Source: https://www.ecie.it/en/privacy-policy-en/
Timestamp: 2019-04-24 08:42:48+00:00

Document:
Ecie S.r.l. – registered office: Via Luigi Settembrini, 102 20020, Lainate (Milano) – is the data controller for the purposes of the 2016/679 EU Regulation (hereinafter also “Regulation” or “GDPR”), as it may decide in which, how and for what reasons collect and use the personal data provided by the user, and with which tools to process them and which security procedures to activate to guarantee their integrity, confidentiality and availability.
The Data Protection Officer (“DPO”) can be reached at: dpo@hb4.com .
In the event of user is both adherent and / or has regular contacts with Ecie S.r.l., their data may will be use by have been from the Owner, pursuant to art. 6, par. 1, lett. f), of the Regulations, and, for the particular categories of data, pursuant to art. 9, par. 2, lett. d) of the Regulations, for economic activity in the state, personalized direct communication with customers, and all activities involved data profiling / crossover, or to send update messages relating to the institutional activities of Ecie S.r.l. with automated systems (e-mail including the regular institutional e-newsletter) and not automated (paper mail and telephone with operator). For the sending of e-mails, or other automated promotional messages, is always requested an optional consent to the interested party. this consent also extends to the paper mail and telephone with an operator, for non-members or in regular contact with the association. The interested user always has the right to oppose the use of personal data by the association, pursuant to art. 21, par. 1, of the Rules. Ecie S.r.l. as regards the different aspects, as for the interested user, but only within the limits indicated in time in the eventual additional specific information as a kit of the different and particular service requested by the user.
With reference to the activities of registration to the site, request for information, the legal basis for processing personal data is art. 6.1.b) of the Regulations as they are necessary to provide services for the verification of inter-related requests. Information are optional, but the possible use of conferment makes it impossible to operate additional services from the site, find requests or to evaluate CVs.
With reference to the possible management of legal, accounting and tax obligations, it constitutes a legitimate processing of personal data pursuant to art. 6.1.c) of the Rules. Once the personal data have been provided, the processing is indeed necessary to fulfill the legal obligations to which Ecie S.r.l. it is subject. Where necessary, specific summary information on the processing of personal data and requests for consent will be progressively reported or displayed on the pages of the Site predisposed for particular services.
Personal data will not be disclosed to third parties, will be made available to persons expressly authorized by Ecie S.r.l. – and persons in charge of the treatment of data who carry out indispensable care activities for the pursuit of the aims indicated above; the categories of persons in charge are those employed by the administration, communication, accounting, legal advice, technical maintenance of information systems, advocacy, relationships with actual and potential customers, suppliers, according to the specific request forwarded by the interested user via this site.
The forms to be filled in on this site include data that are strictly necessary to adhere to what is of interest. The failure to complete the forms, both optional data that are not strictly necessary to process the request, does not allow to process the request.
Personal data processed for the purposes set out above will be kept for the time necessary to achieve those same purposes respecting the principle of minimization referred to in Article 5, paragraph 1, letter c) of the GDPR. In any case, since these are treatments performed for the provision of services, Ecie S.r.l. will process personal data up to the time allowed by Italian law to protect its interests (Article 2946 of the Civil Code and subsequent amendments). Further information about the data retention period and the criteria used to determine this period can be requested by writing to Ecie S.r.l. at the e-mail address indicated.
Pursuant to articles 15 and following of the Rules, the interested party has the right to ask Ecie S.r.l., at any time, to access their personal data, to rectify or cancel them or to oppose their treatment. to request the limitation of treatment in the cases provided for by art. 18 of the Regulations, to revoke the consent given pursuant to art. 7 of the GDPR at any time; to obtain, in a structured format, in common use and readable by automatic device, the data concerning him, in the cases provided for by art. 20 of the Regulations; and to propose a complaint to the competent control authority pursuant to article 77 of the GDPR (Personal Data Protection Authority) pursuant to art. 77 of the Regulations, if it considers that the processing of your data is contrary to the law in force.To exercise the above rights, requests must be sent at privacy@hb4.comThe interested party has the possibility to make a request for opposition to the processing of his data pursuant to Article 21 of the GDPR in which to give evidence of the reasons justifying the opposition: the Controller reserves the right to evaluate this request, which would not be accepted in case of existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party.

References: art. 6
 art. 9
 art. 21
 art. 6
 art. 6
 art. 18
 art. 7
 art. 20
 art. 77