This information is disclosed under art. 13 of EU Regulation 2016/679 for those who interact with the Elettric80 S.p.A. web services available electronically starting at the following address https://www.elettric80.com/ and with the social networks (Facebook, Instagram, Linkedin, YouTube, Vimeo) referring to the same company.
It should be noted that this information is provided exclusively for the Elettric80 S.p.A. website and the aforementioned social networks and not for any other websites that may be consulted by the user through links in the same Elettric80 S.p.A. website.
The information also follows Recommendation no. 2/2001 that the European authorities for the protection of personal data, combined in the Group created by art. 29 of directive no. 95/46 / CE, adopted on May 1, 2001 to identify some minimum requirements for the collection of personal data on-line, and, in particular, the methods, times and nature of the information that the data processing controllers have to supply to the users when they connect to web pages, regardless of the purpose of the said connection.
DATA PROCESSING CONTROLLER
The data processing controller is Elettric80 SpA in person of its legal representative pro tempore, with headquarter in Viano (RE), Via Marconi n. 23 / e-mail: email@example.com - Tel. (0039) 0522 76 20 11- Fax (0039) 0522 98 84 81
PLACE OF DATA PROCESSING
The processing connected to the web services of this site take place at the headquarter of the Company and are handled only by technical staff or by parties occasionally performing maintenance operations.
No data deriving from the web service are communicated or disclosed.
The personal data disclosed by those who make request of informative documents are only used to perform the said service or the required task.
TYPES OF DATA PROCESSED
During their normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified data subjects, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by those who connect to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user's computer environment.
These data are used for the exclusive purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical computer crimes against the site.
The legal basis for these processing is the legitimate interest of the Controller in the technical management relating to the functionality and security of the site.
- Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message.
This processing will be made in compliance with the principles of correctness, lawfulness and transparency and protection of confidentiality as indicated in the GDPR. In particular, the newsletter service involves the acquisition of the name, and of the email.
Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request.
The legal basis of the processing is the execution of a contract of which you are a part or the execution of pre-contractual measures adopted at your request as well as the legitimate interest of the Owner to respond to user requests.
For specific marketing activities, the legal basis will be the consent.
OPTIONAL DATA SUPPLY
Aside from the above specified for navigation data, the user is free to disclose personal data. However, the failure to disclose personal data may result in the impossibility to satisfy the request.
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR and in compliance with the mandatory times prescribed by law.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
EXTRA UE DATA TRANSFER
Any transfers of personal data to a third country outside the European Union or to an international organization will take place on the basis of an adequacy decision by the Commission or, in the case of the transfers referred to in the second paragraph of Articles 46, 47 or 49 of the European Regulation, on the basis of appropriate guarantees.
RIGHTS OF DATA SUBJECT
The data subjects to whom the personal data refer have the right, at any time, to request access to the data and their correction, the erasure of the same, the limitation of the processing, the right to oppose their processing, in addition to the right to the portability of the data; they also have the right to lodge a complaint with the supervisory authority. Requests should be addressed to the Data Controller.
INFORMATION TO CUSTOMERS AND SUPPLIERS OF ELETTRIC80 SPA PURSUANT TO ART. 13 OF EUROPEAN REGULATION 2016/679
This information is prepared and released pursuant to art. 13 of the 2016/679 European Regulation (also called hereinafter simply “GDPR”), which has introduced significant regulatory changes.
This information therefore updates and replaces any previous versions released before.
That said, it should be noted that:
1) as a result of the establishment of the business relationship and during the course of the same, our company will collect and process your personal data.
2) for clarity, we specify the following definitions given by the GDPR:
Personal data: any information concerning an identified or identifiable person («data subject»); the person who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, location data, an online identifier or one or more characteristic elements of their physical identity is considered identifiable, physiological, genetic, psychological, economic, cultural or social;
Usage Data: the information collected automatically through this website (also from third party applications integrated into this website), including: IP addresses or domain names of the computers used by the user who connects with this website, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used to forward the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful , error, etc.) the country of origin, the characteristics of the browser and operating system used by the visitor, the various temporal connotations of the visit (for example the time spent on each page) and the details of the itinerary followed within of the Application, with particular reference to the sequence of pages consulted, the parameters relating to the operating system and the User's IT environment.
User: those who use the Web Site, unless otherwise specified, coincide with the data subject.
Data Subject: The person to whom the Personal Data refers.
Data processing: any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
Particular categories of personal data: data that reveal racial or ethnic origin, political opinions, religious or philosophical beliefs, or union membership, as well as processing genetic data, biometric data intended to uniquely identify a natural person , data relating to the health or sexual life or sexual orientation of the person.
Data Controller: the person, company, public authority, service or other body which, individually or together with others, determines the purposes and means of processing personal data.
Data Processor: the person, company, public authority, service or other body that processes personal data on behalf of the data controller.
Pursuant to and by the effect of EU Regulation 2016/679 we inform You that collection and processing of your personal data will be carried out by our company in accordance with the following:
1. Purpose and legal basis of the processing
The processing is aimed solely at the need to perform the contractual and commercial relationship of which you are a part or to perform pre-contractual activities at your request as well as to fulfil the legal obligations in administrative, accounting and corporate matters.
These needs represent the legal basis that legitimizes the consequent processing. The refusal to provide the data or the complete opposition to their processing, however, may make it impossible to continue the commercial relationship or relationships of any other nature with our company.
The processing could be aimed also to the following purposes, with Your prior consent:
- Statistical analysis (in aggregate and anonymous form)
- Sending newsletters and / or advertising material by post, e-mail, telephone, fax, sms and similar.
- Interaction with social networks referable to the Company.
- Sending information or invitations to events and related materials.
- Build a database of contacts for promotional activities relating to the products and services of Elettric80 SpA.
- Marketing relationship management.
- Carry out personnel search and selection activities for the purpose of establishing an employment relationship
The legal basis that legitimizes the consequent processing is your consent which is optional with regard to the aforementioned purposes, and any refusal to processing does not compromise the continuation of the relationship or the adequacy of the processing itself.
Elettric80 SpA will not use your data for purposes other than those described herein.
2. Duration of Processing
The data collected in relation with the execution of the contractual relationship will be stored until the termination, for any reason, of the contractual relationship or for the longer duration of the ordinary limitation period for contractual liability, subject to special needs for further data retention in relation to the contractual relationship.
The data collected in relation to the fulfilment of legal obligations in administrative, accounting and corporate matters, will be kept for the time required by the legislation that imposes the processing or for the longer limitation period of the related rights, without prejudice to special needs for further storage. of the data in relation to supervening legal obligations.
Finally, as regards the data collected for marketing or promotional purposes, they will be kept until the purposes described above are achieved, and in any case not beyond the withdrawal of the consent by the data subject.
3. Methods of data processing
The processing of data for the purposes set out above takes place via electronic, IT or paper support in compliance with the rules of confidentiality and security provided for by the aforementioned regulations and other consequent regulations.
Furthermore, specific security measures have been adopted to prevent data loss, illicit or incorrect use and unauthorized access.
The processing is carried out by the Controller and / or by the company employees of the administrative and sales sector, specially authorized, properly trained and operating under the authority and responsibility of the Controller.
You may, at any time and in written form, pursuant to art. 17 of the GDPR, exercise the right to erasure (“right to be forgotten”) of your personal data. In the absence of a request for cancellation by you, after ten years from the collection, the electronic data will be deleted from the Information Systems and the hard copies will be safely deleted.
4. Communication and / or dissemination of data
The data may be disclosed to third parties only to fulfil legal or contractual obligations. These subjects (firms or companies in the context of assistance or consultancy relationships; competent authorities for the fulfilment of legal obligations and / or provisions of public bodies on request; subjects who provide assistance for the management of the information system and telecommunications networks , IT consultants and system administrators) will perform the function of Data Processors or will operate independently as separate Data Controllers.
The list of managers is constantly updated and available at the Elettric80 SpA headquarters at the request of the data subject.
Without prejudice to this event, your personal data will not be disclosed to third parties, without your prior explicit consent.
5. Transfer of data abroad
The data is stored on servers located within the European Union.
In any case, it is understood that if necessary, the transfer of non-EU data will take place only and exclusively in compliance with the applicable legal provisions, subject to stipulation of the standard contractual clauses provided by the European Commission.
If your personal data are transferred to a third country or to an international organization, the data subject has the right to be informed of the existence of adequate guarantees pursuant to article 46 relating to the transfer.
6. Right of access by the data subject
We also inform you that in relation to the data itself, you can exercise the rights provided for in CHAPTER III art. 15 of the aforementioned Regulation, the text of which is shown below:
“1. The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
- the purposes of the processing;
- the categories of personal data concerned;
- the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
- where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
- the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
- the right to lodge a complaint with a supervisory authority;
- where the personal data are not collected from the data subject, any available information as to their source;
- the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
2. Where personal data are transferred to a third country or to an international organisation, the data subject shall have the right to be informed of the appropriate safeguards pursuant to Article 46 relating to the transfer.
3. The controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.
4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.>>
In particular, you, as data subject, have the right to obtain from the Controller the erasure of personal data concerning you, their correction or erasure, the integration of incomplete data, the limitation of processing; to receive the data in a structured format, commonly used and readable by an automatic device; to object in whole or in part to the use of the data; as well as to exercise the other rights recognized by the applicable discipline.
Pursuant to art. 77 of EU Regulation 2016/679, moreover, you have the right to lodge a complaint with the Data Protection Authority if you believe that the processing violates the aforementioned Regulation.
7. Data Controller
The data controller is Elettric80 S.p.a., with registered office in Via G. Marconi n. 23, Viano, Reggio Emilia. Through the email address firstname.lastname@example.org you can contact the Data Controller to exercise the rights referred to in art. 15, already listed, in addition to those provided for by articles art. 16 "right of rectification", art. 17 "right to erasure", art. 18 "right to limitation of processing", art. 20 "right to portability", art.21 "right of opposition" and art.22 "right of opposition to the automated decision-making process" of EU Regulation 679/2016 of which following paragraph.
8. Possible existence of an automated decision-making process
The Data Controller informs the data subject that there is no automated decision-making process including profiling, referred to in Article 22, par. 1 and 4 GDPR, on this site.
This information may undergo changes over time - also connected to the possible entry into force of new sector regulations, the updating or provision of new services or to technological innovations - so we invite you to periodically consult this page.