NOTICE
within the meaning and for the purposes of Art 13 of the EU Regulation
of April 27
th
2016 n° 679 “General Data Protection Regulation”
Purposes and Lawfulness of Personal Data Processing
Personal data collection and processing are carried out to:
-
provide information of administrative, commercial or technical nature
concerning BRAMBATI SpA products/services;
-
send communications/invitations concerning exhibitions organized by the
Company;
-
carry out statistical analyses.
Personal data will be processed according to the principles of correctness,
lawfulness, transparency and protection of your privacy as well as of your
rights.
The personal data that the Data Processing Controller may collect are as
follows:
a) identification data, such as name and surname, e-mail address, country
of origin.
The lawfulness of the processing is based on:
-
explicit consent (pursuant to Art. 6.1, Letter a) of the GDPR).
Processing Modes
Data processing for the purposes concerning the access to the website of
the Company takes place both by means of automated modes, on electronic or
magnetic support, and by means of non-automated modes, on paper support, in
compliance with the privacy and security rules envisaged by the law, by
consequent regulations as well as by internal provisions.
Data are always processed in full compliance with the principle of the
proportionality of the processing, according to which all personal data and
the different modes of their processing shall be relevant and not in excess
compared to the purposes to be achieved.
Stored data are protected by adequate security measures, so as to reduce
the hazard of fortuitous loss or unauthorized access as well as of
processing not consented or not complying with the mentioned purposes. No
automated decision-making is available.
Location of Processing
Data are processed and stored at the seat of Codevilla (PV), via Strada
Nuova 37. Furthermore, they are processed, on behalf of the Company, by
Processors whose list may be asked for to the Controller of the Processing.
Mandatory nature of providing the requested data and consequences of an
objection to provide them
Providing the requested data is mandatory for the purposes mentioned and,
therefore, an objection to give the consent may bring about the
impossibility for BRAMBATI SpA to allow carrying out what
is envisaged in the purposes.
Data Communication
Data may be transferred to professionals and/or companies charged with
carrying out technical and development activities as well as to
employees/collaborators of BRAMBATI SpA.
Data Transfer Abroad
Your personal data will not be communicated to other companies with head
offices in third extra-European Countries.
Data Storage Duration
Your personal data concerning the access to the website of the Company will
be processed for 5 years. At the end of processing, your personal data can:
-
be further processed, if contractual relationships with BRAMBATI SpA (for instance, customers, suppliers,
collaborators, …) are formalized. In such case, further notices will be
released concerning the collected data and the purposes of further
processing;
-
be eliminated, if they result to be of no use;
-
be stored, while taking adequate measures to assure integrity,
availability and privacy.
Data Subject’s Rights
As to personal data, the Employee may exercise the rights pursuant to
Chapter III of EU Reg. 2016/679 (a copy of which is attached herewith) in
the limits and under the conditions pursuant to articles 15 – 23 of said
Regulation. In particular, BRAMBATI SpA assure and
acknowledge Data Subjects the exercise of the following rights:
-
the right to access to the personal data available in their own paper
and/or electronic records;
-
the right to require their correction, updating and erasure, if they
are incomplete or wrong as well as the right to object to their
processing for legitimate and specific reasons;
-
the right to obtain the correction of inexact personal data without
undue delay. Taking into account the purposes of processing, the Data
Subject has the right to obtain the integration of incomplete personal
data, also by providing an integrative notice;
-
the right to obtain the erasure of personal data concerning him or her
without undue delay, where one of the following grounds pursuant to
Art. 17, sub-section 1 of the Regulation applies;
-
the right to obtain the restriction of processing, whenever one of the
cases pursuant to Art. 18, Sub-section 1 of the Regulation occurs;
-
the right to lodge a complaint with a Supervisory Authority; as well as
to exercise the other rights acknowledged by the applicable framework.
The Data Subject may exercise his/her own rights by contacting the
Controller of Processing via the contact details mentioned hereinafter.
Controller of Processing
The above mentioned rights can be exercised, even through an officer, by
means of request to Titolare del Trattamento dei dati at
the Company Head Office in via Strada Nuova 37 – Codevilla (PV) - Tel. 0383
373100 or at the following e-mail address:
titolare_trattamento@brambati.it
.
The Controller of Processing
is BRAMBATI SpA, via Strada Nuova 37 – Codevilla (PV) -
Tel. 0383 373100 represented by their Legal Representative, dott. Fabrizio
Brambati. E-mail
titolare_trattamento@brambati.it
The complete text of the EU Reg. 2016/679 (GDPR) is available on the
website of the Supervisory Authority www.garanteprivacy.it.
Codevilla, 24/05/2018
BRAMBATI SpA
ATTACHMENT: ABSTRACT FROM CHAPTER III “DATA SUBJECT’S RIGHTS” EU Reg
2016/679
Article 15 -
Data Subject’s Access Right
1. The Data Subject shall have the right to obtain from the Controller of
Processing confirmation as to whether or not personal data concerning him
or her are being processed, and, where that is the case, access to the
personal data and the following information:
a) the purposes of processing;
b) the categories of personal data concerned;
c) the recipients or the categories of recipients your personal data are
disclosed to or will be disclosed to, in particular if they are recipients
of third countries or international organizations;
d) where possible, the envisaged period for which the personal data will be
stored, or, if not possible, the criteria used to determine that period;
e) the existence of the Data Subject’s right to request from the Controller
rectification or erasure of personal data or restriction of processing of
personal data concerning the Data Subject or to object to such processing;
f) the right to lodge a complaint with a Supervisory Authority;
g) where the data are not collected from the Data Subject, any available
information as to their source;
h) the existence of automated decision-making, including profiling,
referred to in Article 22, paragraphs 1 and 4 and, at least in those cases,
meaningful information about the logic involved as well as the significance
and the envisaged consequences of such processing for the Data Subject.
2. Where personal data are transferred to a third country or to an
international organisation, the Data Subject shall have the right to be
informed on the appropriate safeguards pursuant to Article 46 relating to
the transfer.
3. The Controller shall provide a copy of the personal data undergoing
processing. For any further copies requested by the Data Subject, the
Controller may charge a reasonable fee based on administrative costs. Where
the Data Subject makes the request by electronic means, and unless
otherwise requested by the Data Subject, the information shall be provided
in a commonly used electronic form. 4. The right to obtain a copy referred
to in paragraph 3 shall not adversely affect the rights and freedoms of
others.
ACCEPT