PRIVACY POLICY

Information for processing personal data – Information document pursuant to and for the purposes of Articles 13-14 of GDPR (General Data Protection Regulation) n° 679/201

In compliance with Reg CE 679/16 (GDPR), we are providing the necessary information regarding the processing of the personal data supplied. The information is invalid for other websites that may be visited through links present on the websites in the domain of the owner, who is not responsible in anyway for the websites of third parties.

1) Responsible owner and location of data processing

THE “OWNER” OF THE DATA PROCESSING

The data controller is C.S. IMPIANTI S.P.A, VAT number 08570150154 – registered and administrative office San Donato Milanese, Via A. Moro, 4 in the person of the pro-tempore legal representative.

PLACE OF DATA PROCESSING

The data processing is carried out at the offices of the data controller and identified external subjects.

2) Types of processed data

Personal and navigation data

«Personal data»: any information concerning an identified or identifiable natural person («interested»); shall be considered as identifiable the natural person who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, location data, an online identifier or one or more characteristic elements about his/her physical identity, physiological, genetic, psychic, economic, cultural or social;

Navigation data

The computer systems and the software procedures established for operating the website require, during their normal exercise, some personal data whose transmission is implicit in the use of Internet communication protocols.

The navigation data is not collected to be associated with identified interested parties, but rather to allow the identification of users through processing and association with data held by third parties. This category of data includes the IP addresses or domain names of the computers used by users connected to the website, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s IT environment.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this website and / or the compilation of data collection forms involves the subsequent acquisition of the sender’s address, which is necessary to answer the requests, and any other personal data inserted.

For the contact’s information please see the following link.

Cookies

See the cookies policy at the following link.

3) Processing shall be lawful only if and to the extent that at least one of the following applies (art. 6 GDPR)

A) Personal data, voluntarily provided, will be processed for the following purposes:

navigation on current website;
possible filling in of data collection form for requests of quotation and / or contacts and / or submission of applications;
possible filling in of data collection form for online booking;
general administrative and accounting activities.

For the purposes of the application of rules regarding the protection of personal data, the processing operations carried out for administrative and accounting purposes are connected with the performance of organizational, administrative, financial and accounting activities, regardless of the nature of the data processed. In particular, such purposes are pursued by the internal organizational activities, connected to the fulfillment of contractual and pre-contractual obligations, information activities.

B) The personal data provided by the compilation of the data collection forms present on the websites or general data collection forms (such as name, surname, e-mail address) will be processed, with the agreement, by the data controller and the data processors for commercial promotional activities and newsletters sent by e-mail

4) Processing methods – Conservation

The processing will be carried out automatically and manually, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically in charge for this purpose in compliance with the provisions of arts. 13-14 of the GDPR. The data will be stored for a period not exceeding the purposes of its collection and subsequently processed.

5) Communication and dissemination area

Your data, the subject of the processing, will not be disclosed unless necessary, it may be communicated to companies contractually connected to C.S. IMPIANTI S.P.A in order to comply with the contracts or purposes related. The data may be reported to third parties if belong to the following categories:

subjects that provide services for the management of the information system used by C.S. IMPIANTI S.P.A and telecommunications networks;
firms or companies in the context of assistance and consultancy relations;
relevant authorities for the fulfillment of legal obligations and / or provisions of public authorities, upon request.

The subjects that belong to the aforementioned categories act as data processing manager, or operate in total autonomy as separate data controllers. The list of managers is constantly updated and available at the C.S. IMPIANTI S.P.A registered and administrative office: San Donato Milanese, Via A. Moro, 4. Any further communication or distribution will occur following your explicit agreement.

6) Nature of conferment and refusal

Apart from what is specified for navigation data, the user is free to provide his/her personal data. The provision of data for the purposes referred to in point A) is necessary. The data controller cannot carry out the required services if the user refuses to share data regarding point A). The agreement of the data processing for the purposes referred to in point B) is optional. Any refusal of the agreement for the purposes illustrated in point B) will not produce any negative impact for the purposes referred to in point A).

7) Rights of interested parties

You can enforce your rights as expressed in articles 12-23 by contacting the owner, or the controller, in our offices at the telephone number +39 02 21783 or by sending an e-mail to the following address info@csimpianti.it.

As an interested party, your rights are set forth in art. 15 GDPR which concerns:

the obtaining of a confirmation of the existence or absence of your personal data, even if not yet registered, and their communication in intelligible form;
getting indications about:
a) the origin of personal data;
b) the purposes and methods of processing;
c) the logic applied in the case of processing carried out using the electronic instruments;
d) the identification of data concerning the data controller, data processors and the representative designated pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1 of GDPR;
e) the subjects or categories to whom the personal data may be communicated or discovered by a State’s representative, managers or charged;
getting:
a) an update, rectify or integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including the data which does not need to be preserved for the purposes for which the data was collected or subsequently processed;
c) the certificate that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data has been communicated or disseminated to, except in the case when such fulfillment occurs as impossible or involves a manifestly disproportionate use of resources compared to the protected right;
objecting, totally or in part:
a) for legitimate reasons to the processing your of personal data, even if pertinent for the purpose of its collection;
b) the processing of your personal data for the purpose of sending advertising material or direct sales or for carrying out of market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by phone and / or e-mail.

If applicable, you will also have the rights pursuant to articles 16-21 GDPR (Right of correction, right to oblivion, right to limitate the data processing, right to data portability, right to object), as well as the right to complain to the Guarantor Authority. You can obtain a confirmation of the existence or absence of your personal data and its communication and the purposes on which the treatment is based at any time. Moreover, you can obtain the deletion and/or transformation into anonymous form or blocking of processed data in violation of the law, as well as the updating, correction or, if your interest is existing, the integration of data. For legitimate reasons you can oppose the data processing.

8) Changes to the privacy policy

The owner reserves the right to modify, update, add or remove parts of the current privacy policy at his/her own discretion at any time. The person concerned must periodically check for any possible changes indicated by the data of the Information regulation. The use of the website, after the publication of the changes, will constitute acceptance of those changes.

9) Social plug-in

Our websites may contain Social Network plug-ins (for example Facebook.com, managed by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, United States (“Facebook”)). If you access one of our websites equipped with a similar plug-in, the internet browser connects directly to the social network and the plug-in is displayed on the screen thanks to the connection with the browser. Before using such plug-ins, we invite you to check the privacy policy of the social networks on their official pages.