PRIVACY Assistance request
ADVISORY NOTE ON THE PROCESSING OF PERSONAL DATA
WHEN REQUESTING SUPPORT
Pursuant to art.13 of EU Regulation 2016/679 of 27/04/2016
Dear Sir / Madam
Pursuant to article 13 of EU Regulation 2016/679 of 27/04/2016, hereinafter the GDPR (General Data Protection Regulation ), Meneghetti S.p.A., with registered offices at via Borgo Lunardon 8, Rosà (VI), Italy, as the Controller (in terms of processing personal data), informs you of the following:
The Controller and Processor (in terms of processing personal data)
The Controller is Meneghetti S.p.A. with registered offices at via Borgo Lunardon 8, Rosà (VI), Italy.
The data that is collected
We collect and process personal data about you when you request support on one of our products.
The personal data that we process includes:
• your first name and last name;
• your email address and your telephone number.
The legal basis for processing personal data
Processing your personal data is done in view of your request for support, which initiates a pre-contract that represents the legal basis for processing your data.
How we use this information
We process the personal data specified in paragraph 1 in order to respond to your request for support and to implement any follow-up actions aimed at resolving the issue you raised.
The mandatory or optional nature of providing data and the consequences of any refusal to provide personal data
Providing data is optional although any refusal to provide the data requested may make it impossible for the company to manage your request.
The sources of the data collected
The company obtains this information directly from you, as you enter the data in the online form available on the dedicated page of the corporate site.
Methods of processing personal data
Processing personal data is done by those means of operation indicated in art. 4(2) of the GDPR, for the purposes referred to above, both on paper as well as electronic means, by electronic instruments or, in any case, automated ones, in compliance with relevant legislation in effect and specifically regarding confidentiality and security and in accordance with the principles of correctness, lawfulness and transparency and safeguarding the rights of the person.
Processing is carried out directly by the Controller’s organisation, by its processors and/or appointees.
Communicating and divulging personal data
Your personal data may be communicated, to the extent strictly pertinent to the obligations, tasks and purposes referred to above and in compliance with relevant legislation in effect, to the following categories of subjects:
-
Other companies within the group, subsidiaries and parent companies, for the purposes of managing your request and implementing any suitable solutions to the issue raised;
-
Internal collaborators, self-employed professionals, technical consultants and other companies in our sector, our partners to identify the most suitable means of intervention and to manage the interventions necessary to resolve the issue raised.
Personal data will not, in any way whatsoever, by divulged.
The period for which personal data is stored
Data collected will be stored for the time needed to manage the operations that might arise from your request. Once these operations have been completed, the data will be stored for a maximum period of 36 months, based on whether the remedial operations are covered by the warranty. Beyond this period the data will be deleted/destroyed.
Transferring data
Personal data is stored on servers located within the European Union. It remains understood, in any case, that the Controller, where deemed necessary, will have the right to transfer data onto other servers even ones outside of the EU. In this case, the Controller hereby guarantees that the transfer of data to a non-EU country will be done in compliance with applicable legislation.
Automated decision-making
The Controller declares that it has not adopted any tools to select or to analyse the data which is subject to processing that may involve decisions based exclusively on the automated processing of your personal data. All the decision-making processes associated with the purposes for processing personal data, as described above, are carried out manually, by duly assigned people.
The data subject’s rights
As a data subject, you have those rights provided for under art. 15 of the GDPR and, specifically, you have the right to:
-
obtain from the Controller confirmation or otherwise that the personal data that concerns you is subject to processing and, if this be the case, to obtain access to the personal data and to the following information:
-
the purposes for which processing is done;
-
the categories of personal data in question;
-
the recipients or categories of recipients to whom personal data has been or will be communicated, in particular if these recipients are in a third country or are international organisations;
-
when possible, the expected period for which personal data will be stored or, if this is not possible, the criteria used to determine such a period;
-
the existence of the data subject’s right to request that the Controller rectifies or deletes the personal data or limits processing of the personal data that concerns the data subject or to object to such processing;
-
the right to lodge a complaint with a supervisory authority;
-
if the personal data is not collected directly from the data subject him/herself, all the information available on the origin(s) of such data;
-
the existence of an automated decision-making process, including profiling, as referred to in article 22(1) and (4) and, at least in these cases, relevant information on the logic used, as well as the importance and consequences of such processing for the data subject.
-
-
If personal data is transferred to a third country or to an international organisation, the data subject has the right to be informed of the existence of adequate guarantees as per article 46 regarding the transfer.
-
The Controller provides a copy of the personal data which is subject to processing. In the event of further copies being requested by the data subject, the Controller may charge a reasonable fee based on the administrative costs. If the data subject makes a request by electronic means, and unless otherwise indicated by the data subject, the information is provided in a commonly-used electronic format.
-
The right to obtain a copy of the personal data, as per paragraph 3, shall not impinge on the rights and freedoms of others.
-
Where applicable, you also have those rights referred to in articles 16-21 of the GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).
In order to exercise your rights as referred to in art. 15 of the GDPR or for questions or information regarding the processing of your personal data and the security measures adopted, you may, in any case, contact:
MENEGHETTI S.P.A.
VIA BORGO LUNARDON 8
36027 ROSA’ (VI)
E-mail: info@fulgor-milano.com
