Privacy Notice pursuant to the art. 13 of the Regulation (EU) 2016/679
Dear Customer,
we wish to inform you that, to the senses and in respect with art. 13 of the European Regulation (EU) 2016/679 (as follow for simplicity GDPR), X-METAL S.R.L., tax code and VAT No. 08452090965, current in 20025 Legnano (MI), via Sebastiano Caboto s.n.c., Telephone: +39 0331-454829; E mail: info@x-metal.it; PEC: xmetal@pec.it, is the data controller of your personal data and will proceed to their treatment in compliance with the current legislation and according to what follows (for simplicity as follow X-METAL)
1. Personal data categories
X-METAL S.r.l. as part of the contract obligations collects and uses personal identification data and contact information as well as additional information about the date and place and products purchased (as follow for simplicity Personal Data).
2. Purpose and legal processing of personal data
The Personal Data can be collected and processed based on the business purpose and processes, on paper or through digital methodologies. The Personal Data collection is always performed in compliance with the principles of necessity, lawfulness, correctness, proportionality and transparency.
As follow are indicated legal principle behind each collected data (as follow for simplicity Legal Basis)
a. Purchase of goods or services
To fulfill the contract obligation to which you are a party. The Legal Basis for such management is the execution of the purchase of goods or services, including the activity of reporting and handling of customer complaints.
b. Compliance with obligations under applicable regulations and national and supranational law.
To comply with obligations imposed by laws or regulations or orders from competent authorities. The Legal Basis for such treatment is the need to comply with a legal obligation.
c. Verification of compliance with the provisions of the EU Regulation with regards the rights protection.
To manage any conduct in violation of the provisions of the EU Regulation and protect our rights in court (including any recovery of claims out of court). The Legal Basis is the legitimate interest (judicial protection).
d. For marketing purposes (direct)
To send you by phone, mail or electronic communications (such as e-mail, sms and mms, newsletters) advertising and promotional materials. The Legal Basis for the management of this Personal Data is your consensus (optional and revocable at any time).
3. Nature of the provision of Personal Data
The provision of your personal data contact details is mandatory for the stipulation of contractual relationships. The miss/incomplete/false communication of it will invalidate the contract.
4. Personal Data recipient
In order to fulfil the purpose described in this document, your personal data will be processed by X-METAL employees in charge for the business relationship with you. These personnel have been expressly authorized to process the Personal Data and have received adequate operating instructions. The Personal Data should be processed and manages by authorized personnel of third parties who operate as our data controllers (such as IT services and customer service supplier). Where strictly necessary in order to fulfill the provisions included in this document, your personal data may also be disclosed to independent third-party data controllers, such as the competent authorities, notary public and chamber of commerce.
5. Duration and storage location of Personal Data
X-METAL stores your Personal Data in servers located within the European Economic Area for the time strictly necessary to achieve the purposes described in this documents in accordance with civil and fiscal obligations of storage and the limits provided by European Regimentation and Italian Law.
To this exerted X-METAL specifies that:i dati personali anagrafici e di contatto comunicati in occasione di acquisto di beni o servizi sono conservati per tutto il periodo di durata del contratto e, dopo la cessazione, per il periodo di prescrizione ordinaria (pari a 10 anni);
- Personal Data and contact details communicated when purchasing goods or services are kept for the entire duration of the contract and, after termination, for the period of ordinary limitation (10 years);
- Personal Data and contact details communicated to fulfill the obligations under regulations and national and supranational legislation are kept for the duration required by law (10 years for administrative and accounting);
- In the case of consent to processing for marketing purposes, Personal Data and contact details are kept until the revocation of consent.
6. Rights of the Data Subject
- access the content of your personal data and obtain a copy (right of access);
- update, modify and/or correct your personal data (right of rectification);
- request the cancellation or limitation of the processing of your data, in the cases provided for by the EU Regulation, including where the data have been processed in violation of the law or where it is not necessary to keep them in relation to the purposes for which they were collected or otherwise processed (right to cancellation and right to limitation);
- voke, at any time and without prejudice, the consent given, limited to cases where the processing is based on your consent for one or more specific purposes and concerns common personal data (e.g. date and place of birth or place of residence), or particular categories of data (e.g. data revealing your racial origin, your political opinions, your religious beliefs, your state of health or sexual life). Processing based on consent and carried out prior to the revocation of consent shall, however, retain its lawfulness (right of revocation);
- within the limits of the EU Regulation, to receive a copy of the data provided by you in a commonly used and readable format from an automatic device and to request that such data be transmitted to another data controller if technically feasible (right to data portability);
- object at any time to the processing of your data for direct marketing purposes, including profiling insofar as it is related to such direct marketing (right of objection)
The aforementioned rights may be exercised at any time by writing to the following e-mail address: info@x-metal.it or by sending a registered letter to X-METAL S.R.L. at the following address: 20025 Legnano (MI), via Sebastiano Caboto s.n.c. (the so-called Data Controller).
At any time, you may lodge a complaint with the supervisory authority in the event of violation of the rules on the protection of personal data. For further information: http://www.garanteprivacy.it
7. Data profiling and dissemination
Your Personal Data are not subject to dissemination or to any fully automated decision-making process, including profiling.
8. Data retention
The Personal Data you provide us with will be stored by means of:
- storage within the hardware systems of the Data Controller;
- archiving in accordance with the Digital Administration Code: in this case, the Data Controller will resort exclusively to subjects accredited in accordance with art. 29 CAD, if it should not be carried out on our application systems
9. Contact details of the Data Controller
The Data Controller is: X-METAL S.R.L., tax code and VAT number 08452090965, currently in 20025 Legnano (MI), via Sebastiano Caboto s.n.c. Telephone: +39 0331-454829; E mail: info@x-metal.it; PEC: xmetal@pec.it
Legnano, lì 24/10/2018
X-METAL S.R.L.
