it impossible to carry out the activities referred to the art 2 letter b) of this privacy policy.

The provision of personal data in relation to art. 2 lett. c) of this privacy policy is optional and requires specific and free consent from the interested party pursuant to art. 6 n. 1 letter a) of the GDPR to allow the companies of which CMI Advanced is part (CMI SpA group, subsidiaries, parent companies and investee companies) to carry out direct marketing activities by sending communication and/or informative and promotional material, also through e- mail, ordinary mail, SMS/MMS or similar systems relatively. It should be noted, however, that any refusal by the interested party to provide personal data will make it impossible to carry out the activities referred to art. 2 letter c) of this privacy policy.

5. DATA COMMUNICATION SCOPE

The data may be communicated to Processors and to persons who, under the direct authority of the Controller or Processors, are authorized to process personal data only if necessary for the performance of the tasks assigned to them. Moreover, if you have expressed your free and specific consent for the purposes referred to art. 2 lett. c) of this privacy policy, Your data will be communicated to the companies of the group of which CMI Advanced S.r.l. it is part (CMI S.p.A. group, subsidiaries, parent companies and investee companies).

All this without prejudice to the guarantee of protection of the rights of the interested party.

6. DATA DISSEMINATION SCOPER
Personal data are not subject to disclosure.

7. USE OF THE SITE BY MINORS

The site is aimed at a general public, however its services are intended for individuals aged 18 or over. The Controller requests that these subjects do not provide personal data through the site or give consent if requested. If the Company learns that it has collected data from a child, it will delete them.

8. SPECIAL CATEGORIES OF PERSONAL DATA

The Controller asks the user not to send or disclose special categories of personal data (e.g. information regarding health status) on and/or through the site.

The Owner asks the user not to send or disclose sensitive personal information (e.g. information regarding health status) on and/or through the site.

9. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES

Personal data may be transferred to European Union countries for the purposes mentioned in art. 2 of this privacy policy. Furthermore, in the case of use of cloud platforms for the storage and/or transfer of data, the same, in compliance with the provisions of Articles. 44 and following of the GDPR could also be transferred to third countries with respect to the European Union, in particular for the possible support on servers. In this case, only services that comply with the requirements of the current legislation will be used (such as for example the certification according to the Privacy Shield in the bilateral agreement between the EU and the United States of America).

10. RIGHTS OF THE DATA SUBJECT

Pursuant to the articles 15,16 and 17 of the GDPR, you can assert your rights by contacting the Controller.

In particular, you can get from the Controller:

  • confirmation of the existence or otherwise of personal data and their availability in an intelligible form;
  • to know the origin of the data;
  • to know the purposes and methods of processing;
  • to know the logic applied to the processing;
  • to know the identification details of the owner and the subjects to whom the data can be communicated;
  • updating, rectification and integration of data;
  • the right to lodge a complaint with a supervisory authority;
  • cancellation, transformation into anonymous form or blocking of data processed in violation of the law.

Finally, the data subject may object, for legitimate reasons, to the processing of data concerning him, even if pertinent to the purpose of the collection, and has the right to the portability of data pursuant to art. 20 of the GDPR.
For the exercise of the aforementioned rights, it is possible to contact the Controller by sending a request by e-mail to the addresses indicated below.

11. CONTROLLER

The Controller is CMI Advanced S.r.l. (VAT 09716880969), in the person of its legal representative pro tempore, with registered office in Milan (20123 – MI), Via Meravigli, 16, e-mail marketing@cmiindustries.it