updated to EU Reg 2016/679
(European regulation on the protection of personal data)
2) Identification details and contact the Holder Treatment data ITAL PEK SRL,
REGISTERED OFFICE Via Serra di Sopra 406 , 47834 MONTEFIORE CONCA (RN) – Italy VAT number and CF 03555100407; HEADQUARTERS OFFICES / WAREHOUSE : Via del Lavoro 4, 61010 Tavullia (PU)
Tel. +39 0721 901123 – 0721 476770
3) Type of data processed
Visiting and consulting the Site does not generally involve the collection and processing of the user’s personal data except for navigation data and cookies as specified below. In addition to the so-called “navigation data” (see below), personal data voluntarily provided by the user may be processed when the user interacts with the functionality of the Site or requests to use the services offered on the Site.
4) Cookies and navigation data
_ “session” cookies, which are deleted immediately when the browser is closed; _ “persistent” cookies, which remain in the browser for a certain period of time. They are used, for example, to recognize the device that connects to a site, facilitating authentication operations for the user;
_ “own” cookies, generated and managed directly by the manager of the website on which the user is browsing;
_ “third party” cookies, generated and managed by parties other than the manager of the website on which the user is browsing.
5) Retention of personal data
Personal data are stored and processed through IT systems and managed by ITAL PEK SRL . or from third party technical service providers; for more details, please refer to the section “Scope of communication and data access” below. The data is processed exclusively by specifically authorized personnel, including personnel appointed to carry out extraordinary maintenance operations.
6) Purposes and methods of data processing
ITAL PEK SRL may process personal data for the following purposes: use by users of services and features on the Site, management of requests and reports from its users.
In the functionality provided in the contact form provided on the site , with the collection of essential data for direct contact , the required fields are: name, surname, email, message subject , the data are not saved but an email is generated with the summary.
Personal data are processed in full compliance with EU Reg. 2016/679, including security and confidentiality profiles and inspired by the principles of correctness and lawfulness of processing. In accordance with EU Reg. 2016/679, the data are kept and stored for 5 years.
7) Security and quality of personal data
ITAL PEK SRL undertakes to protect the security of the user’s personal data and complies with the provisions on security provided by the applicable legislation in order to avoid data loss, illegitimate or illicit use of data and unauthorized access to the same, with particular attention reference to the Technical Regulations regarding minimum security measures. Furthermore, the information systems and computer programs used by ITAL PEK SRL are configured in such a way as to minimize the use of personal and identification data; these data are processed only for the achievement of the specific purposes pursued from time to time. ITAL PEK SRL uses multiple advanced security technologies and procedures to promote the protection of users’ personal data; for example, personal data are stored on secure servers located in places with protected and controlled access. The user can help ITAL PEK SRL to update and keep their personal data correct by communicating any changes relating to their address, their qualification, contact information, etc.
8) Scope of communication and data access
The user’s personal data may be disclosed to:
• all subjects whose right of access to such data is recognized by virtue of regulatory provisions;
• to our collaborators, employees, as part of their duties;
• to all those natural and / or legal persons, public and / or private when the communication is necessary or functional to the performance of our business and in the manner and for the purposes illustrated above;
9) Nature of provision of personal data
The provision of some personal data by the user is mandatory to allow the Company to manage communications, requests received by the user or to contact the user himself to follow up on his request.
10) Rights of the interested party
10.1 Art. 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679
The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations;
d) the retention period of the personal data envisaged or, if this is not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
g) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.
10.2 Right pursuant to art. 17 of EU Reg. 2016/679 – right to cancellation (“right to be forgotten”) The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller has the ” obligation to delete personal data without undue delay, if one of the following reasons exists:
a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing;
c) the interested party opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21, paragraph 2;
d) the personal data have been unlawfully processed;
e) personal data must be deleted to fulfill a legal obligation under Union law or the law of the Member State to which the data controller is subject;
f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1 of EU Reg. 2016/679
10.3 Right referred to in art. 18 Right to limitation of treatment
The interested party has the right to obtain from the data controller the limitation of the processing when one of the following hypotheses occurs:
a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;
c) although the data controller no longer needs them for processing purposes, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) the interested party opposed the processing pursuant to article 21, paragraph 1, EU Reg. 2016/679 pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
10.4 Right referred to in Article 20 Right to data portability
The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller
11) Withdrawal of consent to treatment/strong>
The interested party has the right to withdraw consent to the processing of your personal data by sending an email to the following addresses: PEC: email@example.com MAIL: firstname.lastname@example.org
At the end of this operation, your personal data will be removed from the archives as soon as possible.
If you wish to have more information on the processing of your personal data, or to exercise the rights referred to in point 10 above , you can send an email to the following addresses: PEC: email@example.com MAIL: firstname.lastname@example.org