A. Without the express consent of the interested party for:
The request for registration to the website;
Receipt of a message sent via the "Contact" form. When completing the form, personal data are requested (name, surname, e-mail) with which the user will be identified in order to send a reply to the e-mail address indicated.
B. With the consent of the interested party to register for the newsletter service provided by the Data Controller.
4. Methods of processing
Personal data are subject to treatment based on principles of correctness, lawfulness and transparency. The company ensures that the processing of data carried out with or without the aid of electronic or automated means, will take place through appropriate tools to ensure the security and confidentiality of the person concerned, through the use of appropriate procedures that avoid the risk of loss , unauthorized access, illicit use and dissemination, in compliance with the limits and conditions set forth in EU Regulation 2016/679.Personal data are subjected to both paper and electronic and / or automated processing. The data are processed by our staff, where engaged in the execution of the mandate given to us.
5. Access to data
The subjects who can become aware of the personal data of the user as managers or agents (according to Article 13 Paragraph 1 of the GDPR) are:
The Data Controller
Personal data will not be disclosed to third parties.
6. Data communication
The data may be communicated to supervisory bodies, judicial authorities and other third parties to whom the communication is mandatory by law, including the area of prevention / repression of any illegal activity related to access to the site and / or to the sending a request.
7. Data transfer
The management and storage of personal data will be carried out on servers located in Italy of the Data Controller.
The data will not be transferred to outside the European Union.
8. Data retention period
The personal data of users of the site who send a request for information via the contact form, will be kept for the time strictly necessary for the fulfillment of the request, for the purposes described in point 3.
The data collected for the website registration activities and subscription to the newsletter service will be included in the company database and kept for the duration of the service, after which they will be deleted or made anonymous within the time established by the law .
If the withdrawal of consent to the specific treatment by the interested party intervenes, the data will be deleted or made anonymous within 72 hours from the receipt of the revocation.
Pursuant to Art. 13, paragraph 2, letter (f) of the Regulations, we inform that all data collected will not be subject to any automated decision making process, including profiling.
9. Rights of the interested party
Users can always exercise the rights specified in the articles 13 (Comma 2), 15, 18, 19 and 21 of the GDPR, summarized here in the following points:
The interested party has the right to obtain confirmation of the existence of data concerning him, even if not yet communicated, and to have their communication in an intelligible form;
The interested party has the right to ask the Data Controller to access personal data, to integrate, correct, delete or limit the processing that concerns them or to oppose their treatment, in addition to the right to be transferred some data;
You have the right to lodge a complaint with the Guarantor for the protection of personal data, following the procedures and instructions published on the official website of the Authority on garanteprivacy.it;
The exercise of rights is not subject to any form constraint and is free.
Starting from the receipt of this informative communication, it will be considered the consent to the processing of personal data referred to in the points above.
10. How to exercise rights
Users can exercise their rights at any time by sending an email to email@example.com
Or writing by mail to:
OFFICINE BRUGNETTI SRL
Via Favaron 68
20834 Nova Milanese (MB)