INFORMATION ON THE PROCESSING OF PERSONAL DATA
(pursuant to Articles 13 and 14 of EU Regulation no. 2016/679)
Dear user,
Current legislation requires us to provide information regarding the processing of the personal data of users who consult the company website and use the related services accessible electronically and any services connected to them.
This information is intended to be provided for the company website attributable to the organization.
Pursuant to EU Regulation 2016/679 (hereinafter also referred to as the “Regulation” or “GDPR”), the information is provided to all users who interact with the website.
The validity of the information contained in this page is limited to the site and to the social network pages mentioned above and does not extend to other external websites that may be consulted by the user via hypertext link.
- Data Controller
The Data Controller processes the data acquired according to the principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity and confidentiality.
The Data Controller guarantees the security, confidentiality and protection of the personal data in its possession, at any stage of the processing process.
The Data Controller of the data relating to identified or identifiable natural persons who have consulted the website is ALBA MECCANICA S.R.L. with registered office in Via F.lli Simondi, 14/16/18 – 12025 Dronero (CN), P. IVA 03491400044.
- Categories of Data Processed
- Navigation data: the computer systems and computer programs used for the operation of the site collect some personal data whose transmission is implicit in the use of Internet communication protocols (e.g. IP addresses or domain names of the computers used by users who connect to the site, the URI addresses -Uniform Resource Identifier- of the requested resources, time of the request, method used to submit the request to the server, size of the file obtained in response, numerical code about the status of the response made by the server (successful, error, etc.- and other parameters relating to the operating system and the user’s computer environment). Although this information is not collected to be associated with identified data subjects, by its nature it could, through processing and association with data held by third parties, allow users to be identified. These data are processed, for the time strictly necessary in accordance with the law in force, for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning. It should be noted that the aforementioned data could be used to ascertain responsibility in the event of computer crimes against the Site or other sites connected to or linked to it.
- Cookies: This Application uses Cookies. To find out more and to view the detailed information, the User can consult the Cookie Policy in the appropriate section of the website.
- Data provided voluntarily by the user: for interactions through the website, the user is not required to provide personal data, however, any further contact with the Data Controller, for example to request information on a specific service by spontaneously sending messages to the Data Controller’s contact details indicated on the Website, will result in the subsequent acquisition of such personal data of the sender, necessary to respond to requests, as well as any other personal data voluntarily entered by the user in the relevant communications.
- Purposes of the Processing and Legal Bases of the Processing
The personal data provided by the interested party will be processed for the purposes indicated below and by virtue of the following legal bases.
| Purpose of the processing | Legal basis for the processing |
| Navigation on the websites and social pages mentioned and use of the related services | The processing of personal data is necessary in order to execute the contract entered into between the parties and/or pre-contractual measures requested by the data subject. |
| Response to a request for information or a commercial request | The processing of personal data is necessary in order to execute the contract entered into between the parties and/or pre-contractual measures requested by the data subject. |
- Processing Methods
Personal Data will be:
- collected electronically;
- recorded in digital format on computers and/or kept in archives;
- protected from the risk of destruction, modification, deletion and unauthorised access by means of efficient physical, logical and organisational security measures;
- further processed, possibly also in paper form, to the extent and within the time strictly necessary to carry out the purposes indicated above.
As part of its activity and for the purposes indicated above, the Data Controller may make use of services rendered by third parties operating on behalf of the Data Controller and according to its instructions, as Data Processors, as indicated in the following point.
- Communication and Dissemination of Data
The personal data acquired will not be disseminated, but may be communicated to subjects contractually linked to the Data Controller in accordance with and within the limits of the GDPR. The data are communicated only to the extent strictly necessary in relation to the above purposes, or in any case only for the fulfilments necessary for the service, i.e. those required by law or by order of the Authority.
The categories of recipients are as follows:
- subjects necessary for the execution of the activities connected and consequent to the execution of the Service, as external data processors (e.g. subjects who provide services for the management of the information system used and telecommunications networks, including e-mail). The list of external data processors is constantly updated and available at the Data Controller’s headquarters;
- persons in charge and persons authorised by the Data Controller who have committed themselves to confidentiality or have an appropriate legal obligation of confidentiality (e.g. sports collaborators and/or employees).
The Data Controller may also have to communicate the data acquired to comply with legal obligations or to comply with orders from public authorities, including judicial authorities.
- Data Retention Period
The Data Controller keeps the data for the time strictly necessary to achieve the Purposes indicated above.
The retention period for the data collected with the contact request form is strictly limited to the time necessary to follow up on the need that the user is expressing with his request, to how the business relationship will evolve as a result of the contacts.
This data will be deleted as soon as it is no longer required for the purposes indicated above, without prejudice to further retention obligations provided for by law.
- Nature of the provision of data
Apart from what is specified for navigation data, the provision of personal data by the interested party, for the purposes described above, is to be considered optional. The interested party, therefore, may refuse to communicate personal data to the Data Controller, since the provision of data is optional.
- Rights of the Data Subject
Pursuant to GDPR 679/2016, the data subject has the right of access (Art. 15), the right to rectification (Art. 16), the right to erasure (Art. 17), the right to restriction of processing (Art. 18), the right to portability (Art. 20), the right to object (Art. 21), the right to object to automated decision-making (Art. 22), the right to lodge a complaint with the supervisory authority of the country of residence.
In order to assert his/her rights, the interested party may contact the Data Controller at the e-mail address amministrazione@albameccanica.it.
- Automated decision-making
The Data Controller does not carry out processing that consists of automated decision-making processes on data; So, notably, there is no profiling system.
- Changes to this policy
The Data Controller reserves the right to modify the content of this policy, in whole or in part, also due to changes in the Privacy legislation. The Data Controller will publish the updated version of this document on the Website, and from that moment it will be binding: the interested party is therefore invited to visit this section regularly.
