Source: http://www.mondialforni.com/en/privacy-policy-en/
Timestamp: 2020-08-05 13:55:33
Document Index: 536815982

Matched Legal Cases: ['art. 13', 'art. 4', 'art. 4', 'art. 2', 'art. 7', 'art. 15', 'art. 2']

Privacy Policy EN - Mondial Forni
Privacy Notice pursuant to EU Regulation 679/2016
Mondial Forni S.p.A. VAT no. and Tax Code 02230990232) in the person of the legal representative with registered office at 1 Via Dell'Elettronica, 37139 Italy (hereafter the "Controller"), as Data Controller of personal data pursuant to articles 4, no. 7) and 24 of EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data (hereafter the "Regulation") and Articles 4 and 28 of It. Legislative Decree of 30 June 2003, no. 196 - Privacy Code (hereafter the "Code") informs pursuant to art. 13 of the Regulation and 13 of the Code that it will process personal data referring to customers or persons who request information (if they are natural persons).
The data processed are: personal data; contact information such as telephone number, e-mail address, references and specific requests. Personal data will be processed exclusively for the provision of information as requested by the customer and for all activities related to this, including the purposes of the establishment and management of contractual relationships of any kind, as defined by industry legislation. The provision of the requested data is essential to carry out the service and any refusal to provide such data implies the failure to satisfy the request; processing will be carried out both manually and through the use of IT procedures; data will not be disseminated.
The processing of personal data is carried out by means of the operations indicated in art. 4 no. 2) of the GDPR and art. 4 of the Privacy Code, namely: collection, registration, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data are subjected to paper and electronic and/or automated processing. The Data Controller will process personal data for the time necessary to fulfil the aforementioned purposes and in any case no later than 5 years from the request for information or from the last contact. In case of consent to the processing for sending commercial information, the email that will be included in the sending list will be used for the above mentioned purposes until cancellation by the user and in any case no later than 5 years from the date the last email containing commercial information is sent.
The Data Controller may provide access to personal data to the following parties (for purposes of fulfilment of obligations related to the relationship established or for purposes of data retention security):
to employees and collaborators of the Data Controller in their capacity as authorised persons and/or DPOs and/or system administrators, all formally appointed or assigned;
The Data Controller may communicate the data for the purposes referred to in art. 2 to Supervisory Bodies, Judicial Authorities and to all the other parties to whom the communication is mandatory by law for the accomplishment of the purposes established by law. The aforementioned data will not be disseminated.
The management and storage of personal data will be carried out on servers located within the European Union owned by the Data Controller and/or third-party companies assigned and duly appointed as Data Processors. Currently the servers are located in Italy and/or in the EU.
The customer in his/her capacity as a data subject has the rights set forth in art. 7 of the Privacy Code and art. 15 of the EU Regulation and namely:
d) of the identifying details of the data controller, the data processors and the representative;
b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is not necessary for the purposes for which the data were collected or subsequently processed;
c) certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except for the case where such fulfilment proves impossible or requires the use of means clearly disproportionate to the right being protected.
b) to the processing of personal data concerning him/her for the pursuit of purposes not contemplated by art. 2. Where applicable, the data subject also has the rights set forth in articles 16-21 of the GDPR (Right of rectification, right to be forgotten, right of limitation of processing, right to data portability, right of opposition), as well as the right of complaint to the Data Protection Authority.
The customer at any time may exercise the rights referred to in the previous article by:
registered letter with return receipt to: