Disclosure statement regarding the processing of personal data (Arts. 13 and following of Regulation (EU) 679/2016 hereinafter also referred to as the “GDPR”) for the Internet website www.cri-man.com property of Cri-Man S.p.A..
This statement regarding the personal data confidentiality policies of Cri-Man S.p.A. is intended to accurately describe the management of the processing of personal data of users of the Internet portal.
This statement is not applicable for other websites incidentally consultable using the hyperlinks on the abovementioned website.
Personal Data: any information regarding an identified or identifiable physical person (the "Data Subject"). A physical person is considered identifiable if they can be directly or indirectly identified through reference to an identifier, like a name, identification number, details of habitation, an online identifier, or one or more characterizing elements of their physical, physiological, genetic, psychic, economic, cultural, or social identity.
"Processing": any operation or set of operations conducted with or without the application of automated processes and applied to personal data or sets of personal data, including collection, recording, organization, structuring, archiving, adaptation or modification, extraction, consultation, use, communication by means of transmission, distribution, or any other means of rendition, comparison or interlinking, limitation, cancellation, or destruction.
Session Data: information collected automatically by this Application (or by third party applications used by this Application) including IP addresses or domain names of computers utilized by Users to connect to this Application, addresses in URI (Uniform Resource Identifier) notation, time of requests, methods used to submit requests to the server, size of files received in response, numeric codes indicating the status of the response from the server (successful, error, etc.), countries of origin, characteristics of the browsers and operating systems used by visitors, the temporal parameters of visits (for example, time of permanence on each page) and details of navigation pathways followed within the Application, with particular reference to the sequence of pages consulted, and the parameters of operating systems and computer platform of Users.
User: individuals who make use of the services of the present website, even only at the level of web browsing (coincides with Data Subject).
Data Subject: a physical person referenced by Personal Data.
Data Controller: the physical or legal person, public authority, service, or other organism that singly or jointly with others determines the purposes and methods of processing of Personal Data. When the purposes and methods of said processing are regulated by the legislation of the European Union or member states, the Data Controller or the specific applicable criteria for designation of the same can be defined according to the legislation of the European Union or the member states.
This Application or Platform or Website: the hardware or software instrument whereby Personal Data of Users is collected.
THE DATA CONTROLLER
Cri-Man S.p.A. (hereinafter also the “Organization”) with registered office in via Del Lavoro n. 9/A - 42015, Correggio, Italy - tax code and VAT no. 01923430357, in the role of Data Controller for your personal data, pursuant to Regulation (EU) 679/2016, regarding the “protection of physical persons in respect to the processing of personal data, and including the free circulation of said data”, hereby informs you that the processing of your data will abide by the principles of equity, legitimacy, transparency, and protection of your privacy and rights.
• REPRESENTATIVE OF THE DATA CONTROLLER
The figure of Representative of the Data Controller is not foreseen within the Organization because this is not required in the Regulation itself.
• DATA PROTECTION OFFICER
The figure of the Data Protection Officer (DPO) is not foreseen within the Organization because this is not required in the Regulation itself.
• PURPOSE FOR PERSONAL DATA PROCESSING
The purposes for the processing of your personal data are diverse but all have the aim of satisfying your needs and they will only be implemented after receiving your free consent.
These specifically include:
” on www.cri-man.com
, to request information by compiling the obligatory fields: Name, Surname, Address, city, District, Postcode, State, Telephone, E-mail, and request message.
b) “NEWSLETTER”, in order to receive information by e-mail about new products and/or services.
You are reminded that the optional, explicit, and voluntary submission of e-mail messages to the addresses indicated on the website, or utilizing, for example, the "CONTACTS" service, leads to acquisition of personal data. Our Users are therefore invited, when requesting services or submitting questions, not to submit names or other personal data of third party subjects that are not strictly necessary, nor any particular and/or legal data pursuant to Arts. 9 and 10 of Regulation (EU) 679/2016.
• LEGAL BASIS AND LEGITIMACY OF THE DATA PROCESSING
The legitimacy of the processing of the data in question is based on the following legal basis:
a) For purposes pursuant to Point 4., Sections a) and b) of the present statement, the processing of your personal data is only and exclusively possible after your specific consent (Art. 6, Paragraph 1, Section a) of the Regulation). The explicit and voluntary submission of e-mail to the e-mail addresses provided at www cri-man.com implicitly implies your consent.
b) By consenting to subscription to the newsletter service for the purposes defined in Point 4., Section b), processing will be possible for the pursuit of the legitimate interests of the Data Controller or third parties (Art. 6, Paragraph 1, Section f) of the GDPR).
• PROCESSING METHODS
All processing takes place with the implementation of adequate security, technical, and organizational measures for the processing pursuant to Art. 32 of the Regulation. All the data are processed both with the assistance of computer systems and, possibly, making use of dedicated hard copy databases. We apply a wide range of advanced security procedures to protect your personal data against the risks described above.
• RECIPIENTS OF THE PROCESSED PERSONAL DATA
The recipients of the personal data for the purposes described above will be the Owners of the undersigned Organization and the employees and direct collaborators of said Organization for the sole purpose of providing the requested service by the user save cases in which communication is a legal obligation or is strictly necessary in order to fulfill the requests of the User.
For the purposes of correct service management, the data processing associated with the web services of the Internet domain in question will take place at the abovementioned registered office of the Data Controller as well as through the company Register.it., under the care of the technical personnel of Campbell ADV di F.lli Teodori Mauro e Giuliana S.n.c. (Processing Controller), and by others appointed by CRI-MAN S.p.A. on the occasion of updating and maintenance operations.
• TRANSFER OF DATA TO A THIRD PARTY STATE
All data associated with the website, and any backup copies, are conserved on servers hosted in data centers within the European Union in compliance with the European Community regulations in force. Contact the Organization for any further details.
• THE PERIOD THE PERSONAL DATA WILL BE STORED
Personal data are not stored beyond the necessary time to fulfill the specific purposes of data processing described herein, save cases in which longer or shorter periods of storage are foreseen pursuant to the regulations in force.
• For the purposes pursuant to Point 4., Section b) of the present statement, and only after specific consent, the period of storage is limited according to your decision, and at any time you may cancel subscription to the newsletter following the simple procedure indicated in each individual communication, thereby withdrawing consent. In all cases it is possible to contact the Data Controller at the addresses and contacts provided at the end of the present statement.
• RIGHTS OF DATA SUBJECTS
You are entitled to request the Data Controller for access, cancellation, communication, updating, correction, and to oppose processing, amendment, limitation, portability, or to inform them of known violation of your personal data, as well as exercising all rights provided for in Art. 13 and following of the Regulation EU 679/2016. Below is a complete list of your rights included in Art. 13 of Regulation EU 679/2016.
Requests to exercise of the rights of the Data Subject must be communicated to Cri-Man S.p.A., registered office at Via Del lavoro n. 9/A – 42015, Correggio (RE), Italy - Tax Code and VAT no. 01923430357 – tel.: 0039 0522 732204, or to the certified e-mail address: firstname.lastname@example.org
• RIGHT OF WITHDRAWAL
You are entitled to withdraw consent for the processing of your personal data at any time pursuant to Point 4., Sections a) and b) of the present statement by referring directly to the Data Controller at the addresses and contacts included in the present statement or, in the case of the “newsletter”, by following the simple procedure indicated in each individual communication of the same.
• SUPERVISORY AUTHORITIES
You are entitled to complain to the competent Supervisory Authorities, the “Italian Data Protection Authority”, if you believe that your rights regarding data protection are being infringed.
• INCIDENTAL CONSEQUENCES OF REFUSAL TO RESPOND
As regards the abovementioned purposes pursuant to Point 4., Sections a) and b) of the present statement, the provision of personal data by users is NOT “obligatory”, but voluntary (e.g. requests for information using the “CONTACTS” service, or subscription to our newsletter).
• AUTOMATED DECISIONAL PROCESS
Your data will not be included in any automated decision processes.
• SOCIAL MEDIA BUTTONS