STATEMENT PURSUANT TO ARTICLE 13 of Regulation (EU) 2016/679
We inform you that, pursuant to Regulation (EU) 2016/679, also known as the “General Data Protection Regulation” (hereinafter “GDPR”) and legislative decree 196/2003 and amendments relating to the protection of natural persons relative to the processing of their personal data, and the free circulation of such data, that any data or information provided by you to Officine Pollastri S.r.l. will be processed in accordance with the aforementioned laws and the obligation of confidentiality we espouse in all our operations.
The purpose of this statement is to give a transparent account of the purposes for which your data may be used, how it is handled, to whom it may be disclosed, where it may be sent (inside or outside the European Economic Area) and what your rights are.
Who processes your data
Your data will be processed by Officine Pollastri S.r.l. as Data Controller.
In addition to Officine Pollastri S.r.l. we inform you of the existence of external data supervisors who have been duly appointed, contracted and authorised by Officine Pollastri S.r.l. in accordance with the provisions of article 28 of GDPR.
A list of external data supervisors is available at the Officine Pollastri headquarters.
Types of data processed
Data processed is navigation data and data provided voluntarily by the user, as specified below.
Officine Pollastri S.r.l. informs users of this website that data collected will be used solely for the purposes outlined below.
Navigation data
In the course of their normal operation, IT systems and software acquire certain data whose transmission is implicit in the use of internet communication protocols: this data is not collected in order to be associated with identifiable data subjects, but by its very nature may allow users to be identified through elaboration and association with data held by third parties.
This category of data includes IP addresses or domain names of computers used by data subjects who connect to the website, addresses in URL notation of resources requested, the time of the request, the method used to convey the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (success, error etc) and other parameters relating to the user’s operating system and IT environment.
Such data is used for the sole purpose of obtaining anonymous statistical information on the use of the website and to verify its correct functioning, and is deleted immediately after processing. Data may be used to ascertain responsibility in the event of hypothetical computer crime or damage to the website.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of emails to addresses indicated on the website or the completion of contact forms entails the subsequent acquisition of the sender’s email address, necessary in order to respond to enquiries, as well as other personal information that may be provided. Such data will only be disclosed to third parties where necessary to satisfy the request of the user.
Purposes of data processing
Data is processed solely for the following purposes:
- a) purposes connected to navigation among the pages of the website;
- b) activities closely connected with and instrumental to the handling of relations with users and potential candidates (contact requests).
To this end, therefore, the provision of personal data is strictly necessary for the purposes mentioned: failure to provide data makes it impossible to carry out the aforementioned purposes and meet the user’s request. The scope and suitability of data provided will be evaluated on a case-by-case basis, in order to determine outcomes and avoid any data processing that exceeds the stated purposes.
Methods of data processing
By personal data processing, pursuant to article 4, paragraph 2 of the GDPR, we mean any operation or series of operations performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, storage, consultation, adaptation or alteration, selection, retrieval, comparison, use, alignment or combination, disclosure, dissemination, restriction, erasure or destruction; even if the data is not recorded in a database.
Processing is carried out by automated systems for a period strictly necessary to achieve the purposes for which the data is collected, i.e. in compliance with the law.
How long we keep your data
Your personal data will be stored for a period no longer than necessary to achieve the purposes for which it was collected and processed. Personal data will be stored for the entire duration of the relationship between parties, and even for a subsequent period in the following cases:
within the terms established by law;
within the terms established by secondary legislation which require the storage of data (e.g. tax declarations);
for the period necessary to protect the rights of the data controller in the event of disputes linked to the delivery of services.
In all cases, the maximum storage period is approximately 10 years from the end of relations between the parties.
Communication and disclosure of data
Personal data is processed by employees and/or staff contracted by the data controller who are appropriately trained, and will not be disclosed, but may be communicated to third parties (including partners, consultants and professionals, banks and credit institutions, insurance companies) in order to satisfy legal requirements, regulations, community law or for reasons related to the management and execution of the legal relationship existing or having existed.
For all the purposes indicated in this document, your data may also be communicated abroad, inside and outside the European Union, in accordance with the rights and guarantees stipulated in current legislation, subject to verification that the country in question guarantees an “adequate” level of data protection.
Rights of the data subject
As data subject, you may request at any time:
- a) access to your personal data;
- b) rectification in the event of incorrect data;
- c) erasure;
- d) restriction on processing;
- e) the right to object to data processing where the provisions exist;
- d) the right to data portability, i.e. to receive personal data relating to you in a structured, commonly-used and machine-readable format.
For anything not expressly stated in the above, you are referred to the relevant privacy law, and specifically to articles 15, 16, 17, 18, 20, 21 and 22 of the GDPR.
For anything not expressly stated in the above, you are referred to the relevant privacy law, and specifically to articles 15, 16, 17, 18, 20, 21 and 22 of the GDPR.
In the event of violation, the data subject has the right to lodge a complaint with the supervisory authority (article 13, paragraph 2, point d) of GDPR).
Withdrawal of consent
Consent given for the processing of personal data may be withdrawn at any time, without prejudice to:
– the lawfulness of data processing carried out in the period prior to the withdrawal;
– further processing based on different legal grounds than consent, e.g. contractual and legal obligations.
For further information about this statement or any issue related to the protection of your personal data and the free circulation of the same, or if you wish to exercise the rights outlined above or withdraw consent, please email to info@officinepollastri.it
Data Controller
The Data Controller is Officine Pollastri S.r.l. with headquarters at Via della Costituzione 31, 42015 Correggio (RE).
