Source: http://www.nostrali.it/en/privacy.php
Timestamp: 2019-04-20 08:17:35+00:00

Document:
In respect of the provisions of EU Reg. 2016/679 (General Data Protection Regulation - GDPR), we hereby provide you with the due information on the processing of any personal data you may provide.
This privacy notice is rendered in accordance with Art. 13 GDPR and it is also based upon the provisions of Directive 2002/58/EC (Directive on privacy and electronic communications), as updated by Directive2009/136/EC.
The information in this privacy notice describes the methods applied with regard to the processing of personal data.
This Privacy notice is provided only for this website and not for other websites that may be consulted by the User through links.
TheData Processing Controller, pursuant articles 4 and 24 of EU Reg. 2016/679, is Athena S.p.A., with its registered office in Via delle Albere, 13, 36045, Alonte (VI) –Italy, VAT 00589040242, REA VI-139951; Tel. +39 (0)444 727272; Fax +39 (0)444 727222; e-mail: privacy@athena.eu.
Athena S.p.A. informs the User that it has appointed an Internal Data Processorwhose name, along with an updated list of the Internal Privacy Function Managers, is available by sending an email to the Controller.
Pursuant to Art. 2 of Italian Legislative Decree n. 196/2003 (Privacy Code) and pursuant to Art. 4 GDPR, personal data are specific information regarding personal or factual characteristics that an identified or identifiable natural person (‘data subject’).
That category includes information such as your personal name, your address, your telephone number, email, tax code, bank details etc … . Information that cannot be connected directly to you - for example, favourite websites or number of users of a certain website - is not considered personal data.
3. Types of data processed and processing purposes.
·Data concerning internet use: the computer systems and software procedures set up to operate this Internet site acquire, during normal operation, some personal details the transmission of which is implicit in the use of the Internet communication protocols. This information is not gathered for the purposes of association with identified interested parties, but by its nature could, through data processing and associations with data held by third parties, allow identification of users. This data is used exclusively to obtain anonymous statistical information about use of the site and to check its correct running.
·Data voluntarily supplied by the user: the optional, express and voluntary sending of emails to the addresses indicated, as well as the compilation and submission of the forms on the site, imply the subsequent acquisition of the sender's address, necessary to respond to the request, as well as any other personal details.
to allow user registration to the site: in order to be able to forward requests for offers to the Data Controller, the site allows access to protected areas with registration and authentication of the user.The Data Controller informs the user that the access and the browsing of the Site are free, but the possibility to forward requests for offers are allowed only after registration of the user. The legal basis for the processing described above is, pursuant the Art. 6 para. 1, lett. a) GDPR, the user’s consent to registration.
to pursue pre-contractual and contractual purposes such as: to respond to specific requests from the user, to fulfil any contractual obligations, to provide support and technical information on the products and services relating to the contractual relationship. The processing, pursuant to art. 6, para. 1 lett. b) GDPR, is necessary for the performance of a contract to which the user is party or in order to take steps at the request of the user prior to entering into a contract.
to fulfil the obligations established by law, EU regulations or legislations, to prevent or discover fraudulent activities or malicious activities harmful to the site, for the protection of the legitimate interest of the Data Controller or third parties, unless interests, rights and fundamental freedom of the user should not prevail, and to resolve any complaints and/or disputes. Pursuant to the art. 6, para. 1 lett. c) – f) of GDPR, it’s not necessary the express consent.
to pursue promotional, advertising and marketing purposes such as sending newsletters, market research and statistical analysis. Pursuant to art. 23 and 130 of Italian Legislative Decree 196/2003 and pursuant to art. 7 GDPR, the user will be asked to give a separate and express consent.
4. Recipients or Categories of Recipients of Data.
Personal data provided may be communicated to employees or collaborators of the Controller who, acting under the direct authority of the latter, process data and are appointed as internal processors or processing officers or System Administrators and they will receive in that regard adequate operating instructions from the Controller; the same will occur - by the Processors appointed by the Controller - in relation to employees or collaborators of the Processors.
Personal Data may also be brought to the attention of external Processors of the Controller, appointed pursuant to Art. 28 GDPR, such as third party companies or other entities that perform outsourced activities on behalf of Athena S.p.A.
Categories of External Processors: a) third party suppliers, manufacturers, distributors, retailers and commercial partners of Athena S.p.A.; b) persons, companies or professional firms, providing activity of support, consultancy or collaboration to Athena S.p.A. on accounting, administrative, legal, tax and financial matters; c) credit institutions for profiles relating to the fulfilment of receipts and payments; d) companies that perform on behalf of Athena S.p.A. outsourced activities therein including IT technicians who manage the websites and respective electronic communication infrastructures required for that purpose; e) external suppliers who provide to Athena S.p.A. support services; f) agents.
5. Possible filling-in by the interested subject by using third parties’ personal data.
The user acknowledges that any indication (for example in the filling-in electronic modules on the site) of personal data and contact information of any third party represents a processing of personal data against which the user acts as Data Controller, thus assuming all the obligations and responsibilities of the law. In this sense, the user guarantees Athena S.p.A. that any third party data will be so designated by the user (and that will consequently be processed as if the third party had provided their informed consent to the processing) has provided the user with their full consent full compliance with the Data Protection Code. The user confers indemnification with respect to any dispute, claims of damage from handling, etc. that could reach Athena S.p.A. from any third parties concerned as a result of the data provided by the user in breach of the applicable personal protection data laws.
6. Place, Method of Processing and Data Storage Period.
Personal Data are processed mainly at the office of the Controller and in the locations in which the External Processors are located. For further information, contact the Controller.
Personal Data will be processed with electronic/automated media and on paper medium by means of operations of collection, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, block, communication, erasure and destruction of the data.
7. Transfer of Data to a Third Country and/or International Organisations.
8. Changes to this Privacy Notice.
You may at any time exercise the rights referred to in Article 7 of Legislative Decree 196/2003 by sending a written notice to the address indicated at privacy@athena.eu. For your convenience we reproduce in full the aforementioned Article 7.
Without prejudice to any other administrative and jurisdictional recourse, if you believe that the processing of data relating to you violates the provisions of EU Reg. 2016/679, in accordance with Art. 15 letter f) of the aforementioned GDPR, you have the right to make a complaint to the Data Protection Supervisor and, with reference to Art. 6 para. 1, letter a) GDPR and Art. 9, para. 2, letter a) GDPR, you have the right to revoke at any time the consent provided.
The interested party has the right to obtain confirmation of whether or not personal data concerning him, even if not yet recorded and their communication in intelligible form.

References: Art. 13
 Art. 2
 Art. 4
 Art. 6
 art. 6
 art. 6
 art. 23
 art. 7
 Art. 28
 Art. 15
 Art. 6
 Art. 9