INFORMATION ON THE MANAGEMENT OF PERSONAL DATA
Information provided pursuant to articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679
Dear User, in compliance with the provisions of the European Regulation 2016/679 (acronym GDPR), ITALFIT MAGNETI SRL wishes to inform you that the personal data you have provided or acquired by us as part of our business, necessary to execute the services offered to you, will be treated in compliance with the privacy legislation and the principles of correctness, lawfulness, transparency and protection of your privacy and your rights. We also wish to send you the following information:
THE DATA CONTROLLER is the writer ITALFIT MAGNETI SRL, a company based in FAGAGNA in Via F. Comelli 39, who can be contacted at the following numbers: telephone 0432/801675, e-mail email@example.com
The Data Protection Officer (DPO) is RESPONSIBLE FOR DATA PROTECTION IN CASE IT IS APPOINTED
PROCESSED DATA, PURPOSE AND LEGAL BASIS OF THE PROCESSING
2.1. The computer systems and software used to operate the website www.supermagneticshop.com acquire some personal data which is an implicit consequence of the use of information protocols on the Internet (for example, domain names and IP addresses). These data are not accompanied by additional personal information and are used to obtain anonymous statistical information on the use of the site, to check how it is used and to ascertain any liability in the event of computer crimes. The legal basis that legitimizes the processing of such data is the need to make the functions of the company website usable as a result of the User’s access.
2.2. The data voluntarily provided by the User are instead those necessary for the Owner to provide the available services and are processed in a lawful and correct manner, they are also collected and recorded for the specific, explicit and legitimate purposes indicated below and are used in operations of treatment that are not incompatible with these purposes. Personal data (personal identification data such as, for example: name and surname, company name, tax code and VAT number, address, telephone / fax, e-mail, bank and payment references) are collected and processed:
-to carry out customer relationship activities based on pre-contractual and contractual agreements;
-for administrative, tax or internal accounting purposes related to the customer-supplier relationship and to fulfill the obligations generally provided for by the Data Controller by laws or regulations, by EU legislation, by requests from the judicial Authority or to exercise the rights of the Data Controller (for example the right to defense in court);
-in the presence of specific distinct consent of the User, for the following marketing purposes: send (via e-mail, mail, sms or telephone contact) newsletters, updates on the activities of the Owner, advertising material or commercial communications – possibly also customized on the basis of consumption habits of the User (profiling) – on products or services offered by the Owner that the User may deem of interest and to detect the degree of satisfaction with the quality of services, including requests to participate in market analysis or research;
-in the presence of a specific distinct consent of the User, for the following marketing purposes: sending (via e-mail, mail, sms or telephone contact) newsletters, updates, advertising material or commercial communications – possibly also customized based on consumption habits of the User (profiling) – on products or services offered by third parties such as, for example, business partners or other companies;
-in the case of sending a curriculum vitae, exclusively for the purpose of selecting personnel and for establishing an employment relationship.
The legal basis that legitimizes the processing of the data referred to in points “a” (pre-contractual and contractual agreements) and “b” (administrative, accounting or tax purposes) is the execution of a contract for the supply of services of which the User is a party, or the performance of pre-contractual activities at the request of the User. In the cases expressly indicated in points “c” (marketing and profiling), “d” (marketing and profiling by third parties) and “e” (curriculum vitae) the legal basis is the consent freely given by the User. 2.3.
Pursuant to articles 9 and 10 of the GDPR, the User can provide the Data Controller with qualifiable data as “particular categories of personal data” (ie data that reveal “racial or ethnic origin, political opinions, religious or philosophical beliefs, or belonging trade union … genetic data, biometric data intended to uniquely identify a natural person, data relating to the health or sexual life or sexual orientation of the person “).
These categories of data may be processed by the Data Controller only with the prior consent of the User, manifested in writing by signing this Information, for contractual needs and related fulfillment of legal and tax obligations and for personnel selection needs.
METHOD OF TREATMENT
The processing of the User’s personal data is carried out by means of the operations of: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
The User’s personal data are collected as a result of direct sending to the Data Controller, by filling in forms or forms in general prepared for this purpose, also included in contractual documents, or collected by telephone by the operator in the context of pre-contractual activities.
The data are processed both through manual processing in paper format and with electronic or automated, IT and telematic tools. The collected data is recorded and stored by the Data Controller in computer and paper archives, as well as kept and controlled in such a way as to minimize the risks of destruction or loss, even accidental, unauthorized access and treatment not allowed or not in accordance with the purposes. of the collection. The data are processed by employees or collaborators of the Data Controller, duly trained in this regard.
NATURE OF DATA COMMUNICATION
The provision of personal data relating to the processing is optional. However, the partial or total failure to provide the data may result in the partial or total impossibility of establishing or continuing the relationship with the User, within the limits in which such data are necessary for the execution of the same. The provision of data for marketing purposes is also optional.
The User can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material in general relating to the services offered by the Data Controller.
RECIPIENTS OR POSSIBLE CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The processing of user data is carried out by the owner’s internal staff (employees, collaborators, system administrators), identified and authorized for processing according to instructions that are given in compliance with current legislation on privacy and data security.
If this is necessary for the purposes listed in Article 2, the User’s personal data may be processed by third parties appointed as Data Processors (pursuant to Article 28 of the GDPR) or “autonomous” Data Controllers, and precisely:
-ITALFIT MAGNETI SRL for the purposes referred to in article 2.2. letter “d”;
-by professionals, companies, associations or professional firms that provide the Owner with assistance or advice for administrative, accounting, tax purposes, or for legal protection or personnel selection;
-by all the Public Institutes established by law and more generally by all the Bodies envisaged by the current accounting and tax legislation as recipients of mandatory communications;
-by banks for collections and payments as well as by any professionals – in single, associated or corporate form – for analysis and market research services, for the management of payments by credit cards or electronic payment instruments in general, postal couriers, for any credit recovery or certification activities of the owner’s financial statements.
The updated list of Managers and Persons in charge of processing is kept at the registered office of the Owner. In any case, the User’s personal data are not subject to disclosure.
TRANSFER OF DATA TO A THIRD COUNTRY OR INTERNATIONAL ORGANIZATIONS
As part of the management of the contractual relationship, no transfer of the User’s data to third countries outside the EU or to international organizations is envisaged.
STORAGE PERIOD OF PERSONAL DATA OR CRITERIA USED TO DETERMINE THIS PERIOD
For the purposes referred to in letters “a” (pre-contractual and contractual agreements) and “b” (management of administrative, accounting or tax obligations) of article 2.2. the User’s personal data will be processed and stored by the Data Controller for the entire duration of the contractual relationship between the User and the Data Controller and, at the end of the same for any reason, they will be kept for the foreseen time – for each category of data – by current accounting, tax, civil and procedural legislation.
For the purposes referred to in letters “c” (marketing and profiling) and “d” (marketing and profiling by third parties), the User’s personal data will be processed and stored by the Data Controller until the User’s consent is revoked or until the exercise, by the User, of the right to object to the processing or of the cancellation of personal data.
For the purposes referred to in letters “e” (curricula vitae), the User’s personal data may be processed and stored by the Data Controller for a maximum period of 12 months from the date of receipt.
In your capacity as an interested party and in relation to the treatments described in this information, the user has the rights referred to in articles 7, from 15 to 21 and 77 of the GDPR and, in particular, on:
-right of access – Article 15 of the GDPR: right to obtain confirmation that personal data concerning the User is currently being processed and, in this case, obtain access to such personal data, including a copy of the same;
-right of rectification – article 16 GDPR: right to obtain, without undue delay, the rectification of inaccurate personal data concerning the User and / or the integration of incomplete personal data; right to erasure (right to be forgotten) – article 17 GDPR:
-right to obtain, without undue delay, the erasure of personal data concerning the User;
-right to limitation of treatment – article 18 GDPR:
-right to obtain the limitation of treatment, when: the interested party disputes the accuracy of personal data, for the period necessary for the Data Controller to verify the accuracy of such data; the processing is illegal and the interested party opposes the cancellation of personal data and instead requests that their use be limited; personal data are necessary for the interested party to ascertain, exercise or defend a right in court; the interested party opposed the treatment pursuant to art. 21 GDPR, in the waiting period of the verification regarding the possible prevalence of legitimate reasons of the Data Controller compared to those of the interested party;
-right to data portability – article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning the User provided to the Data Controller and the right to transmit them to another Data Controller without impediments, if the treatment is based on consent and is carried out by automated means. In addition, the right to obtain that the User’s personal data is transmitted directly to another Data Controller if this is technically feasible;
-right of opposition – Article 21 GDPR: right to object, at any time for reasons related to your particular situation, to the processing of personal data concerning the User based on the condition of lawfulness of the legitimate interest or the execution of a task of interest public or the exercise of public powers, including profiling, unless there are legitimate reasons for the Data Controller to continue processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court. Furthermore, the right to object at any time to the processing if personal data are processed for direct marketing purposes, including profiling, insofar as it is connected to such direct marketing;
-right of revocation – article 7 GDPR: the User has the right to withdraw his consent at any time. The withdrawal of consent does not affect the lawfulness of the treatment based on consent before the revocation; right of complaint – article 77 GDPR: the User has the right to lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio 121, 00186, Rome (RM).
METHOD OF EXERCISE OF RIGHTS
The User can exercise their rights at any time by sending a registered letter with return receipt. to:
ITALFIT MAGNETI SRL – Via F. Comelli 39, 33034 FAGAGNA (UD).
For the exercise of the rights as indicated in this Notice as well as to receive any information relating to them, the User may contact the Data Controller or the DPO who, also through the designated structures, will take care of the request and provide the User , without undue delay and in any case, at the latest, within one month of receipt of the same, information relating to the action taken regarding the request.
The exercise of rights by the User is free of charge pursuant to Article 12 of the GDPR.
However, in the case of manifestly unfounded or excessive requests, also for their repetitiveness, the Data Controller may charge the User a reasonable expense contribution, in light of the administrative costs incurred to manage his request, or deny the satisfaction of his request.
Cookies consist of portions of code installed in the browser that assist the Owner in providing the Service according to the purposes described.
Some of the purposes for installing Cookies may also require the User’s consent.
When the installation of Cookies takes place on the basis of consent, this consent can be freely revoked at any time by following the instructions contained in this document.
Technical and statistical aggregate cookies · Activities strictly necessary for operation · Activities for saving preferences, optimization and statistics Other types of cookies or third-party tools that could install them Some of the services listed below collect statistics in aggregate and anonymous form and may not require the User’s consent or could be managed directly by the Owner – depending on what is described – without the help of third parties. If among the tools indicated below there were services managed by third parties, these could – in addition to what is specified and also without the knowledge of the owner – perform user tracking activities. For detailed information, we recommend that you consult the privacy policies of the services listed. Tag management Interaction with social networks and external platforms SPAM protection ·Statistics How can I express consent to the installation of cookies? In addition to what is indicated in this document, the User can manage preferences relating to Cookies directly within his browser and prevent – for example – that third parties can install them. Through the browser preferences it is also possible to delete the cookies installed in the past, including the cookie in which the consent to the installation of cookies by this site is eventually saved. The User can find information on how to manage cookies with some of the most popular browsers, for example at the following addresses: SOME EXAMPLES Google Chrome, Mozilla Firefox, Apple Safari and Microsoft