INFORMATION FOR THE PROCESSING OF PERSONAL DATA

The company CAV. METALLO S.r.l., with registered office in Loc. Principessa SS18 – CAMPORA SAN GIOVANNI – 87032 AMANTEA and VAT number 00894720788 (hereinafter referred to as “Data Controller“), in its capacity as data controller, informs you pursuant to Articles 7 and 13 of EU Regulation No. 2016/679 – “General Data Protection Regulation” (hereinafter, “GDPR“) that your data will be processed in the following ways and for the following purposes:

  1. Object of Processing

The Data Controller processes your personal identification contact data (name, surname, address, telephone numbers, email) voluntarily provided by you to request information about our services.

  1. Purpose of Processing

Your personal data is processed with your specific consent (GDPR Article 7), obtained directly on our website, for the sole purpose of sending you, via email and/or telephone contacts, the information you requested.

Consent is implicitly expressed by you when you submit the first request and is expected to be stored in our archives to allow us to send you subsequent communications for the same purposes, without prejudice to your right to withdraw consent at any time (GDPR Article 7, paragraph 3) in the manner described in paragraph 9 below.

  1. Processing Methods

The processing of your personal data is carried out through the following operations: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, communication, deletion.

Data processing is carried out using collection IT tools, with logic strictly and solely related to the purposes mentioned in paragraph 2 and, in any case, with specific adoption of precautions aimed at allowing access and use only to authorized operators who need it to ensure adequate handling. No automated processing is foreseen; every contact activity is subject to a person’s decision.

  1. Access to Data

Your personal identification data may be made accessible for the purposes referred to in paragraph 2 exclusively to employees and collaborators of the Data Controller, appointed as internal data processors. No transfer to third parties is foreseen.

The Data Controller and both internal and external Data Processors adopt data protection methods, implementing technical and organizational measures adequate to ensure that processing meets the default settings for the specific purposes declared in point 2.

  1. Data Communication

No communication of the data you provided is foreseen for the purposes indicated in paragraph 2.

  1. Data Transfer

Your personal data is stored on company servers located at the Data Controller’s registered office.

Pursuant to Article 13, paragraph 1, letter (f) of the GDPR, it is informed that no transfer of the collected data to a third country or an international organization is foreseen, neither within nor outside the European Union.

  1. Nature of Data Provision and Consequences of Refusal to Respond

The provision of data for the purposes referred to in paragraph 2 is optional; you may decide to deny consent to processing, but in that case, we will not be able to provide you with the information you requested.

  1. Data Retention Period and Other Information

The personal data subject to processing referred to in point 2 will be retained for 12 months or a shorter period if your request for specific consent withdrawal intervenes.

  1. Rights of the Data Subject

As a data subject, you have the rights expressed in Article 15 of the GDPR, specifically the rights to:

  • Obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
  • Obtain the indication:
  • Of the origin of personal data;
  • Of the purposes and methods of processing;
  • Of the logic applied in case of processing carried out with the aid of electronic instruments;
  • Of the identification details of the data controller and the processors designated pursuant to Article 3, paragraph 1, GDPR;
  • Of the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as designated representatives in the State’s territory, processors, or appointees;

Obtain:

  • The updating, rectification, or, when interested, integration of data;
  • The deletion, transformation into anonymous form, or blocking of data processed in violation of the law, including those for which retention is unnecessary for the purposes for which the data was collected or subsequently processed;
  • Oppose, in whole or in part:
  • For legitimate reasons, the processing of personal data concerning you, even if pertinent to the purpose of collection;
  • The processing of personal data concerning you for the purpose of sending advertising material or direct sales or for commercial communication, using email systems and/or traditional contact methods via telephone and/or paper mail.
  • Where applicable, you also have the rights referred to in Articles 16-21 GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.
  1. Methods of Exercising Rights

You may exercise the rights referred to in the previous point 9 at any time by sending an email to info@baiaditempsa.it