Privacy & Cookie policyThe Company Officine De Angelis S.p.A., with registered office in Coccolia (RA), via dei Carratori, 1, Tax and VAT code 00085220390, as Controller of the processing of personal data, hereby informs you that the personal data provided by customers, suppliers, users and visitors to the website will be processed as follows in compliance with the principles laid down in the GDPR (General Data Protection Regulation).
1. Purposes and legal basis for the Processing
Personal data will be processed for the following purposes:
1.1. entering into a contract with the Controller and handling the relevant relations in the pre-contractual, contractual, tax and accounting stages (the legal basis for this Processing is the performance of the contract and the Law requirements)
1.2. direct marketing activities (newsletters, information activities, market researches, advertising); the legal basis for this Processing is the legitimate interest.
2. Personal data processing and retention period
Data will be processed through the methods stated in Art. 4 n. 2 of GDPR 2016/679 manually or by information and electronic tools. Data will be recorded, processed and stored in our paper and eletronic records.
Data will be processed by people authorized to the Processing.
Personal data will be stored for the period of time allowed or required by the regulations applicable under the accomplishment of the task and for the time necessary to guarantee the legal protection from the contractual and extra-contractual points of view.
3. Recipients of the data processing
Data can be made accessible to the Controller’s staff and/or contractors as people authorized to the data processing or controllers of the data processing.
Data can be disclosed for regulatory requirements or for the accomplishment of the contract, for instance to social security, welfare and insurance bodies, trade associations, tax and labour offices.
Data won’t be disclosed to undetermined people.
4. Nature of data provision
The provision of data is mandatory for the purposes referred to in art.1.1.; therefore any refusal to provide such data or their incorrect provision make it objectively impossible for us to manage the pre-contractual and contractual relations.
The provision of data for the purposes referred to in art. 1.2. is optional instead; therefore you can decide not to provide any data or subsequently exercise your right of objection in accordance with art. 21 of GDPR.
In that case, your personal data won’t be object of direct marketing any more (therefore you won’t get newsletters, advertising etc. any longer) but you’ll still be entitled to the services as per art. 1.1.
5. Rights of the data subject
As data subject, You may exercise your rights referred to in art. 15 GDPR 2016/679 and specifically the right to:
I. obtain confirmation as to whether or not personal data concerning You are being processed, and, where that is the case, access to the personal data;
II. obtain access to the following information: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipient to whom the personal data have been or will be disclosed; d) where possible, the envisaged period of time for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) in case the personal data are not collected from the data subject, any available information as to their source; h) the existence of automated decision-making, including profiling, referred to in Art. 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
III. to be informed of the appropriate safeguards pursuant to Art. 46 relating to the transfer in case personal data are transferred to a third Country or to an international organisation.
IV. where applicable, the data subject can exercise the rights pursuant to Art. 16 to 21 of GDPR 2016/679 (right to rectification, right to erasure “right to be forgotten”, right to restriction of processing, right to data portability, right to object);
V. where applicable, the data object can also a) withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal; b) to be notified without undue delay about any breach of the personal data within the limits set down in art. 34; c) lodge a complaint with the Supervisory Authority
6. Provisions governing the exercise of the rights
The data subject may exercise the rights getting in touch with the Controller, Officine De Angelis S.p.A by sending a written communication to the Company’s headquarters in Coccolia (RA), via dei Carratori, 1, or sending an e-mail to the address privacy@deangelisrimorchi.com
