Policy on the processing of personal data pursuant to art. 13 of EU Regulation 679/2016 and art. 13 Legislative Decree no. 196/2003
Zamet s.p.a., in its capacity as Holder of the process (also referred to hereinafter as: “Holder”) in accordance with EU Regulation 679/2016 (referred to hereinafter as: “GDPR”) and with Legislative Decree 196/2003 (hereinafter the “Privacy Code”) – Invites you, before communicating any personal data to the Holder, to read this Privacy Policy carefully, as it contains important information on the protection of your personal data.
This Privacy Policy:
• is intended as rendered for the website http://www.zamet.it - www.zametspa.it – www.canaline.it – www.zamet.eu (hereinafter: “Website”)
• is an integral part of the Website and the services we offer,
• is rendered pursuant to art. 13 of the GDPR and of the Privacy Code to those who interact with the web services of the Website or who contact Zamet s.p.a. by telephone, post, fax or e-mail.
•••
The processing of your personal data will be based on principles of correctness, lawfulness, transparency, limitation of purposes and storage, minimisation and accuracy, integrity and confidentiality, along with the principle of accountability pursuant to art. 5 of the GDPR.
Your personal data will therefore be processed in accordance with the legislative provisions of the GDPR and the obligations of confidentiality provided for therein, as well as those of the Privacy Code still in force today.
By processing of personal data we mean any operation or combination of operations carried out with or without the aid of automated processes and applied to personal data or combinations of personal data, such as collection, recording, organisation, structuring, storage, adaptation or amendment, extraction, consultation, use, communication by transmission, dissemination or any other form of availability, comparison or interconnection, limitation, cancellation or destruction, as defined in article. 4.2 of the GDPR.
We inform you that the personal data subject to processing may consist - also depending on your decisions as to how to use the services - of any information regarding your person suited to identifying it or making it identifiable, including textual information, photographic or video images and any other information provided, depending on the type of services requested.
CONTENTS
Below is the index of this Privacy Policy so that you can easily find information regarding the processing of your personal data.
1. HOLDER OF THE PROCESS: WHO WE ARE AND WHAT WE DO
2. THE DATA WE PROCESS
a. Browser data
b. Data supplied voluntarily by you
b. Third-party data supplied voluntarily by you
d. Cookies
3. PURPOSE OF THE PROCESS
4. LEGAL BASE AND COMPULSORY OR OPTIONAL NATURE OF THE PROCESS
5. ADDRESSEES OF PERSONAL DATA
6. TRANSFERRAL OF PERSONAL DATA
7. STORAGE OF PERSONAL DATA
8. RIGHTS OF THE DATA SUBJECT
9. AMENDMENTS
10. CONTACTS
***
1. HOLDER OF THE PROCESS: WHO WE ARE AND WHAT WE DO
The holder of the process is ZAMET s.p.a., with registered office in Via Torino 109, Volpiano (TO), Tax Code and VAT number 05409250015, Economic and Administrative Register TO – 707578, which operates in the industrial plant engineering sector and specialises in the production of electric cable transport systems.
2. THE DATA WE PROCESS
We wish to inform you that the personal data subject to processing may consist - also according to your decisions as to how to use the services - of an identifier such as your name, an identification number, location data, an online identifier, cookies or one or more elements characteristic of your physical, physiological, genetic, mental, economic, cultural or social identity, suited to identifying the person or making them identifiable, depending on the type of services required (hereinafter only "personal data").
The personal data processed through the Website is:
a. Browser data
The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data the transmission of which is implicit in Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature it could, through processing and association with data held by third parties, allow the identification of users. This category of data includes IP addresses or domain names of the computers used by users who connect to the Website, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the user's operating system and computer environment. This data is used for the sole purpose of obtaining any anonymous statistical information on the use of the Website to check its correct operation and identify anomalies and/or abuses, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Website or third parties.
b. Data supplied voluntarily by you
Unless reference is made to specific information, this Privacy Policy is also intended as rendered for the processing of data voluntarily provided by you through the Website. To this end, we invite you not to include in the forms contained within the Website and not to communicate information that may fall within the particular categories of personal data referred to in article 9 of the GDPR (e.g. data on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, life/sexual orientation as well as genetic data, biometric data or data concerning your health).
c. Cookies
Information on the cookies served by the Website is available at the following address http://www.zamet.it/it/Cookies/p/64
3. WHY WE PROCESS YOUR DATA - PURPOSE OF THE PROCESS
Your personal data will be processed, with your consent where necessary, for the following purposes, where applicable:
3.1. to allow the browsing of the Website and the supply of the services of Zamet s.p.a. through the Website;
3.2. to meet specific requests, including telephone requests, addressed to Zamet s.p.a.;
3.3. to fulfil any obligations envisaged by the laws in force, by regulations or by Community legislation, or satisfy requests from the authorities;
3.4. to exercise the Holder's rights;
3.5. to carry out, again with your consent, activities such as: the processing of studies, researches and market statistics; making informative material concerning the products of Zamet s.p.a. available;
3.6. for statistical purposes, without it being possible to trace your identity.
Your personal data will be processed with automated and non-automated tools.
Specific security measures are observed to prevent the loss of data, illicit or improper use and unauthorised access.
4. LEGAL BASE AND COMPULSORY OR OPTIONAL NATURE OF THE PROCESS
The legal basis for the processing of personal data for the purposes mentioned in sections 3.1 and 3.2 is art. 6(1)(b) of the GDPR ([...] the process is necessary for the implementation of a contract to which the data subject is party or for the implementation of pre-contractual measures adopted by request of the data subject), in that the processes are necessary for the supply of the services. The provision of personal data for these purposes is optional, but failure to provide it would make it impossible to activate the services requested.
The legal basis for the purpose pursuant to section 3.3 is art. 6(1)(c) of the GDPR ([...] the process is necessary to fulfil a legal obligation to which the holder of the process is subject). Once personal data has been provided, the process is indeed necessary to fulfil the legal obligations to which Zamet s.p.a. is subject.
The legal basis for the purpose pursuant to section 3.4 is art. 6(1)(f) of the GDPR (.... The process is necessary for the pursuit of the legitimate interests of the holder or third parties, provided that the interests or fundamental rights or freedoms of the data subject do not prevail ...).
The legal basis for the purpose pursuant to section 3.5 is the granting of your consent in accordance with art. 6(1)(a) ([...] the data subject has given their consent to the processing of their personal data for one or more specific purposes) and art. 22(2)(c) of the GDPR. The provision of your personal data for these purposes is therefore entirely optional and does not affect the use of the services. If you wish to object to the processing of your data for marketing purposes, you may do so at any time by contacting the Holder at the addresses indicated in the "Contacts" section of this policy. It should be noted that if the holder of the process uses, for the purposes of the direct sale of his products or services, the e-mail details provided by the data subject in connection with the sale of a product or a service, he need not seek the consent of the data subject, provided that the services are similar to those being sold and that the data subject, having been adequately informed, does not refuse such use, either initially or in subsequent communications.
It is also specified that the process pursuant to section 3.6 is not performed on personal data and can, therefore, be freely performed by Zamet s.p.a..
5. ADDRESSEES OF PERSONAL DATA
Your personal data may be shared, for the purposes pursuant to section 3 of this Privacy Policy, with:
5.1. parent, subsidiary and associated companies of Zamet s.p.a., limited to the pursuit of administrative-accounting purposes connected to the performance of organisational, administrative, financial and accounting activities;
5.2. parties, organisations or authorities to whom it is obligatory to communicate your personal data, by virtue of legal provisions or orders from the authorities;
5.3. persons authorised by Zamet s.p.a. to process personal data necessary to carry out activities strictly related to the provision of the services, who have committed themselves to confidentiality or have an adequate legal obligation of confidentiality and who guarantee the Processing of the Date in accordance with the GDPR.
The complete and updated list of Managers is kept at the headquarters of the Holder, located in Volpiano and can be transmitted by sending a written request to the Holder at the addresses indicated in the "Contacts" section of this policy.
6. STORAGE OF PERSONAL DATA
The personal data processed for the purposes pursuant to section 3.1-3.2-3.3-3.4 will be kept for the time strictly necessary to achieve those purposes and, being processes performed for the provision of services, up to the period of time envisaged and allowed by Italian law to protect the interests and rights of defence of ZAMET, with regard to the time limits envisaged by the applicable law.
For the purposes pursuant to section 3.5, your personal data will be processed, as a general rule, until your consent is revoked. If you withdraw from the services of Zamet s.p.a. without having revoked such consent, the data may be processed even after your withdrawal. Further information on the period of retention of the data and the criteria used to determine this period can be requested by sending a written request to the Holder at the addresses indicated in the "Contacts" section of this policy. This is without prejudice to the possibility for Zamet s.p.a. to keep your personal data for the period of time envisaged and allowed by Italian law to protect its interests and its right of defence, with regard to the limitation periods envisaged by the applicable legislation.
7. RIGHTS OF THE DATA SUBJECT
In your capacity as Data Subject, pursuant to article 15 et seq. of the GDPR and art. 7 Privacy Code, you are entitled to:
i. obtain confirmation of the existence or otherwise of personal data regarding you, even if not yet registered, as well as communication in intelligible form;
ii. obtain the indication; a) of the origin of the personal data; b) of the aims and methods of the process; c) of the logic applied in the case of processing with the aid of computers; d) of the identifying details of the holder, managers and representative appointed in compliance with article 5, paragraph 2 Privacy Code and article 3, paragraph 1 of the GDPR; e) of the parties or categories of parties to which the personal data can be communicated or which can become aware of such data in their capacity as managers, operators or representatives appointed for the country;
iii. obtain: a) the update, rectification or, where appropriate, the integration of the data; b) the cancellation, transformation into anonymous form or blockage of data processed in breach of the law, including that which need not necessarily be kept in relation to the purposes for which the data have been collected or subsequently processed; c) certification that the operations pursuant to letters a) and b), and their content, have been brought to the knowledge of those to whom the data have been communicated or disseminated, unless this is impossible or requires the use of means evidently out of proportion with the right protected;
iv. opposed, fully or partially: a) for legitimate reasons, the processing of personal data concerning him/her, even when pertinent to the purpose of the collection; b) the processing of personal data concerning him/her for the purposes of sending advertising material or direct sales material, or for the performance of market research or commercial communication, using automated calling systems without the intervention of an operator by e-mail and/or using traditional marketing methods by telephone and/or by post. It should be noted that the data subject's right of opposition, pursuant to point b) above, for the purposes of direct marketing using automated means extends to traditional means, and that it does not affect the possibility for the data subject to exercise the right of opposition even if only in part. Consequently, the data subject may choose to receive only communications by traditional means or only automated communications, or neither.
Where applicable, he also has the rights pursuant to articles 16 to 22 of the GDPR (Right of correction, right to be forgotten, right to limit processing, right to data portability, right to object, right to object to automated processing including profiling).
Requests must be addressed in writing to the Holder at the addresses indicated in the "Contacts" section of this policy.
You always have the right to lodge a complaint with the competent supervisory authority (Guarantor for the protection of personal data), in accordance with art. 77 of the GDPR, if you feel that the processing of your data is contrary to the regulations in force.
8. AMENDMENTS
Zamet s.p.a. reserves the right to amend or simply update the contents of this Privacy Policy, in part or in full, also due to changes in the applicable legislation. Zamet s.p.a. You will be informed of such changes as soon as they are made on the Website. Zamet s.p.a. Invites you, therefore, to regularly visit this section to get acquainted with the most recent and updated version of the Privacy Policy in order to be always updated on the data collected and on the use that Zamet s.p.a. makes of it.
9. CONTACTS
To exercise the above rights or for any other request you can write to the Holder of the process: ZAMET s.p.a.,Via Torino 109, Volpiano (TO),fax +390119953756
