Relating to the processing performed on personal data collected through the site https://www.italporphyry.eu
For us, data protection is a very serious topic so we would like to inform you about the way data is processed and the rights you can exercise under the relevant data protection regulations, EU Regulation 2016/679 (hereinafter also "GDPR").
Data controller
Data controller under the General Data Protection Regulation (GDPR) is:
Italporphyry Consorzio Italiano Porfido del Trentino soc. cons. coop. - Via Kufstein, 1 scala A second floor Production Location 38121 Trento (Tn) - Italy -Tel. (+39) 0461-829835 - Fax (+39) 0461-828838 - email: info@italporphyry.eu
Objectives and purposes of processing, legal basis, and mandatory or optional nature of processing
We are committed to complying with all data protection provisions regarding the data of visitors to the website. We process data to enable visits to the website, only to the extent necessary and permissible under the data protection provisions.
You may visit our website without providing any information about yourself. If you use our website solely for the purpose of informing yourself, we do not collect personal data. There is an exception for data that your browser automatically transmits to enable you to visit the website, as well as for information transmitted by the cookies we use (see the cookie policy in the Privacy section of this website for more detailed information).
By processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction.
In particular, the personal data processed through the site are as follows:
1) Browsing data collected during a visit to our website.
- In order to make your visit to our website attractive, optimize and personalize it, and to enable the use of certain functions (e.g. language choice) we make use of so-called cookies on the basis of Art. 6 para. 1 lit. f of the GDPR. Our legitimate interest in using cookies lies in our desire to configure our website so that it is secure, easy to use and efficient.
- What are cookies and what are they used for? They are small text files that are placed in your terminal. Some of the cookies we use are deleted at the end of your browser session, that is, after you close your browser (so-called session cookies). Other cookies remain in your terminal and allow us or our associated companies to recognize your browser on your next visit (persistent cookies).
- You can set your browser so that you are informed of the placement of cookies and can decide to accept them on a case-by-case basis or to accept them for certain instances or to exclude them generally. If you do not accept cookies, the functionality of our website may be limited.
For more information regarding the use of cookies see the cookie privacy document found in the Privacy section of this site.
2) Contact forms - Data voluntarily provided by the data subject.
- We process personal data submitted by you (e.g., via contact form, telephone, or e-mail) for the purpose of following up on your requests and conducting personalized communication, should you so desire. You disclose such data on an expressly voluntary basis. The data that are collected in the case of the contact form can be inferred from the contact form. We then use the information stored by us on the basis of Art. 6 Paragraph 1 lit. b of the GDPR, for the purpose of providing the services you desire, and on the basis of Art. 6 Paragraph 1 lit. f of the GDPR, for the purpose of customer management and market research (anonymized internal analysis of customer structure); our legitimate interest lies in the appropriate configuration of these services and the promotion of user and customer satisfaction.
3) Newsletter - Data voluntarily provided by the data subject
- By subscribing to our newsletter you are stating that you accept receipt of it and the process described.
- Newsletter content: in principle, we will send you information and offers on products and trade show appointments.
- Subscription information: to subscribe to the newsletter, simply give us your contact information.
- If you have consented to be sent the newsletter, we will use your personal information (e.g., name and e-mail address) exclusively to send you our newsletter.
- We process your data for sending newsletters and for content customization based on the following legal basis: if you have given us your consent, according to Art. 6 para. 1 lit. a of the GDPR and for the execution of the newsletter subscription according to Art. 6 para. 1 lit. b of the GDPR.
- If you have provided us with your e-mail address in the context of purchasing goods or services or if we send you personalized advertising, in order to protect our legitimate interests within the meaning of Article 6 Paragraph 1 lit. f of the GDPR; our legitimate interest is based on the economic interest in the performance of advertising measures and targeted advertising.
- Unsubscribe/revocation: you may unsubscribe from receiving our newsletter at any time, i.e., revoke your consent. A newsletter unsubscribe link is provided at the bottom of each newsletter. Before we delete the e-mail addresses stored for the purpose of sending the newsletter, we may retain them for up to three years based on our legitimate interests, so that we can prove that consent was given in the past.
- The registration of the subscription process is done on the basis of our legitimate interests according to Article 6 paragraph 1 letter f of the GDPR. Our interest relates to our desire to use a user-friendly and secure newsletter system that not only serves our business interests but also meets users' expectations and also allows us to prove the consents provided.
Transfer of data to third parties/data recipients
We do not pass on your personal data to third parties. If in individual cases data is transferred to third parties (e.g. IT service providers such as hosting, newsletters), in particular on the basis of Article 6 paragraph 1 letter b or f of the GDPR, such data will of course be treated in strict confidence. We commit our service providers in writing according to the strict requirements of the GDPR, so they can only use the data for the intended purposes. If you would like information about the service providers we currently use, we will be happy to send you a list upon request.
Exercise of data subject's rights
The data subject, in relation to the personal data covered by this notice, is entitled to exercise his or her rights under the EU Regulation below:
- Data subject's right of access [Art. 15 of the EU Regulation]: the data subject shall have the right to obtain from the controller confirmation as to whether or not personal data relating to him/her are being processed and, if so, access to the information expressly provided for in the aforementioned article, including but not limited to the purposes of the processing, the categories of data and recipients, the storage period, the existence of the right to erasure, rectification or restriction, the right to lodge a complaint, all available information on the origin of the data, the possible existence of an automated decision-making process pursuant to Art. 22 of the Regulation, as well as copies of their personal data;
- Right of rectification [Art. 16 of the EU Regulation]: the data subject has the right to obtain from the controller the rectification and/or supplementation of inaccurate personal data concerning him/her, without undue delay;
- Right to erasure ("right to be forgotten") [Art. 17 of the EU Regulation]: the data subject has the right to the erasure of his or her personal data without undue delay, if there is one of the reasons expressly provided for in the aforementioned article, including but not limited to the fact that the processing is no longer necessary in relation to the purposes, revocation of the consent on which the processing is based, objection to the processing if it is based on a legitimate interest that is not overriding, unlawful processing of data, erasure due to legal obligations, data of minors processed in the absence of the conditions of applicability provided for in Article 8 of the Regulation;
- Right to limitation of processing [Art. 18 of the EU Regulation]: in the cases provided for in Art. 18, including unlawful processing, contestation of the accuracy of the data, objection by the data subject, and the cessation of the need for processing by the data controller, the data subject's data must be processed only for preservation unless the data subject's consent is obtained and the other cases expressly provided for in the aforementioned article;
- Right to data portability [Art. 20 of the EU Regulation]: the data subject, in cases where processing is based on consent and contract and is carried out by automated means, may request to receive his or her personal data in a structured, commonly used and machine-readable format, and has the right to transmit it to another data controller;
- Right to object [Art. 21 of the EU Regulation]: the data subject has the right to object to the processing of his or her personal data if the processing is based on a legitimate interest that is not overriding or is carried out for direct marketing purposes;
- Right not to be subjected to automated decision-making [Art. 22 of the EU Regulation]: the data subject has the right not to be subjected to a decision, including profiling, based solely on automated processing (e.g. carried out exclusively by electronic means or computer programs).
- Right to lodge a complaint: if the data subject believes that his or her rights have been compromised, he or she has the right to lodge a complaint with the Italian Data Protection Authority in the manner specified by the Authority at the following website address:
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524 or by sending written notice to the Guarantor Authority for the Protection of Personal Data, Piazza Montecitorio n.121, 00186 Rome.For more details on the rights of data subjects provided by the Guarantor, please refer to the following website: https://www.garanteprivacy.it/web/guest/regolamentoue/diritti-degli-interessati
To exercise your rights, please email us at info@italporphyry.eu or to contact the data controller by other means.
You will find the form for the EXERCISE OF RIGHTS RELATING TO PROTECTION OF PERSONAL DATA (Articles 15-22 of Regulation (EU) 2016/679) in the Privacy section of this website.
Generic duration of data storage
The general duration of storage of your data depends on the purposes pursued with the storage. In principle, we delete your personal data if we no longer need it to achieve the purpose pursued with the storage, unless the deletion is opposed by retention periods established by law.
Data Protection
We have taken technical and organizational precautions to protect your data, particularly from loss, manipulation or unauthorized access. We regularly adapt our security measures to ongoing technical development.
Contractual or statutory requirement for making data available
You are neither required by law nor by contract to make your data available. However, please keep in mind that making some data available is necessary for us to provide you with the services offered on the website. For example, we need your IP address to show this website in your browser.
Automatic decision making
We do not resort to automatic decision making or profiling.
Transfers of personal data
Some of your personal data is shared with recipients who may be located outside the European Economic Area (related to the email service).
Italporphyry Consorzio Italiano Porfido del Trentino soc. cons. coop. ensures that the processing of its personal data by these recipients is done in compliance with the Regulation. Indeed, transfers may be based on an adequacy decision or Standard Contractual Clauses approved by the European Commission.
Changes
This privacy policy is effective as of 24/05/2020.
Italporphyry Consorzio Italiano Porfido del Trentino soc. cons. coop. reserves the right to modify or simply update its content, in part or completely, also due to changes in applicable regulations. If changes to this policy concern substantial changes in processing or may otherwise have a significant impact on the data subjects, Italporphyry Consorzio Italiano Porfido del Trentino soc. cons. coop. will take care to notify the data subjects accordingly.