ITALIANO ENGLISH MENU INFORMATION ON THE PROCESSING OF PERSONAL DATA (ART. 13 EU REGULATION 679/2016) FOR THE WEBSITE http://www.martiniprefabbricati.com/ property of Martini Prefabbricati Spa This information is provided pursuant to art. 13 of EU Regulation 679/2016 for users of the services of our Website. The indications provided below are also inspired by the guidelines drawn from art. 29 of directive no. 95/46/CE and, in particular, they concern the collection of personal data on the Internet with the aim of identifying the minimum measures that need to be implemented towards the interested parties in order to guarantee the loyalty and lawfulness of these practices (in application of articles 6, 7 , 10 and 11 of Directive 95/46/EC in force until 24 May 2018). MAIN DEFINITIONS from Articles 4, 37-39 of Regulation (EU) 679/2016 (hereinafter also Regulation) Personal data: any information concerning an identified or identifiable (interested) physical person; a physical person considered identifiable is the physical person who can be identified, directly or indirectly, with particular reference to an identifier such as name, an identification number, location data, an online identifier or one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity. Usage Data: the information collected automatically by this Application (or by third party applications that this Application uses), including: IP addresses or domain names of the computers used by the User who connects with this Application, the addresses in URI (Uniform Resource Identifier) notation, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc.) the country of origin, the characteristics of the browser and operating system used by the visitor, the various timing characteristics of the visit (for example the time spent on each page) and the details regarding the itinerary followed within the Application, with particular reference to the sequence of pages consulted, the parameters linked to the operating system and the User's IT environment. Profiling: any form of automated processing of personal data consisting of the use of this personal data to evaluate certain personal aspects regarding a physical person, in particular to analyse or predict aspects concerning professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movement of the physical person in question. User: the individual who uses this Application, who must coincide with the Interested party or be authorised by him or her and whose Personal Data is subject to possible processing. Processing: any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form that makes it available, comparison or interconnection, limitation, cancellation or destruction. Data Controller (or Controller): the physical or legal person, public authority, service or other body that, individually or together with others, determines the purposes and means of processing personal data; when the purposes and means of this processing are determined by European Union or Member State law, the data controller or the specific criteria applicable to its designation may be established by European Union or Member State law. Data processor: the physical or legal person, public authority, service or other body that processes personal data on behalf of the data controller; This Application or Platform: the hardware or software tool through which Users' Personal Data is collected. Data protection officer (DPO): a mandatory figure in some cases envisaged in art. 37 of the Regulation. The DPO carries out consultancy, monitoring, coordination and management of relations with the Supervisory Authority regarding the processing of personal data. THE DATA “CONTROLLER" The "Data Controller" of your personal data possibly processed following the use of this website, pursuant to art. 28 of Legislative Decree 196/03 and pursuant to art. 26 of Regulation (EU) 679/2016, is Martini Prefabbricati Spa, with registered office in Via Crocevia no. 29/b, Medole (MN), email address: privacy@martiniprefabbricati.com PURPOSE AND LAWFULNESS OF DATA PROCESSING The personal data provided by users who access this site, and possibly use the "CONTACT INFO" service, will voluntarily provide the following information: "CONTACT INFO": service provided to Users interested in receiving information on the services provided by the Data Controller on the subject of protection of personal data. The personal data required to access this service is exclusively the following: User's Name and Surname and Email address. User data deriving from the service provided is used for the sole purpose of carrying out the service itself or the possibly requested service, but it could be disclosed to third parties who operate as data processors for the technical management of the website. The Data Controller has determined the purposes for the processing identified in the performing of the Controller's activities. LEGAL BASIS OF THE PROCESSING By using the "CONTACTS" service, the interested party expresses his or her consent to the processing of his personal data for the purposes described above pursuant to art. 26 of Legislative Decree 196/03 as well as art. 6, paragraph 1, letter a) of Regulation (EU) 679/2016. LEGITIMATE INTERESTS PURSUED BY THE DATA CONTROLLER At the same time as the legal basis of the processing defined above, the Data Controller, for Direct Marketing purposes, pursues his or her legitimate interests pursuant to art. 6, paragraph 1 letter f). COMMUNICATION AND RECIPIENTS OF PERSONAL DATA The communication will take place only and exclusively to employees and direct collaborators of the Data Controller for the sole purpose of performing the service itself if requested by the User, unless the communication is imposed by legal obligations. The optional, explicit and voluntary sending of emails to the addresses indicated on the website (e.g. using the "CONTACT INFO" service) involves, by its very nature, the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. We invite our users, in requests for services or questions, not to send names or other personal data of third parties that are not strictly necessary or data defined "sensitive and/or particular" pursuant to art. 4 paragraph 1, lett. d) and e), as well as art. 26 of Legislative Decree 196/03 and articles 9 and 10 of Regulation (EU) 679/2016 within the limits and for the purposes specified in this information notice. METHODS AND MEANS OF PROCESSING Personal data is processed using automated tools, for the time necessary to fulfil the purposes for which it was collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access in compliance with the obligations to comply with minimum security measures. In fact, all data will be acquired and stored in compliance with the methods referred to in articles 11, 31 and those that follow of Legislative Decree 196/2003 and through the adoption of the minimum security measures envisaged by the technical specifications (Annex B of the Privacy Code) and in accordance with Articles 32, 33 and those that follow EU Regulation 679/2016. The Data Controller is not in charge of errors, contents, cookies, publications containing illegal immoral content, advertisements, banners or files that do not comply with the current regulatory provisions by websites that are not managed by him/herself. TRANSFER OF THE DATA TO A THIRD COUNTRY Transfer of data to a third country is not envisaged. AUTOMATED DECISION-MAKING PROCESS No automated decision-making process is envisaged. DURATION OF THE PROCESSING The personal data acquired, also through the "CONTACT INFO" service, will be retained for the duration necessary for the execution of the activities requested by the User and in any case for a period strictly necessary to fulfil the purposes for which it was collected. The retention time may be prolonged and may lead to the acquisition of further data later on, in the event that the user requests additional services; in this case, the duration of the processing, for administrative, accounting, tax and contractual purposes, may be extended up to 10 years, as envisaged by current regulations (art. 2220 of the Civil Code, art. 22 of Presidential Decree no. 600 of 29/09/1973 and art. 2200 of the Civil Code). The technical cookies for browsing (described below) will be retained for the sole purpose of allowing the correct technical functioning of the website. TYPE OF DATA PROCESSED FOR BROWSING During their normal operation, the IT systems and software procedures used to operate this website acquire some personal data, the transmission of which is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties but, by its very nature, it could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users who connect to the website, the addresses in URL (Uniform Resource Locator) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relative to the operating system and the user's computer environment. This data is used for the sole purpose of obtaining anonymous statistical information on the use of the website and to check its correct functioning. The data in question could be used to ascertain responsibility in the event of any computer crimes against our website. RIGHTS OF THE INTERESTED PARTIES The individuals to whom the personal data refers, pursuant to art. 7 of Legislative Decree No. 196/2003 and pursuant to Article 13 of EU Regulation 679/2016, have the right, at any time, to obtain confirmation of the existence or otherwise of this data and to know its content and origin, verify its accuracy or request its integration, updating or correction. The individuals to whom the personal data refers also have the right to request the cancellation, transmission of the data to other data controllers, transformation into anonymous form or blocking of data processed in violation of the law, as well as to oppose its processing, in any case, for legitimate reasons. The interested parties also have the right to submit a claim to the supervisory authority (Privacy Guarantor) Requests relative to art. 7 of Legislative Decree No. 196/2003 and Article 13 of EU Regulation 679/2016 must be addressed to the Data Controller at the following email address: privacy@martiniprefabbricati.com Rights of the interested party Legislative Decree no. 196/2003 TITLE II art. 7 “Right to access personal data and other rights” 1. The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him/herself, even if not yet registered, and its communication in an intelligible form. 2. The interested party has the right to obtain information regarding: the origin of the personal data; the purposes and methods of processing; the logic applied in the event of processing carried out with the aid of electronic tools; the identification details of the data controller, of the individuals responsible and of the designated representative pursuant to article 5, paragraph 2; the individuals or categories of individuals to whom the personal data may be communicated or who might learn about it as designated representative in the State territory, as managers or as individuals in charge. 3. The interested party has the right to obtain: the updating, correction or, when interested, integration of the data; the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data that does not require retention linked to the purposes for which the data was collected or subsequently processed; the attestation that the operations referred to in letters a) and b), also with regard to their content, were brought to the attention of those to whom the data was communicated or distributed, except in the case where this compliance proves impossible or involves the use of means manifestly disproportionate to the protected right. 4. The interested party has the right to object, in full or partially: for legitimate reasons, to the processing of the personal data that regards him/her, even if pertinent to the purpose of the collection; to the processing of the personal data concerning him/her for the purpose of sending advertising materials or for direct sale or for carrying out market research or commercial communication. European regulation 679/2016 art. 13 ì "Information to be provided if the personal data is collected from the interested party" Information to be provided if the personal data is collected from the interested party 1. In case of collection from the interested party of data concerning him/her, the data controller provides the interested party, at the time when the personal data is obtained, the following information: the identity and contact data of the data controller and, where applicable, of his/her representative; the contact data of the person in charge of the data protection, where applicable; the purposes of the processing for which the personal data is intended as well as the legal basis of the processing; if the processing is based on Article 6, paragraph 1, letter f), the legitimate interests pursued by the data controller or by third parties; any recipients or any categories of recipients of personal data; where applicable, the data controller's intention to transfer personal data to a third country or to an international organization and the existence or absence of an adequacy decision by the Commission or, in the case of the transfers referred to in Article 46 or 47, or in the second paragraph of Article 49, the reference to the appropriate or opportune guarantees and the means to obtain a copy of such data or the place where they were made available. 2. In addition to the information referred to in paragraph 1, when the personal data is obtained, the data controller provides the interested party with the following additional information necessary to ensure correct and transparent processing: the retention period of the personal data or, if not possible, the criteria used to determine this period; he existence of the right of the interested party to ask the data controller for access to the personal data and the correction or cancellation of the data concerning him/her or the limitation of its processing or to oppose the processing of the data, in addition to the right to data portability; if the processing is based on article 6, paragraph 1, letter a), or on article 9, paragraph 2, letter a), the existence of the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before revocation; the right to submit a complaint to a supervisory authority; if the communication of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, and if the interested party has the obligation to provide personal data as well as the possible consequences of the failure to communicate such data; the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party. 3. If the data controller intends to further process personal data for a purpose other than that for which it was collected, before this further processing, he/she provides the interested party with information on this different purpose and any further relevant information referred to in paragraph 2. 4. Paragraphs 1, 2 and 3 do not apply if and to the extent in which the interested party already has the information. POLICY COOKIES WHAT ARE COOKIES? A cookie is a text file that is stored on the user's computer or mobile device (smartphone or tablet) by the server of a website that the user accesses and which can be read or retrieved by the server that installed it on the occasion of subsequent visits to the same website. The cookie contains some information (e.g. the server from which it originates, a numerical identifier, the expiry of the cookie, etc.) and allows the website that installed it to remember, for example, the preferences expressed by the user while browsing or to make a purchase, perform authentications in order to access restricted areas or to monitor sessions. During browsing, the user can also receive cookies sent from different websites or web servers on his/her computer (so-called third parties), on which some elements may reside (e.g. images, maps, sounds, specific links to other pages of other domains) on the website the user is visiting. More generally, some cookies (called session cookies) are assigned to the user's device only for the duration of access to the website and automatically expire when the browser is closed. Other cookies (defined persistent) remain on the device for an extended period of time. USE OF COOKIES Cookies are text files that are stored on the computers of web users to allow safe and efficient exploration of the website and to monitor its use. This website uses two types of technical cookies: session cookies for authentication (online services) and statistical profiling/monitoring cookies (Google Analytics). As defined in the previous paragraph, cookies are text files that are stored on web users' computers to allow safe and efficient exploration of the website and to monitor its use. Technical session cookies (essential for the use of online services) The website http://www.martiniprefabbricati.com uses http session cookies to manage authentication to online services. The use of session cookies (which are permanently stored on the user's computer) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to allow safe and efficient exploration of the website. Disabling these cookies does not permit the use of online services. Technical Cookies for statistical profiling/monitoring (Google Analytics) Monitoring cookies can be disabled without any consequences for browsing of the portal: to disable them, see the next section. The Data Controller uses the Google Analytics service of the Google, Inc. company (hereinafter "Google") to generate statistics on the use of the web portal. Google Analytics uses cookies (not from third parties) that do not store personal data. The information obtainable from cookies on the use of the website by users (including IP addresses) will be transmitted by the user's browser to Google, based in 1600 Amphitheater Parkway, Mountain View, CA 94043, United States, and stored in the company's servers. According to the terms of service in place, Google will use this information, as an independent Data Controller, for the purpose of tracing and examining the use of the website, compiling reports on website activities for use by the operators of the website and providing others services related to website activities, connection methods (mobile, PC, browser used, etc.) and methods of searching and reaching the pages of the portal. Google can also transfer this information to third parties when this is required by law or when these third parties process the aforementioned information on behalf of Google. Google will not associate IP addresses with any other data owned by Google. To consult the Google company's privacy policy information, related to the Google Analytics service, please visit the following website: http://www.google.com/intl/en/analytics/privacyoverview.html To learn about Google's privacy policy regulations, please visit the following website: http://www.google.com/intl/it/privacy/privacy-policy.html. By using the Data Controller's website, you consent to the processing of your data by Google for the methods and purposes indicated above. How to disable cookies (opt-out) It is possible to deny consent to the use of cookies by selecting the appropriate setting on your browser: unauthenticated navigation on the Data Controller's portal will still be available with all its functionalities. Below, we provide the links that explain how to disable cookies for the most popular browsers (for other browsers that may be used, we suggest looking for this option in the help function of the software, normally available by using the F1 key): Internet Explorer: http://windows.microsoft.com/it-IT/windows7/Block-enable-or-allow-cookies Google Chrome: https://support.google.com/chrome/bin/answer.py?hl=it-IT&answer=95647&p=cpn_cookies Mozilla Firefox: http://support.mozilla.org/it/kb/Bloccare%20i%20cookie?redirectlocale=en-US&redirectslug=Blocking+cookies Apple Safari: http://www.apple.com/it/privacy/use-of-cookies\ Alternatively, you can only disable Google Analytics cookies, using the additional opt-out component provided by Google for the main browsers. In this way it will also be possible to use the Data Controller's online services. HOW TO DISABLE COOKIES SPECIFICALLY THROUGH BROWSER CONFIGURATION Chrome Run the Chrome Browser. Click on the menu in the browser toolbar next to the URL entry window for browsing. Select Settings. Click on Show Advanced Settings. In the "Privacy" section, click on the "Content settings" button. In the "Cookies" section, it is possible to change the following cookie settings: Allow local data saving; Change the local data only until the browser is closed; Prevent websites from setting the cookies; Block third-party cookies and website data; Manage the exceptions for some websites; Elimination of one or all cookies. Mozilla Firefox Run the Mozilla Firefox browser. Click on the menu in the browser toolbar next to the URL entry window for browsing. Select Options. Select the Privacy panel. Click on Show Advanced Settings. In the "Privacy" section, click on the "Content settings" button. In the "Tracking" section, it is possible to change the following cookie settings: Request the sites not to perform any tracking; Notify sites of availability to be tracked; Do not communicate any preference regarding the tracking of personal data. From the "Browsing History" section you can: By enabling "Use customised settings" select acceptance of third-party cookies (always, from most visited websites or never) and select keeping them for a specified period (until they expire, upon closing of Firefox or ask each time); Remove the individual cookies stored. Internet Explorer Run the Internet Explorer Browser. Click on the Tools button and choose Internet Options. Click on the Privacy tab and, in the Settings section, change the slider according to the desired action for the cookies: Block all cookies; Allow all cookies; Selection of the websites from which you obtain cookies: move the cursor to an intermediate position so as not to block or allow all cookies, then press on Websites, in the Website Address box enter an Internet Website and then press on Block or Allow. Safari Run the Safari Browser Click on Safari, select Preferences and press Privacy. In the Block Cookies section, specify how Safari must accept the cookies from Internet websites. To view which websites have stored cookies click on Details. Safari iOS (mobile devices) Run the Safari iOS Browser. Touch Settings and then Safari. Touch Block Cookies and choose between the various options: “Never”, “Third parties and advertisers” or "Always”. To cancel all the cookies stored by Safari, touch Settings and then touch Safari and lastly touch Cancel Cookies and data. Opera Run the Opera Browser. Click on the Preferences and then on Advanced and lastly on Cookies. Select one of the following options: Accept all cookies; Accept cookies only from the website you are visiting: third party cookies and those sent from a domain other than the one you are visiting will be rejected; Never accept cookies: all cookies will never be saved. REQUEST INFORMATION ON OUR PRODUCTS OPEN AND FILL IN THE FORM COMPANY A.L.I.C.E. CONTACT INFO Martini Prefabbricati S.P.A. Registered and administrative office: Via Crocevia, 29/b - 46046 Medole (MN) Tel. 0376 898008 - info@martiniprefabbricati.com VAT NUMBER 01563480209 - Business Register of Mantua and TAX CODE 01563480209 Mantua Economic and Administrative Index no. 167076 - Capital Stock € 5,000,000 fully paid up Sole proprietorship company subject to the direction and coordination exercised by Martini Holding S.p.A. CREDITS PRIVACY POLICY COOKIE POLICY