PERSONAL DATA PROCESSING

Customer information according to art. 13 of the GDPR 2016/679 on the processing of personal data

Data controller

The Data Controller is Pontiggia Macchine Rotanti di Pontiggia Paolo (hereinafter “Data Controller”), with registered office in Via Giuseppina 43, 26100 Cremona (CR).

It can be contacted at its headquarters, or at the telephone numbers, e-mail or certified e-mail indicated at the bottom. The treatment is based on principles of correctness, lawfulness, transparency, purpose and conservation limitation, data minimization, accuracy, integrity and confidentiality and accountability.

Purpose of the data processing and legal basis

The data collected and processed will be used exclusively for the purposes of:

a) Pre-contractual activity
b) Fulfillment of contractual obligations
c) Fulfillment of legal obligations
d) Administrative – accounting activity
e) Commercial activity
f) Supply of goods or services

All data collected are processed exclusively for obligations related to the activity of the Data Controller, whose legal bases are found in the fulfillment of contractual obligations and in the fulfillment of legal obligations to which the undersigned Controller is subject.

Nature of the provisioned of data

The provision of personal data and the consequent processing by the Data Controller, for the aforementioned purposes, are necessary for the establishment, for the continuation and for the correct management of the relationship between the Data Controller and the Data Subject or must be understood as mandatory based on law, regulation or community legislation; any refusal to provide the personal data requested may cause the impossibility, in whole or in part, to perfect and manage the existing or ongoing relationship.

Methods of data processing

The data will be processed by persons specifically authorized for processing and who operate under the responsibility of the owner with manual, computerized and telematic tools in the context and by reason of the purposes specified above and, in any case, always respecting the security and confidentiality of the same, also in compliance with current regulations.

Categories of subjects to whom the data may be communicated:

The processing of personal data will be carried out by means of subjects expressly and specifically designated as specifically trained appointees; these subjects will process the data in accordance with the instructions received from the Data Controller, according to operational profiles assigned to them in relation to the functions performed.

The data may also be processed by third parties (outsourcers), which are used for the provision of services related to the purposes pursued, which our organization evaluates from time to time, to ensure greater protection, if to appoint as external managers of the treatments from these places in place. In all cases, these subjects will process the data in accordance with the instructions received from the Data Controller, according to operational profiles attributed to them in relation to the functions performed, limited to what is necessary and instrumental for the execution of specific operations within the requested services and exclusively for the achievement of the purposes indicated in this information.

The data will not be subject to disclosure.

Duration of processing and storage

The data collected will be kept for a period of time not exceeding that necessary for the purposes for which they were collected, to fulfill contractual or pre-contractual, legal and / or regulatory obligations (without prejudice to the statutory and statutory limitations, in the respect for rights and in compliance with consequent obligations).

In particular, the criteria used to determine the retention period may be established by specific laws that regulate the activity of the Data Controller (e.g. by tax legislation regarding the processing of administrative-accounting data) or by specific provisions of the Guarantor for the protection of personal data that have regulated the processing activity and the purposes pursued by the Data Controller.

Rights of the interested party

The interested party has the rights to:

  • Obtain the cancellation or transformation into anonymous form or blocking of data processed in violation of the law;
  • Obtain the updating, correction and integration of data;
  • Obtain the attestation that these operations have been brought to the attention of those to whom the data are communicated;
  • Oppose for legitimate reasons the processing of data or any automated decision-making process (including profiling);
  • Obtain the limitation of the processing or the portability to another holder;
  • Obtain compensation for material and non-material damage.

To this end it will be necessary to send the request, through specific communication also by e-mail addressed to p.pontiggia@pontiggiamr.it (specifying in the subject “Privacy”) or by registered letter with return receipt to Pontiggia Macchine Rotanti di Pontiggia Paolo, Via Giuseppina 43, 26100 Cremona (CR). We also remind you that the interested party always has the right to lodge a complaint with the Guarantor for the protection of personal data for the exercise of his rights or for any other matter relating to the processing of his personal data. You can download the necessary forms from the institution’s website at www.garanteprivacy.it/home/modulistica-e-servizi-online. The interested party always has the right to withdraw consent to the processing given for the purposes indicated above, without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.