Information on the basis of article 13 and 14 of the General Data Protection Regulation EU 2016/679
D.Lgs. June 30th 2003 n. 196 (T.U. Privacy)
In compliance with the provisions of Legislative Decree 30 June 2003 no. 196 (hereinafter, also simply “Privacy Code”), as well as the articles 13 and 14 of the European Regulation on Privacy 2016/679 (hereinafter, even simply “GDPR”) we are providing you, as “data subject”, the necessary information regarding the purposes and methods of processing your personal data, as well as the communication and dissemination of the same.
1. COLLECTION OF INFORMATION
Most sections of the site do not require any form of registration, allowing access and consultation without identifying the visitor. Otherwise, some areas of the site (for example, section “Contact Us”, “Newsletter”, “Register”) may require to the user to send personal data in order to use specific functions. In such eventuality, failure to provide the personal data requested (for example name, surname and e-mail address) makes it impossible for the Controller to respond to requests received and/or send newsletters and/or grant the user the download of the catalogs by the website.
The Controller processes personal data collected for specific and limited purposes in relation to which information is given at the time of requesting information. By way of example, the collection and use of personal data could be aimed at responding to your requests for further information regarding the products and/or services of the Controller, as well as to send you illustrative and promotional material also via newsletter.
If the user provides the Controller with the personal data of third parties (for example, family members, friends, etc.), he must ensure that these third parties are informed and that they have authorized the use to assign them on the basis of an appropriate legal basis that legitimates the processing of the data in question. In these specific cases, the user acts as an independent Controller and assumes all legal obligations and responsibilities. Therefore, the user in the case in which he/she provides third party data gives the broader indemnity to the Controller with respect to any possible dispute, claim and request for compensation for the damage that should come from them to the Controller.
a) Passive collection of information: Cookie
It is possible that, while browsing on this site, some user information (i.e. information that the user does not actively provide, for example the IP address) is collected in passive form by means of different technologies and tools, such as Internet Protocol addresses, cookies, internet tags and browsing data collection.
b) Types of data collected:
The Company may collect and use different types of personal data according to the specific purposes pursued and described below:
– navigation data, such as for example: the IP address, the domain names of the devices used to connect to the site. The computer systems of the site, in fact, collect some data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with the user, but which by its very nature could, through processing and association with data held by third parties, allow the user to be identified. This data is used only for statistical information and to check the correct functioning of the website.
– data voluntarily provided by the user, in the knowledge that this entails data processing by the Owner, such as, for example: name, surname, address, Company, e-mail address, telephone and/or mobile number, fax.
2. DATA PROCESSING PURPOSES
The Controller uses the information provided by the user, for the purposes and in the manner described at the time of collection in compliance with the current privacy legislation.
Furthermore, the owner, with the user’s consent, in compliance with the current privacy legislation, uses the information acquired by and/or concerning the user for:
a) answer questions and satisfy user requests, as well as grant the user to download the catalog of his products;
b) commercial purposes of CMI Advanced Srl, for direct marketing, also through newsletters, by sending communication and/or informative and promotional material, also via e-mail, ordinary mail, SMS/MMS or similar systems relating to activities/promotional initiatives of CMI Advanced Srl, if you have given specific consent;
c) commercial purposes by the group companies of which CMI Advanced S.r.l. is part (CMI S.p.A. group, subsidiary, controlling and participated companies), for direct marketing, also through newsletters, by sending communication and/or informative and promotional material, also by e-mail, ordinary mail, SMS/MMS or similar systems relating to promotional activities/initiatives by the companies of the group of which CMI Advanced Srl (subsidiary, parent and investee companies), if you have given specific consent.
3. DATA PROCESSING METHODS
The personal data will be process on magnetic or electronic support and/or in written form by the processor and by the persons who, under the direct authority of the Controller or Processors, are authorized to process personal data.
In the event of withdrawal of consent, the data will be deleted within 3 months of the request, subject to specific legal obligations regarding the conservation of the documentation.
The treatment is carried out by the operations or set of operations as set forth in art. 4 n. 2 of the GDPR and more precisely: the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking , communication, dissemination, deletion, destruction of data, even if not recorded in a database.
The operations will be carried out both with electronic instruments and with paper supports and according to logics fully compliant with the aims pursued.
The processing of personal data is carried out by the Controller, by the Processor and/or by the persons who, under the direct authority of the Controller or Processors, are authorized to process personal data.
4. NATURE OF THE PROVISION OF DATA, LEGAL BASIS OF THE TREATMENT AND REFUSAL OF DATA PROVISION
5. DATA COMMUNICATION SCOPE
All this without prejudice to the guarantee of protection of the rights of the interested party.
6. DATA DISSEMINATION SCOPER
Personal data are not subject to disclosure.
7. USE OF THE SITE BY MINORS
The site is aimed at a general public, however its services are intended for individuals aged 18 or over. The Controller requests that these subjects do not provide personal data through the site or give consent if requested. If the Company learns that it has collected data from a child, it will delete them.
8. SPECIAL CATEGORIES OF PERSONAL DATA
The Controller asks the user not to send or disclose special categories of personal data (e.g. information regarding health status) on and/or through the site.
The Owner asks the user not to send or disclose sensitive personal information (e.g. information regarding health status) on and/or through the site.
9. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES
10. RIGHTS OF THE DATA SUBJECT
Pursuant to the articles 15,16 and 17 of the GDPR, you can assert your rights by contacting the Controller.
In particular, you can get from the Controller:
- confirmation of the existence or otherwise of personal data and their availability in an intelligible form;
- to know the origin of the data;
- to know the purposes and methods of processing;
- to know the logic applied to the processing;
- to know the identification details of the owner and the subjects to whom the data can be communicated;
- updating, rectification and integration of data;
- the right to lodge a complaint with a supervisory authority;
- cancellation, transformation into anonymous form or blocking of data processed in violation of the law.
Finally, the data subject may object, for legitimate reasons, to the processing of data concerning him, even if pertinent to the purpose of the collection, and has the right to the portability of data pursuant to art. 20 of the GDPR.
For the exercise of the aforementioned rights, it is possible to contact the Controller by sending a request by e-mail to the addresses indicated below.
The Controller is CMI Advanced S.r.l. (VAT 09716880969), in the person of its legal representative pro tempore, with registered office in Milan (20123 – MI), Via Meravigli, 16, e-mail firstname.lastname@example.org