Contact Us

NOTICE

within the meaning and for the purposes of Art 13 of the EU Regulation of April 27 ^th 2016 n° 679 “General Data Protection Regulation”

Purposes and Lawfulness of Personal Data Processing

Personal data collection and processing are carried out to:

• provide information of administrative, commercial or technical nature concerning BRAMBATI SpA products/services;
• send communications/invitations concerning exhibitions organized by the Company;
• carry out statistical analyses.

Personal data will be processed according to the principles of correctness, lawfulness, transparency and protection of your privacy as well as of your rights.

The personal data that the Data Processing Controller may collect are as follows:

a) identification data, such as name and surname, e-mail address, country of origin.

The lawfulness of the processing is based on:

• explicit consent (pursuant to Art. 6.1, Letter a) of the GDPR).

Processing Modes

Data processing for the purposes concerning the access to the website of the Company takes place both by means of automated modes, on electronic or magnetic support, and by means of non-automated modes, on paper support, in compliance with the privacy and security rules envisaged by the law, by consequent regulations as well as by internal provisions.

Data are always processed in full compliance with the principle of the proportionality of the processing, according to which all personal data and the different modes of their processing shall be relevant and not in excess compared to the purposes to be achieved.

Stored data are protected by adequate security measures, so as to reduce the hazard of fortuitous loss or unauthorized access as well as of processing not consented or not complying with the mentioned purposes. No automated decision-making is available.

Location of Processing

Data are processed and stored at the seat of Codevilla (PV), via Strada Nuova 37. Furthermore, they are processed, on behalf of the Company, by Processors whose list may be asked for to the Controller of the Processing.

Mandatory nature of providing the requested data and consequences of an objection to provide them

Providing the requested data is mandatory for the purposes mentioned and, therefore, an objection to give the consent may bring about the impossibility for BRAMBATI SpA to allow carrying out what is envisaged in the purposes.

Data Communication

Data may be transferred to professionals and/or companies charged with carrying out technical and development activities as well as to employees/collaborators of BRAMBATI SpA.

Data Transfer Abroad

Your personal data will not be communicated to other companies with head offices in third extra-European Countries.

Data Storage Duration

Your personal data concerning the access to the website of the Company will be processed for 5 years. At the end of processing, your personal data can:

• be further processed, if contractual relationships with BRAMBATI SpA (for instance, customers, suppliers, collaborators, …) are formalized. In such case, further notices will be released concerning the collected data and the purposes of further processing;
• be eliminated, if they result to be of no use;
• be stored, while taking adequate measures to assure integrity, availability and privacy.

Data Subject’s Rights

As to personal data, the Employee may exercise the rights pursuant to Chapter III of EU Reg. 2016/679 (a copy of which is attached herewith) in the limits and under the conditions pursuant to articles 15 – 23 of said Regulation. In particular, BRAMBATI SpA assure and acknowledge Data Subjects the exercise of the following rights:

• the right to access to the personal data available in their own paper and/or electronic records;
• the right to require their correction, updating and erasure, if they are incomplete or wrong as well as the right to object to their processing for legitimate and specific reasons;
• the right to obtain the correction of inexact personal data without undue delay. Taking into account the purposes of processing, the Data Subject has the right to obtain the integration of incomplete personal data, also by providing an integrative notice;
• the right to obtain the erasure of personal data concerning him or her without undue delay, where one of the following grounds pursuant to Art. 17, sub-section 1 of the Regulation applies;
• the right to obtain the restriction of processing, whenever one of the cases pursuant to Art. 18, Sub-section 1 of the Regulation occurs;
• the right to lodge a complaint with a Supervisory Authority; as well as to exercise the other rights acknowledged by the applicable framework.

The Data Subject may exercise his/her own rights by contacting the Controller of Processing via the contact details mentioned hereinafter.

Controller of Processing

The above mentioned rights can be exercised, even through an officer, by means of request to Titolare del Trattamento dei dati at the Company Head Office in via Strada Nuova 37 – Codevilla (PV) - Tel. 0383 373100 or at the following e-mail address: titolare_trattamento@brambati.it .

The Controller of Processing is BRAMBATI SpA, via Strada Nuova 37 – Codevilla (PV) - Tel. 0383 373100 represented by their Legal Representative, dott. Fabrizio Brambati. E-mail titolare_trattamento@brambati.it

The complete text of the EU Reg. 2016/679 (GDPR) is available on the website of the Supervisory Authority www.garanteprivacy.it.

Codevilla, 24/05/2018

BRAMBATI SpA

ATTACHMENT: ABSTRACT FROM CHAPTER III “DATA SUBJECT’S RIGHTS” EU Reg 2016/679

Article 15 - Data Subject’s Access Right

1. The Data Subject shall have the right to obtain from the Controller of Processing confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

a) the purposes of processing;

b) the categories of personal data concerned;

c) the recipients or the categories of recipients your personal data are disclosed to or will be disclosed to, in particular if they are recipients of third countries or international organizations;

d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;

e) the existence of the Data Subject’s right to request from the Controller rectification or erasure of personal data or restriction of processing of personal data concerning the Data Subject or to object to such processing;

f) the right to lodge a complaint with a Supervisory Authority;

g) where the data are not collected from the Data Subject, any available information as to their source;

h) the existence of automated decision-making, including profiling, referred to in Article 22, paragraphs 1 and 4 and, at least in those cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such processing for the Data Subject.

2. Where personal data are transferred to a third country or to an international organisation, the Data Subject shall have the right to be informed on the appropriate safeguards pursuant to Article 46 relating to the transfer.

3. The Controller shall provide a copy of the personal data undergoing processing. For any further copies requested by the Data Subject, the Controller may charge a reasonable fee based on administrative costs. Where the Data Subject makes the request by electronic means, and unless otherwise requested by the Data Subject, the information shall be provided in a commonly used electronic form. 4. The right to obtain a copy referred to in paragraph 3 shall not adversely affect the rights and freedoms of others.

ACCEPT