Source: https://www.phoenixcontact-dss.com/en/privacy-policy/
Timestamp: 2019-04-20 19:06:15+00:00

Document:
This information describes the methods and purposes about the processing of personal data of users who access and use the website https://www.phoenixcontact-dss.com/en (hereinafter, even only “Website”) in compliance with the regulations in force for the protection of personal data.
In accordance with the principles recognized by European Regulation 679/2016, this information also provides the user (interested in processing) with any further information necessary to ensure correct and transparent processing, in relation to the specific context in which the personal data is collected and subsequently treated.
The Data Controller is Phoenix Contact S.p.A. (hereinafter “Phoenix”) with headquarter in Via Bellini 39/41 – 20095 Cusano Milanino (MI).
To take advantage of certain services on the Website, the user may be required to provide the personal data necessary to ensure the use of the same services: in particular, for the purposes of completing the forms on the site for requesting information, the provision of data marked with an asterisk is required for handling and replying to requests made by the user. In any case, it is specified that the user is free to provide the requested data, in the sense that he is not legally obliged to share them.
data provided voluntarily by the user, by filling in the forms on the Website to request information (name, e-mail address, city and any other personal data included in the subject or text of the message), or by sending , optional and voluntary, e-mail messages to the e-mail addresses indicated on the Website.
b) the optional and voluntary sending of e-mail messages to the e-mail addresses indicated on the Website, involves the acquisition of the sender’s e-mail address and any other personal data present in the message, in order to perform the processing activities necessary to answer to the requests of the interested parties.
The data processing will be carried out using paper and / or IT tools, also by means of subjects authorized to do so, who operate under the direct authority and according to the instructions given by the Data Controller, with logic strictly related to the purposes indicated and, in any case, in order to guarantee the security and confidentiality of the data processed.
The processing operations methods guarantee the security of the data and systems. Specific security measures are adopted in order to minimize the risk of destruction or loss, even accidental, of the data, unauthorized access, unauthorized processing or non-compliance with the purposes indicated in this statement.
The data provided by the user by filling in the contact forms will be stored in the Phoenix databases until the data subject has exercised his right to object to the receipt of communications and promotional updates. The data provided by the user by sending e-mail messages to the addresses indicated on the Website will be kept for the time necessary to provide feedback.
Aruba S.p.A. as a hosting provider.
Furthermore, access to users’ personal data could derive from the execution of some technical maintenance activities of the Website by Primaklasse Srl, which, in such eventuality, will treat the data acquired as an independent Owner.
In no case will the personal data be communicated, disseminated, transferred or otherwise transferred to third parties for illicit purposes and, in any case, without making suitable information to the Interested parties and acquiring their consent, where required by law. The communication of the data on request of the Judicial or Public Security Authority, in the ways and in the cases provided for by the law, remains unaffected.
Personal data will not be transferred abroad to countries or international organizations not belonging to the European Union that do not guarantee an adequate level of protection, recognized, pursuant to art. 45 GDPR, based on an adequacy decision of the EU Commission. In the event that it is necessary for the provision of the services of the Website, the transfer of personal data to countries or international organizations outside the EU, for which the Commission has not taken any adequacy decision pursuant to art. 45 GDPR, will take place only in the presence of adequate guarantees provided by the recipient Country or Organization, pursuant to art. 46 GDPR and on condition that interested parties have effective rights and effective remedies. In the absence of a decision on the adequacy of the Commission, pursuant to art. 45 GDPR, or adequate guarantees, pursuant to art. 46 GDPR, including the binding corporate rules, the cross-border transfer will take place only if one of the conditions indicated in the art. 49 GDPR.
The interested parties have the right to access their personal data, to request the correction, updating and cancellation or limitation, if incomplete, incorrect or collected in violation of the law, as well as to oppose the processing for legitimate reasons or get portability.
The interested parties, in particular, pursuant to articles 15-22 of the Regulation (EU) have the right to obtain confirmation of the existence or not of personal data concerning them, even if not yet recorded, and their communication in intelligible form.
c) of the identification data concerning the Data Controller, the Data Processor and the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as authorized to process data.
e) the transmission of data concerning them, provided to the Owner and processed on the basis of the express consent of the Interested Parties for one or more specific purposes, in a structured format, commonly used and readable by an automatic device. According to the art. 20 GDPR, the Data Subject also has the right to transmit such data to another Data Controller without hindrance and, if technically feasible, to obtain direct transmission of personal data from one data controller to the other.
f) if the processing is based on consent, revoke your consent at any time (ex art. 7, par. 3 GDPR).
b) automated decision-making processes that significantly affect a person.
Without prejudice to any other administrative or judicial appeal, the interested parties have the right to lodge a complaint with a supervisory authority, particularly in the Member State in which they habitually resides, or works in the place where the alleged violation occurred.
The above rights are exercised with a request addressed to the Owner of the personal data by sending an e-mail message to the following eamil address: info_it@phoenixcontact.com. The request is formulated freely and without formalities by the interested parties, whom have the right to receive an appropriate response within a reasonable time, depending on the circumstances of the case.
The interested parties can avail themself, for the exercise of his rights, of non-profit organizations, organizations or associations, whose statutory objectives are of public interest and which are active in the field of protection of the rights and freedoms of the Interested with regard to to the protection of personal data, granting a suitable mandate for this purpose. The interested parties may also be assisted by a trusted person.
You can receive more information on the purposes and methods of processing personal data, by writing to the following e-mail address info_it@phoenixcontact.com , pointing out in the subject “Privacy”.

References: art. 45
 art. 45
 art. 46
 art. 45
 art. 46
 art. 49
 art. 20
 art. 7