Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)
Data controller, pursuant to Articles 4 and 24 of EU Reg. 2016/679, is the company COSTRUZIONI ELETTROTECNICHE CEAR SRL, with registered office in Gessate (MI) Via Monza n. 102, in the person of the pro-tempore legal representative. Contact details: Tel. +39 02 929290.1 – Mail email@example.com – Fax +39 02 92151670.
In compliance with the provisions of EU Reg. 2016/679 (General Data Protection Regulation) we provide you the necessary information regarding the processing of personal data.
PROCESSED PERSONAL DATA
Personal data: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person (such as name, last name, date of birth, address, email, telephone number).
During their ordinary course of operation, the IT systems and software procedures required to run this website acquire certain Personal Data, whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified Data Subjects but, by its very nature, it could enable identification of the users through the processing and matching of data held by third parties. This data category includes IP addresses or domain names of computers used by the users who visit the site, as well as the URI addresses (Uniform Resource Identifier) of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in reply, the numerical code indicating the status of the reply from the server (done, error, etc.) and other parameters related to the operating system and the IT environment of the user.
Data provided voluntarily by the user
The optional and voluntary disclosure of personal data (e.g.: sending of emails to the email addresses indicated on this website and/or the completion of a data collection form on this website) entails the collection and processing of the voluntary disclosed user’s data, necessary to reply to the request, as well as other personal data included in the email message (such as name, last name, address, telephone number, email address).
This site does not use profiling cookies, either for statistical purposes or for advertising targeting.
Only technical cookies are used for the site accessibility. Temporary session cookies are used to improve navigation by adapting the operation of the site to the type of devices used (computer, mobile phone, tablet, etc..).
|Purposes||Legal basis||Data Retention Period|
|A||Navigation of this website / obtaining anonymous statistical information on the use of the website and services / control of website’s correct functioning||Controller’s legitimate interest:ensure the correct browsing and
usage of the website
|Duration of the browsing session, (except for any need to ascertain criminal offenses by the judicial authorities)|
|B||Activities of organizational, administrative, financial and accounting nature and management of customer data, regardless of the nature of the data processed. In particular, internal organizational activities pursue these purposes.||Controller’s legitimate interest and legal obbligations compliance||10 yearsArt. 2220 Civil Code
|C||Provide feedback to users in case of requests, by filling in the contact forms on the website or by sending e-mails.||Controller’s legitimate interest:reply to users’ requests||1 year|
|D||Staff selection. Any personal data or curricula collected through this channel of communication will be treated in compliance with the provisions of the information notice dedicated to the selection of applications, sent at the time of the first useful contact, following the sending of the curriculum.||Pre-contractual measures||Up to 12 months|
PERSONAL DATA RECIPIENTS
The personal data provided will be communicated to recipients, who will process the data as processors (Article 28 of the GDPR), as persons acting under the authority of the Controller and Processor (Article 29 of the GDPR) or autonomous Data Controllers, for the purposes listed above.
Precisely, the data will be communicated to:
- parties that provide services for the management of the website (webmaster), of the information system and telecommunications networks used by the Data Controller;
- studies or companies in the context of assistance and consultancy relationships;
- competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request.
The list of data processors is constantly updated and available at the headquarters of the Data Controller.
DATA TRANSFER TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES
The personal data provided won’t be transferred to countries outside the EU/SEE.
NATURE OF DATA PROVISION
Except for what specified for navigation data which are necessary in order to allow navigation of the website, users are free to provide their personal data by filling in the contact form; by writing to the email addresses indicated on this website.
DATA SUBJECT’S RIGHTS | COMPLAINT TO SUPERVISORY AUTHORITY
You may exercise your rights pursuant to articles 15 et seq. of the Regulation EU 2016/679 by writing to the Controller’s contacts above.
You have the right, at any time, to request the Controller to access your personal data and receive the information concerning their processing. You have the right to rectify, erase your personal data or limit their processing. Where appropriate, you have the right to object, at any time, to the processing of your data.
You have the right to the portability of your personal data; in such case the Controller shall provide you with your personal data in a structured, commonly used and machine-readable format. Without prejudice to any other administrative or judicial remedy, if you consider that the processing of your personal data infringes the Regulation (EU) 2016/679, you have the right to lodge a complaint with the Data Protection Authority.
Last update: 13 november 2020