Privacy

INFORMATION

article 13 EU Regulation 679/2016

Dear User/visitor, we wish to inform you that EU Reg. 679/2016 (and Legislative Decree 196/2003 and subsequent amendments, only to the extent compliant with EU Reg. 679/2016) provides for the protection of natural persons with respect to the processing of personal data. According to this legislation, this processing will be based on the principles of correctness, lawfulness and transparency, protecting your privacy and your rights.

Pursuant to the aforementioned article 13 of EU Regulation 679/2016, we therefore provide you with the following information:

  1. a) The processing provided by you by completing this data collection form will be carried out through an automated process and/or collection of paper documentation and pursues the following purposes:

– process your request for information/contact with the data controller, made through the website www.gestekimpianti.it.

It should be noted that, in no section of the site, nor for access to any functionality of the site, is the provision of “particular categories of personal data” and/or “personal data relating to criminal convictions and crimes”, as defined from the art. 9 and 10 of EU Reg. 679/2016: if the User spontaneously sends information of the aforementioned type to the data controller, the data controller will process such data in compliance with current legislation on the protection of personal data (Reg. EU 679/2016) and within the limits of what is strictly necessary in relation to the requests expressed by the interested User.

We remind you that the following information is provided only for this website and not for other sites that may be consulted by the user via links. We also remind you that the optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests for information, as well as any other personal data included in the missive.

  1. b) The provision of data is optional for the execution of the purposes referred to in letter a) and their failure to provide them (see mandatory data) could make it impossible to take into consideration your request for information/contact with the data controller and/or the inability to follow up on your requests; the processing is not based on the assumptions set out in the art. 6, paragraph 1, letter. f) EU REG. 679/2016.
  2. c) Your personal data will be processed by subjects specifically appointed by the data controller as data controllers and/or by anyone acting under his authority and who has access to personal data; these subjects will process your data only if necessary in relation to the purposes of the provision and only in the context of carrying out the tasks assigned to them by the data controller, undertaking to processexclusively the data necessary to carry out these tasks and to carry out only the operations necessary for carrying out the same.

c1) The Data Controller may transfer personal data to a third country or an international organisation; in these cases the Data Controller undertakes to carry out the processing only in the presence of appropriate guarantees.

c2) In compliance with the Provision “Measures and precautions prescribed to the data controllers carried out with electronic instruments in relation to the attributions of system administrator functions – 27 November 2008” (Official Gazette no. 300 of 24 December 2008) and related additions and amendments, the the data controller may appoint specific “System Administrators” who, as part of the performance of their functions, will be able to access, even indirectly, services or systems that process or allow the processing of personal information.

c3) The data will not be communicated to other third parties unless you ask for your express consent in advance.

Your personal data will not be disclosed.

  1. d) The data will be kept for the time necessary to achieve the purposes indicated above, in a form that allows identification of the interested party for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed, after which, if not expressly reconfirmed by the interested party, they will be destroyed, except for their transformation into anonymous form.
  2. e) The personal data provided will not be processed for the purpose of carrying out an automated decision-making process (so-called profiling).
  3. f) In the event that the personal data provided must be processed for purposes other than those indicated above, the Data Controller will provide you with information regarding this different purpose and any further relevant information.

The Data Controller, taking into account the state of the art and implementation costs as well as the nature, scope, context and purposes of the processing both when determining the means of processing and at the time of the processing itself (so-called risk analysis – accountability), has implemented adequate technical and organizational measures, aimed at effectively implementing the data protection principles and integrating the necessary guarantees into the processing in order to satisfy the requirements of EU Reg. 679/2016 and protect the rights of the interested party.

The data will be processed using methods and tools suitable to guarantee their security (art. 24, 25 and 32 EU Reg. 679/2016) and will be carried out through an automated process and through non-automated means (paper archives), to which all the technical and organizational measures aimed at guaranteeing a level of security adequate to the risk, so as to ensure on a permanent basis, their confidentiality, integrity, availability and resilience of the processing systems and services (by way of example but not limited to: controls both on assignment of tasks to the subjects responsible for data processing and on the classification of the data themselves; procedures, if sustainable, of pseudonymisation and encryption, disaster recovery mechanisms, etc.).

We inform you that the processing of data is based on the provisions of the art. 6, paragraph 1, letter. a) EU Reg. 679/2016 and the User is free to provide their own information by sending it to the data controller through the contact details on the website (www.gestekimpianti.it) and/or by completing specific information collection forms on the site; in the latter case, failure to provide some data could, depending on the case, make it impossible to carry out the activities requested by the User (for example, see “mandatory fields”, within the information collection forms ).

The data controller is: Gestek implanti s.r.l. Via Dalton, 58 – 41122 Modena (MO) Fiscal Code and VAT number IT03601100369 tel. +390598300174 e-mail: info@gestekimpianti.it

Pursuant to art. 28 of the REG. EU 679/2016, the Data Controller may make use of third parties who process data on its behalf and formally appointed by them as data processors. The complete and updated list of designated data controllers will be provided to you by the Data Controller upon your simple request, by sending a communication to the contact details previously indicated.

Pursuant to art. 29 of the REG. EU 679/2016, the Data Controller may make use of anyone acting under his authority and/or the appointed manager; these subjects will be duly trained.

The Data Controller has not currently designated the D.P.O. (art. 37 EU REG. 679/2016 and WP Guidelines article 29 of 13.12.2016), as an unnecessary figure within the structure, given that the characteristics of the treatments do not fall within the cases referred to in the aforementioned article 37.

The Data Controller also informs you that:

  1. g) The interested party has the right to ask the Data Controller for access to their personal data and the rectification or cancellation of the same or the limitation of the processing that concerns them or to oppose their processing in addition to the right to data portability (art. 15, art. 16, art. 17, art. 18, art. 20 EU REG. 679/2016); with the exercise of the right of access, the interested party has the right to obtain from the owner confirmation as to whether or not personal data concerning him or her are being processed, while the exercise of the right to portability allows the interested party to obtain from the data controller the personal data in a structured, commonly used and readable format or the transfer of said data from the original data controller to another (see WP 242 of 13.12.2016).
  2. h) The interested party has the right, in the event that the processing is based on Article 6, paragraph 1, letter a) or on Article 9, paragraph 2, letter a), to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.
  3. i) The interested party has the right to lodge a complaint with a supervisory authority.
  4. j) The interested party has the right to learn, from the Data Controller, who must do so without justified delay, of a violation of personal data likely to present a high risk for the rights and freedoms of natural persons ( art. 34 EU REG. 679/2016).

The full text of the articles of the REG. EU 679/2016 relating to your rights (articles 15 to 23 inclusive) can be consulted at the following link on the website of the Authority for the Protection of Personal Data:

  • https://www.garanteprivacy.it/regolamentoue

or, alternatively, they will be provided to you by the Owner upon your simple request.

 

Last modification date May 2022