The company Tecnocarpent SRL, with registered office in Via Artigianale n. 123 25010 Montirone (Brescia) Italy registered in the Brescia Register of Companies R.E.A. no. BS – 394375, C.F. and VAT no. 03416880171, in the person of its legal representative pro tempore, Angelo Portesi, as data controller (hereinafter, the Data Controller), informs, pursuant to art. 13 EU Regulation no. 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter, the GDPR) that the data will be processed as follows.
— 1. Object of Treatment
1.1 The Data Controller processes personal, identification and non-sensitive data (name, surname, tax code, VAT number, email, telephone number) communicated when signing contracts with the Data Controller and/or when sending requests for information made through its website (hereinafter, the Personal Data).
1.2 The Data Controller processes information obtained, also by means of cookies, on the use that the interested party makes of the site, including connection times, navigation data, page visits, clicks on content, and his/her preferences.
— 2. Purposes of Treatment
2.1 Personal Data are processed:
— 3. Treatment Modalities
3.1 The processing of Personal Data is carried out by means of the operations indicated in art. 4, n. 2) GDPR or collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
3.2 The Personal Data are subject to both paper and electronic and/or automated processing.
3.3 The Data Controller will process Personal Data for the time necessary to fulfill the above purposes and in any case for no longer than 20 years from the termination of the relationship for service purposes and for no longer than 20 years from the collection of data for marketing purposes.
— 4. Data Access
4.1 Personal Data may be made accessible to employees and collaborators of the Owner, in their capacity as appointees and/or internal data processors and/or system administrators.
— 5. Data Communication
5.1 Without the express consent of the interested party pursuant to art. 6, lett. b) and c) GDPR, the Owner may communicate Personal Data for the purposes referred to in art. 21, lett. a) to supervisory bodies, judicial authorities and to all other subjects to whom communication is required by law for the fulfillment of the aforementioned purposes.
— 6. Data Transfer
6.1 The management and storage of personal data will take place on servers located within the European Union of the Owner and/or third party companies appointed and duly appointed as Data Processors. Currently the servers are located in Google Cloud. The data will not be transferred outside the European Union. It is in any case understood that the Owner, if necessary, will have the right to move the location of the servers in Italy and/or European Union and/or non-EU countries. In this case, the Data Controller assures as of now that the transfer of data outside the EU will take place in compliance with the applicable provisions of law by entering, if necessary, into agreements that guarantee an adequate level of protection and/or by adopting the contractual clauses provided by the European Commission.
— 7. Nature of Data Conferment and Consequences of Refusal
7.1 The provision of data for the purposes referred to in art. 2.1, lett. a) is mandatory. In their absence, the Owner will not be able to guarantee either the registration to the site or the services of art. 2.1, lett. a).
7.2 The provision of data for the purposes of art. 2.1, lett. b) is optional. It is up to the interested party not to provide any data or subsequently deny the possibility of processing data already provided: in this case, the person concerned will not receive newsletters, commercial communications and advertising material relating to the Services offered by the Owner, but will be entitled to the services referred to in art. 2.1, lett. a).
— 8. Rights of the Interested Party
8.1 Pursuant to art. 15 GDPR the interested party will have the right to:
8.2 If the conditions provided for by the GDPR exist, the interested party may exercise the right of rectification, the right to be forgotten, the right to limitation of treatment, the right to data portability and the right to object, as well as the right to complain to the Authority Guarantor.
— 9. How to Exercise Your Rights
The interested party may at any time exercise its rights by sending a registered letter with return receipt to Tecnocarpent SRL, Via Vittorio Emanuele II, n. 1, (25122) Brescia or a PEC to [email protected].
— 10. Minors
10.1 The Owner’s website and services are also intended for persons under 18 years of age. The owner will only collect personal information relating to minors with the written consent of both parents or those exercising parental authority. In the event that information on minors were recorded in the absence of these requirements, the owner will proceed to their cancellation.
— 11. Owners, Responsible and Appointed Persons
11.1 The Data Controller is Tecnocarpent SRL. The updated list of data processors and persons in charge of the processing is kept at the headquarters of the Owner of the processing.
12.1 This Policy may be subject to change. It is the responsibility of the interested party to regularly check for updates.