Information on the processing of personal data pursuant to Art. 13 of the European Regulation n.679 / 2016 concerning the protection of natural persons with regard to the processing of personal data (GDPR)
before proceeding to the processing of your data, as required by the European General Regulation on the Protection of Personal Data (GDPR 2016/679, Article 13), we wish to inform you that your personal data, provided to us, are processed both in paper and electronic form for the purposes indicated below, In accordance with the GDPR, we are providing you with the following information
Tecnica Group S.p.A. with registered office in Italy at Via Fante d’Italia, 56 – 31040- Giavera del Montello (TV), (hereinafter “the Company or Data Controller”), is the Data Controller of the personal data.
In this capacity, it is responsible for ensuring the application of organizational and technical measures necessary and adequate for the protection of your data.
The Company has identified a Privacy Focal Committee, a committee that collaborates with the Data Controller in applying the protection measures identified, and composed by the Contact Persons of the Legal, IT and Human Resources pro tempore appointed, domiciled at the Tecnica’s headquarter.
These subjects can be contacted for questions concerning the processing of your data, at the following address: firstname.lastname@example.org.
For further information regarding your rights, please consider the section entitled “Rights of data subject”.
Purposes and legal basis of the processing
The processing of your personal data will take place, for the purposes described below, in accordance with current legislation on Privacy, so the Company undertakes to treat them according to principles of fairness, lawfulness, transparency, in compliance with the purposes set out below, collecting them to the extent necessary and exact for the treatment, using them only by personnel to the authorized purpose.
The legal basis of the processing is identified in the consent by the data subject with reference to the processing of personal data.
Data will be processed in paper form and through IT tools with security and confidentiality profiles suitable to guarantee security and confidentiality and to prevent unauthorized access to personal data.
1. Main purposes of processing
The personal data of the data subject are processed for the purpose of responding to requests for information and / or requests for contact in relation to which the data subject enters his personal data in the appropriate formats on the Company’s website and for any related purposes connected with the fulfillment of the obligations deriving from national and community legislation or provided by authorities according to the law.
2. Marketing purposes
Sending of communications from the Data Controller, also through Data Processors, for marketing purposes, including commercial communication, organization of events, forwarding of advertising material and carrying out market research, opinion polls and statistical analysis for marketing purposes. This can be done through the use of automated call and / or e-mail and / or fax and / or SMS and / or MMS and / or other messaging and / or newsletter services, and / or through traditional marketing methods such as for example telephone and / or communications forwarded by paper mail.
3. Profiling purposes
Treatment by the Data Controller, also through Data Processors, consisting of an analysis of your interests, definition of the purchase profile, analysis of habits or purchase choices, monitoring of the use of electronic communication services, opinion polls and statistical analysis for profiling purposes, also through the use of automated call and / or e-mail and / or fax and / or SMS and / or MMS and / or other messaging services and / or newsletters and / or telephone and / or mail paper.
Nature of the processing
We wish to remind you that the provision of your personal data for the purposes stated under point 1) is mandatory for the performance of the respective processing purpose; your refusal to supply them or the incorrect communication of one of the necessary information makes it impossible for the Data Controller to fulfil the request for contact and / or request for information by the data subject.
The processing of your data for the purposes under point 2) and/or 3) is optional and the relative process expressly requires your consent; your refusal does not prejudice, in any way, the finalization of any further relations with the Company.
Way of processing and Data Retention Period
The data are processed electronically and in paper form, by means of instruments that guarantee the security and confidentiality of data, in compliance with the provisions of Chapter II (Principles) and Chapter IV (Data Controller and Data Processor) of the GDPR.
The processing may also be performed through automated tools able to store, manage or transmit the data and, in any case, will be executed in compliance with the GDPR.
The processing of your personal data is carried out by means of the operations indicated in art. 4, n. 2) of the GDPR, to which reference should be made for any useful purpose.
In relation to the different purposes for which they were collected, personal data will be kept for the time required by applicable law, for a period of time not exceeding that necessary to achieve the purposes outlined above.
Regarding marketing purposes, your data will be kept for a maximum period of twenty-four months from the collection of the same.
As for the purposes of profiling, your data will be stored for a maximum period of twelve months from the collection of the same.
At the end of this period, the data will be totally or partially deleted automatically (pursuant to applicable legislation), or rendered anonymously so as not to allow, even indirectly or by linking other databases, the identification of the data subject.
To whom we disclose the Personal Data
The personal data collected may also be communicated to other companies that are the parent company, subsidiaries or affiliates pursuant to art. 2359 of the Italian Civil Code.
The personal data collected will not be disclosed and may be known, within the limits necessary and for the purposes indicated, by employees and collaborators of the Company, as they are authorized pursuant to Art. 29 of the GDPR, as well as communicated to the following third parties, appointed by the Data Controller, as Data Processor to the processing of personal data pursuant to Article 28 of the GDPR, by means of a dedicated appointment, with details of the processing methods and security measures that they will have to adopt for the management and storage of personal data of which the Company is the Data Controller.
By way of example, the data may be communicated to:
The data may also be transmitted to the Public Safety Authority or to Judicial Authority upon request.
The complete list of the subjects to whom your personal data have been or may be communicated is at your disposal upon your request to be sent via e-mail to the following address: email@example.com, specifying in the subject the request “List of data Processor”.
Data Transfer Abroad
The management and storage of personal data will take place on servers, located within the European Union, of the Data Controller and / or third-party companies appointed and duly appointed as Data Processors.
The data are not currently subject to transfer outside the European Union. In any case, it is understood that the Data Controller, where necessary, will have the right to move the location of the servers within the European Union and / or in non-EU countries.
In this case, the Data Controller hereby ensures that the transfer of Extra-EU data will take place in accordance with Articles 44 ss. of the GDPR and with the applicable legal provisions, by entering, if necessary, into agreements that guarantee an adequate level of protection.
Rights of the data subjects
We inform you that with reference to the data processed by the Company, you can exercise at any time the rights stated by Articles 15, 16, 17. 18, 20 e 21 of the GDPR.
(a) You have the possibility to obtain from the Data Controller confirmation of the existence or not of personal data concerning you, and in this case, access to the following information:
(b) In addition, you have the right to:
To this purpose, the Company invites you to submit, free of charge, your request in writing, including date and signature, by sending it by e-mail, to the following e-mail address: firstname.lastname@example.org, specifying in the subject the request “exercise rights by the data subject”.
We inform you that the Company undertakes to respond to your requests within one month, except in the case of particular complexity, so it could take up to 3 months. In any case, we will explain the reason for waiting within one month from your request.
The outcome of your request will be provided in writing or in electronic format. In the event you request correction, cancellation and limitation of processing, the Company undertakes to communicate the results of your requests to each of the recipients of your data, unless this proves impossible or involves a disproportionate effort.
Please remember that the withdrawal of consent does not affect the lawfulness of the processing based on consent before revocation.
The Company may require a contribution if your requests are manifestly unfounded, excessive or repetitive; in this regard the Company has provided itself with a register to track your requests for intervention.
Changes to this privacy information
This information notice may change or updated. It is therefore advisable to regularly check this information and refer to the latest version.