INFORMATION NOTE ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 13-14 OF REG. (EU) 2016/679 GDPR (General Data Protection Regulation)
QUAGLIOTTI S.p.A. (hereinafter referred to as DATA CONTROLLER), with registered office in S.da Cambiano n. 58 – 10023 Chieri (TO), Italy, deals with the confidentiality of your personal data and guarantees the necessary protection from any event that could put them at risk of violation.
The data controller deals with updating the policy and the procedures implemented to protect the personal data every time such action is necessary and, in all cases, if there are changes in the laws or in the company organisation that could affect the processing of your personal data.
The Data processor is Ms Silvia QUAGLIOTTI, who can be contacted for explanations by writing to firstname.lastname@example.org.
Quagliotti S.p.A – S.da Cambiano n.58 – 10023 Chieri (TO) – Italy
Types of data collected
The Data Controller collects and/or receives your identification data (such as name, surname, e-mail address) provided when registering with the site or with paper communications during events (trade shows, contacts, etc.)
The Data Controller needs this data to answer your request for information. The data is stored digitally/in paper format exclusively for the purposes of the services it can be used for.
Your personal data is disclosed to third parties and/or recipients whose activity is necessary to carry out the activities related to the above mentioned purposes and to comply with the law.
Any disclosure for purposes that are not the above must first be authorised by you.
Your data may be accessed – purely for maintenance purposes – by the company managing the technological infrastructure and its appointed staff.
The Data Controller does not disclose your data anywhere outside the EU.
The collected data will be processed for the purposes below:
- to answer the requests of the data subjects, to provide various kinds of information or quotes/sales for/of services/materials;
- to acquire the professional CVs sent by the persons concerned;
- to answer the requests for help regarding the manner to access the site;
- to answer the requests for information and quotes/sales;
- for purposes related to accounting, administration, etc.;
- for marketing and references on advertising communications, preferences on products and services, etc.;
- for processing related to VAT matters (VAT tax register, etc.).
The personal data collected by this website, autonomously or via third parties, includes: Cookies, usage data and e-mail.
The user is responsible for the disclosure of truthful and authentic third-party personal data published or shared via this application and guarantees this application has the right to disclose or disseminate such data, relieving the Data controller from any responsibility to third parties.
The Data controller processes the users’ personal data using security measures suitable for preventing the unauthorised access, dissemination, modification or destruction of the personal data.
Processing is carried out using IT and/or telematic tools, with organisational modalities and logics that are tightly linked to the above listed purposes. In addition to the Data controller, in some cases the data may be accessed by categories of subjects involved in the organisation of the website (staff from administrative, commercial, marketing and legal departments, system administrators, consultants) or external subjects (e.g. third party technical service suppliers, couriers, hosting providers, IT companies, communication agencies), which will be appointed (if necessary) as Data processors by the Data controller. The updated list of Data processors can always be requested from the Data controller.
The data are processed in the operational sites of the Data controller and in every site in which the parties involved in the processing are located. Please contact the Data controller for additional information.
The data are processed for the time required to supply the service requested by the user or required by the purposes described in this document. Users may, at any time, request the suspension and/or interruption of the processing and the erasure of the data.
Purposes the data are collected for
The users’ data are collected to allow the Data controller to provide its services, and for the purposes listed below: Interaction with social networks and external platforms, Statistics and Contacting the User.
The types of personal data used for each purpose are shown in the specific sections of this document.
Details on the processing of personal data
Personal data are collected for the purposes listed below and using the services listed below:
Interaction with social networks and external platforms
These services allow to interact with social networking sites or other external platforms directly from the pages of this Application.
The interactions and the information acquired by this Application are in all cases subject to the privacy settings selected by the User in every social networking site.
If a service for interaction with a social networking site has been installed, it is possible that the service collects traffic data related to the pages in which it is installed, even if the Users do not use the service.
The services contained in this section allow the Data controller to monitor and analyse traffic data and are used to track the way the User behaves.
Google Analytics (Google Inc.)
Google Analytics is a web analysis service provided by Google Inc. (“Google”). Google uses the collected personal data to track and examine the use of this Application, to prepare reports and to share them with other services developed by Google.
Google may use the personal data to set in context and customise the adverts of its advertising network.
Collected personal data: Cookies and usage data.
Additional information on personal data
The collected personal data are used to supply services to the user or to sell products, including payment and (if required) delivery. The personal data collected to complete payment may be related to credit/debit cards, the banking details used for the bank transfer or other payment services offered. The payment data collected by this Application depend on the payment system used.
Disclosure to third parties
With the exceptions of the current legal obligations, your data will not be disclosed to third parties/recipients unless:
– you authorise it;
– it is necessary to fulfil contractual obligations and legal obligations arising from the laws that govern it (e.g. defending your rights, for reporting to control authorities, etc.);
– the data is disclosed to
o companies of the group the Data Controller belongs to for administrative purposes;
o law firms and law companies, for the protection of contractual rights;
o IT service companies, for management and maintenance;
o financial administration bodies and control and supervisory bodies.
The Data Controller must comply with the obligations arising from the specific nature of the performed activity.
The personal data processed by the Data controller for that purpose include:
– home/company address,
– e-mail address,
– any other data provided upon registration.
Additional information on processing
System log and maintenance
For reasons linked to functioning and maintenance, this Application (and any third-party services used by it) could collect system logs, i.e. files that record interactions and that may contain (among other things) personal data, such as User IP.
Your data are processed to offer you products and services, in order to send you advertising material. Your data (such as name, surname, physical address, e-mail address, landline or mobile phone number) may be processed via:
– social networking sites;
– paper mail.
This kind of processing may take place if you consent to your data being used, including with regard to the disclosures related to data processing.
This page contains a form that allows users to register for the newsletter, which contains updates on the new contents published by the Data controller. This form requests an e-mail address to which the newsletter can be sent. Registration is subject to accepting a specific, freely-given informed consent. Data are processed exclusively by staff who are fully authorised and trained to do so. Data are stored until the recipient “unsubscribes” from the newsletter service, which can be freely done at any time. Failure to supply an e-mail address or to give consent makes it impossible to obtain the newsletter service.
How your data is processed
How and for how long your data is filed
The data regarding you is processed using electronic and paper means and tools, by subjects that act under the authority of the Data Controller (as such, they have been trained and authorised to do so).
Personal data are filed in electronic archives protected by effective security measures.
The data are filed for the time needed to satisfy the information requests and to send communications exclusively of that nature, carried out by the Data Controller following a request made by you. In all cases, the data will not be kept for more than 1 year after the last modification, unless events that require the intervention of the competent authorities occur.
This is also in collaboration with the third parties/recipients that deal with IT security activities related to the Data Controller’s data, to carry out any investigations on the causes behind the event.
Personal data for marketing purposes (direct marketing, market research and surveys) will be kept for 5 years, unless you withdraw the consent you gave and/or you object to the processing.
Compatibly with the time limits established for the processing of personal data concerning you, your acknowledged rights allow you to always have your data under control, including:
– restriction of processing;
– objection to processing;
– complaining to the supervisory authority (Data Protection Authority).
Your rights are guaranteed at no cost to you and without any particular procedures to exercise them – exercising your rights is essentially free of charges.
You have the right to:
– obtain a copy (including in electronic format) of the data you have asked access to. If you request additional copies, the Data Controller may charge you a reasonable fee;
– obtain the deletion of the data or limit their processing or update and change your personal data;
– have third parties/recipients (should they receive your data) satisfy your request, unless there are greater legitimate reasons prevailing over the ones that led to your request (e.g. environmental investigations and risk containment determined by the emergency managed through them by the Data Controller);
– receive, without delay, all useful communications on the activities carried out as a result of you exercising your rights and, in all cases, within one month of your request, unless that period is extended to two months for reasonable causes – you must be appropriately informed of this extension.
For all additional information and to submit your request, please use this address: email@example.com.
The personal data of the user may be used as defence in court by the Data controller or during the preliminary stages of legal proceedings, from abuses of legal proceedings or of the related services committed by the User.
The user declares he/she is aware that the Data controller may be asked to disclose data on request from public authorities.
You can make a complaint (without prejudice to any other administrative or legal proceedings), you can lodge a complaint to the competent authority or to the authority that performs those duties and exercises its powers in Italy (where you normally reside or work) or, if you do not live/work in Italy, in the member state in which the violation of Regulation (EU) 2016/679 GDPR occurred.
This Application does not support “Do Not Track” requests. To learn if any third-party services do support them, please read their privacy policies.
The Data controller does not carry out any profiling activities for itself or on behalf of third parties.