INFORMATION FOR THE PROCESSING OF PERSONAL DATA EX ART. 13 GDPR 2016/679
Tomasino Metalzinco Srl with legal headquarters in Contrada Passo Barbiere in Cammarata (AG), as the data controller (hereinafter “Owner”), informs you, pursuant to art. 13-14 of EU Regulation 679/2016 (hereinafter “GDPR”), that the data collected will be processed in the manner and for the purposes described below:
- Object of the treatment
The Data Controller processes the personal identification data (hereinafter “Data”) provided by you when subscribing to services or, in general, the contractual relationship with the Data Controller.
- Purpose of the treatment
Your personal data are processed, without your prior consent (Article 6 letter b), c) GDPR), for the sole purposes of management and the execution of pre-contractual and contractual relationships; of the obligations related to administrative and accounting management; the obligations established by laws, regulations or community legislation or imposed by the Authorities; for the protection of the rights of the owner in court and management of any disputes; for the prevention and repression of illegal acts.
- Further purposes of the processing
The collected data, subject to your free and explicit consent (Article 6 letter a) GDPR), may also be used for the additional purposes indicated below under the terms and conditions specified therein:
1. to send you promotional material and commercial communications, through both automated (eg e-mail, SMS) and traditional (paper mail) contact methods.
2. to send you newsletters, through the references you have provided.
- Methods of processing and storage
The processing will be carried out by means of the operations indicated in art. 4 GDPR and may take place both through IT systems (cloud, internet, intranet, computer) and in paper form (archives). Your data will be stored in the Data Controller’s databases only for the time strictly necessary to achieve the purposes for which they were collected and processed, in accordance with the law and, as specified above, with the exception of cases in which the current legislation does not require the retention of your data for longer periods. For purposes 2.1.a and 2.2.b, the data will be processed until consent is revoked.
- Nature of the provision of data and consequences of refusal
The provision of personal identification data is mandatory for the execution of the contractual relationship and the obligations deriving from the fulfillment of the law, regulations or community legislation and any lack of consent referred to point 2.1 a) and b) will have no effect on the provision of services or purchases.
- Access to Data
Your Data will be processed for the aforementioned purposes by employees and / or collaborators of the Data Controller in their capacity as persons in charge of processing and / or internal data processors and / or system administrators; by third parties (for example, suppliers, professionals, banks, affiliates) where they carry out outsourced activities on behalf of the Data Controller, in their capacity as external data processors.
- Data communication
Without your express consent (pursuant to Article 6 letter b), c) GDPR), the Data Controller may communicate your Data to public bodies to comply with the obligations established by laws, regulations or community legislation or imposed by the Authorities, which will process them in their capacity as independent data controllers.
The selected service providers operate through data centers located in the territory of the European Union. Your data will not be transferred to non-EU countries.
- Data subject’s rights
At any time you can exercise your rights towards the data controller, pursuant to articles 15-22 of EU Regulation 2016/679, and in particular the rights of access, rectification, integration and, in the cases permitted, the portability of data provided, in addition to obtaining the cancellation, limitation or opposition to the processing of data for legitimate reasons and to oppose the automated decision-making process, including profiling. As well as the right to complain to the Guarantor Authority, by contacting the Owner or the in the following ways:
In order to guarantee the protection of the data subject’s personal information, we may need to request additional specific information, which confirms the identity of the requesting data subject and thus guarantee the right to access the information (or to exercise any of the other rights) only to persons entitled to receive such communications. This is another security measure suitable for the protection of personal data.
The request to access to your personal information (or to exercise one of the above rights) is free. However, if the request is clearly unfounded or excessive we may charge a reasonable fee taking into account the administrative costs incurred to provide the information or refuse to comply with the request in such circumstances.
- Data Controller
The Data Controller is:
Tomasino Metalzinco Srl with legal headquarters in Contrada Passo Barbiere in Cammarata (AG)