ACT OF INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 12, 13 AND 14 REG.2016/679/UE
the present to inform/update you in relation to the processing of your personal data carried out by our company in accordance with the European Data Protection Regulation, Reg. 2016/679/EU (hereinafter the “Regulation”), directly applicable from 25 May 2018. We therefore provide you with the following information, which we kindly ask you to read carefully, print and keep for future use, remaining available for any clarification.
This information on the processing of personal data is provided by Hymson Italy S.r.l., CF and P.IVA 04225530247, with registered office in Via Serra,50 – 36030 Lugo di Vicenza (VI), tel. +39 0445 1887072, PEC: email@example.com.
Which personal data we process, for what purposes, on what legal basis.
Our company processes common personal data provided directly by the data subject and strictly necessary for the purposes indicated below:
A) management of contractual and commercial relations: personal data are acquired and processed for purposes connected and instrumental to the establishment of a contractual relationship, the management of existing commercial and/or contractual relations, the fulfilment of the consequent pre-contractual and contractual obligations of a legal, administrative and fiscal nature, the documentation of the activity carried out, as well as the protection of our receivables and/or rights deriving from each relationship. The processing is carried out on the basis, as the case may be, of art. 6 letter b), c) and/or f) of the legitimate interest pursued through the processing of the data thus collected and, in particular, the right to exercise its business activities, as well as the protection and defence of its rights;
B) commercial promotion/marketing activities: the contact details provided may also be used for commercial promotion activities for its own products and/or services and/or those of its partners, for invitations to seminars or marketing events or for sending questionnaires in order to verify the quality of the products and/or services offered and this is done either by email or by telephone calls with an operator in compliance with the applicable regulations. The data will be used for commercial promotion/marketing purposes, subject to the consent of the interested party except in cases where consent according to applicable legislation is not necessary. We specify that consent is optional and always revocable by sending an e-mail to firstname.lastname@example.org or by following the instructions indicated in the communications sent from time to time. in cases where consent is necessary, the data will be processed for the purposes indicated in the said consent pursuant to art. 6 n. 1 letter a) of the Regulation. In cases where the consent is not necessary according to the applicable legislation, the data are processed on the basis of the legitimate interest to carry out business and direct marketing activities pursuant to art. 6 letter f) of the Regulation. The interested party is – in any case – always free to oppose the processing for marketing purposes at any time in accordance with the provisions of art. 21, paragraph 2, of the Regulation.
Data processing modalities
Personal data are processed both on paper and with the aid of electronic/informatics systems and with the use of measures to ensure confidentiality and to prevent access by unauthorized parties.
Duration of data processing
The personal data processed for the purposes referred to in letter a) of this information notice will be processed for the entire duration of the contractual relationship and even afterwards for the fulfilment of legal obligations, for administrative and commercial purposes, as well as for probative purposes, for the entire duration prescribed by law and, in any case, until the prescription of any legal action against or to protect the writer. The personal data processed for commercial promotion purposes referred to in letter b) of this notice will, however, be kept until deemed useful for the marketing purposes indicated above, without prejudice to the exercise by the person concerned of the rights provided for in the regulation, including those of opposition and cancellation.
In the performance of the contractual relationship, some personal data may, where necessary from time to time, be disclosed to third parties who will use such data for the same purposes indicated in letter a) of the information notice or for purposes related to them and in particular to: i) credit institutions, for the management of collections and payments; ii) third party producers and/or suppliers and in assistance or to third party suppliers of subcontracted services, in order to allow the requested supply or the preparation of the requested offer; iii) our collaborators and employees duly authorized within the relevant tasks; iv) credit insurance companies; v) commercial information companies; vi) professionals and consultants; vii) companies operating in the transport sector; viii) supplier companies. The personal data provided for the purposes and to the subjects listed above will not be further disclosed.
User navigation data
The computer systems and programs used for the functioning of the site collect some personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses or domain names of computers used by users who connect to the site, URI – Uniform Resource Identifier – addresses of the requested resources, time of the request, method used to submit the request to the server, size of the file obtained in response, numerical code about the status of the response made by the server -good end, error, etc.- and other parameters relating to the operating system and computer environment of the user). Although this information is not collected to be associated with identified data subjects, by its nature it could, through processing and association with data held by third parties, allow users to be identified.
Such data are used for the sole purpose of obtaining statistical information not associated with any user identification data on the use of the site and to check its correct functioning and are deleted immediately after processing.
The data may be used to ascertain responsibility in the event of hypothetical computer crimes against the Site.
The legal basis for the processing is therefore the legitimate interest in the functioning and security of the site.
Data provided voluntarily by the user
Without prejudice to the above, no personal data is required for consultation of the site, which the user may provide voluntarily in the following circumstances.
The compilation of the “Contacts” section involves the provision of the following data: Name*, Surname*, Company*, E-mail*, Telephone*, Country*, Address, City, Province, Website, Message area. These data are necessary to respond to requests (fields marked with * are mandatory). These data will be processed for the sole purpose of responding to the user’s request and kept for as long as necessary.
Subscribe to the “Newsletter”, through the appropriate section of the Site, to receive periodic information about our products and services. You may revoke your consent to subscribe to the newsletter at any time by means of the appropriate link in the newsletter itself or by contacting the Data Controller.
Nature of data collection and consequences of failure to provide data
With regard to the data that we are obliged to know and/or communicate in order to execute the contract and/or the request for information or business contacts that we may receive or to fulfil our obligations under contracts with third parties (software licensing and support services), laws, regulations or Community legislation or provisions issued by authorities empowered to do so by law and by supervisory and control bodies, the conferment is mandatory. failure to provide such data may make it impossible for us to establish or continue the contractual and/or commercial relationship, to the extent that such data is necessary for the execution of the same. with regard to data that we are not obliged to know, the failure to provide such data will be evaluated from time to time and will determine decisions or measures related to the importance of the data requested with respect to the management of the commercial and/or contractual relationship and of which the data subject will be informed from time to time.
Rights of the interested party
The data subject has the right to ask the data controller for access to the personal data concerning him/her and the rectification or cancellation of such data or the limitation of the processing thereof, as well as the right to object to their processing and the right to the portability of the data in accordance with the provisions of the Regulation (Articles 15 et seq. of the Regulation). In cases where the processing is based on consent, the consent to the processing of the data provided may be revoked at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation. The data subject is also entitled to lodge a complaint with the relevant supervisory authority, the Data Protection Supervisor. Requests to exercise the rights may be sent to the PEC address: email@example.com, or by registered mail to the address of the registered office, specifying in the request the right that the data subject wishes to exercise together with a valid e-mail address to which the response can be sent.