Information pursuant to art. 13 of EU Regulation 2016/679, c.d. GDPR
This page describes the methods of managing the site in relation to the processing of personal data of users who consult it. This information (or “privacy policy”) is provided pursuant to art. 13 of EU Regulation 2016/679, European Regulation on the Protection of Personal Data (hereinafter, “Regulation” or “GDPR”) to those who interact with the web services of this site.
The information is provided only for this site and not for other websites that may be consulted by the user via links.
1. Data Controller and Data Protection Officer
The Data Controller of user data is Tonini Metal Prize SRL Via Michelangelo, 30 25013 Carpenedolo (Brescia) – Italy.
2. PERSONAL DATA SUBJECT TO PROCESSING
The Personal Data collected by the Site are the following:
Navigation data
this site uses log files in which information collected automatically during user visits is stored. The information collected could be the following:
– internet protocol (IP) address;
– type of browser and parameters of the device used to connect to the site;
– name of the internet service provider (ISP);
– date and time of visit;
– web page of origin of the visitor (referral) and exit;
– possibly the number of clicks.
The above data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Site.
Place of treatment
The data collected by the site are processed at the headquarters of the Data Controller, and at the datacenter of the web Hosting. The web hosting (Aruba S.p.A.), which is responsible for data processing, processes the data on behalf of the owner.
Cookies
As is customary on all websites, this site also uses cookies, small text files that allow us to store information on visitor preferences, to improve the functionality of the site, to simplify navigation by automating procedures (e.g. Login, site language) and to analyze the use of the site.
Cookies used on the site: • Session cookies are essential to distinguish between connected users, and are useful to prevent a requested functionality from being provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, i.e. until the browser is closed. No consent is required for them; • functionality cookies used by the site are strictly necessary for the use of the site, in particular they are linked to an express request for functionality by the user (such as Login), for which no consent is required; • third-party cookies, This site also acts as an intermediary for third-party cookies, used to provide additional services and functionality to visitors and to improve the use of the site itself, such as social buttons, or videos. This site has no control over third-party cookies, entirely managed by third parties. As a consequence, information on the use of said cookies and their purposes, as well as on the methods for their possible disabling, are provided directly by third parties on the pages indicated below.
Below is a series of resources that explain how to manage or disable cookies for the most popular browsers:
• Internet Explorer: http://windows.microsoft.com/it-IT/internet-explorer/delete-manage-cookies
• Google Chrome: https://support.google.com/chrome/answer/95647
• Mozilla Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie
• Opera: http://help.opera.com/Windows/12.10/it/cookies.html
• Safari: https://support.apple.com/kb/PH19255?viewlocale=it_IT
3. PURPOSE AND LEGAL BASIS OF DATA PROCESSING
The personal data provided by the interested party will be processed in compliance with the conditions of lawfulness pursuant to art. 6 f) (legitimate interest) EU Reg. 2016/679 for the following purposes:
– filling out the data collection form for receiving newsletters or communications in general via e-mail.
The data processing is based on article 6, paragraph 1, letter f): (recital 47) taking into account the reasonable expectations of the interested party at the time and in the context of the collection of personal data, when the interested party can reasonably expect that processing for this purpose will take place.
4. POSSIBLE RECIPIENTS AND POSSIBLE CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The personal data provided will be communicated to recipients, who will process the data as data controllers (art. 28 of EU Reg. 2016/679) and/or as natural persons acting under the authority of the Data Controller and the Data Processor (art. 29 of EU Reg. 2016/679), for the purposes listed above in point 4. Specifically, the data will be communicated to:
– subjects who provide services for the management of the information system and communication networks including email, newsletters and website management;
– studies or companies in the context of assistance and consultancy relationships;
– competent authorities for compliance with legal obligations and/or provisions of public bodies, upon request.
The subjects belonging to the aforementioned categories perform the function of Data Processor, or operate in complete autonomy as separate Data Controllers.
The personal data provided will not be subject to disclosure.
5. TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION
No personal data of the User will be transferred to a third country outside the European Union or to International Organizations.
6. PERIOD OF RETENTION OF PERSONAL DATA OR CRITERIA FOR DETERMINING THE PERIOD
The processing will be carried out in an automated and manual manner, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed for this purpose.
In compliance with the provisions of art. 5 paragraph 1 letter e) of EU Reg. 2016/679, the personal data collected will be stored in a form that allows the identification of the interested parties for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
The storage of the personal data provided depends on the purpose of the processing: – receiving newsletters or promotional communications in general via e-mail.
7. RIGHTS OF THE INTERESTED PARTY
Pursuant to Articles 15 et seq. of the GDPR, the interested party has the right to ask the Data Controller:
– access to his/her personal data;
– the rectification or erasure of the same or the limitation of the processing concerning him/her;
– opposition to the processing;
– data portability in accordance with Article 20 cit.;
– if the processing is based on Article 6, paragraph 1, letter a), or on Article 9, paragraph 2, letter a), cit. the withdrawal of consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal.
Without prejudice to any other administrative or judicial remedy, the interested party who considers that the processing of personal data concerning him or her violates the GDPR, has the right to lodge a complaint with a supervisory authority, in particular in the Member State in which he or she habitually resides, works or where the alleged violation occurred (art. 77 cit.).
To exercise the rights referred to above, the interested party may contact the Data Controller at the contact details indicated in point 1 of this information notice.
8. UPDATES
This privacy policy may undergo changes and/or additions as a result of any subsequent regulatory changes and/or additions, the updating or provision of new services or technological innovations.