We (MERLETT TECNOPLASTIC S.P.A.) in our capacity as Data Controller pursuant to Applicable Regulations i.e. the General Data Protection Regulation (“GDPR” – EU Regulation 679/2016), A29WP Recommendation no. 2/2001 regarding the minimum requirements for online data collection, and all applicable national legislation acknowledge the importance of personal data protection and considers it one of the main objectives of its business.
We will process your personal data in accordance with the principles of lawfulness, fairness and transparency, data minimisation, accuracy, integrity and confidentiality. Additionally, we will process your personal data only for the purposes notified to you and for no longer than necessary for these purposes. Your personal data will be processed in accordance with the legal provisions of the Applicable Regulations and any duties of confidentiality envisaged therein.
Based on the Applicable Regulations, we are the Data Controller of the Website. We have implemented generally accepted standards of technology and operational security in order to protect personal data from loss, misuse, or unauthorised alteration or destruction. We will notify you promptly in the event of any breach of your personal data which might expose you to serious risk.
2.THE PERSONAL DATA SUBJECT TO PROCESSING
The term “Personal Data” refers to any information relating to a natural person who is or could be identified, with reference in particular to such data as a name, identification number, location, online identifier, or information concerning your physical, economic, cultural or social identity.
Specifically, the Personal Data collected by the Website are as follows:
The IT systems and software procedures which ensure that this Website works properly can, during their routine use, acquire certain personal data sent automatically when a user uses the Internet communication protocols. This information is not collected for the purpose of associating it with identified data subjects. However, by its very nature, it could enable users to be identified, when it is processed and associated with data held by third parties.
Usually this category of data includes the IP addresses or domain names of the computers or devices used to connect to the Website, URL addresses, , the time of the request, the method used to make the request to the server, the size of the file received in response, the numerical code indicating the status of the response provided by the server (successful, error, etc.) and other parameters related to the user’s operating system and IT environment.
These data are only used for the purpose of obtaining anonymous statistical information about the use of the Website, checking that it works properly, enabling the various functions requested by the user to be provided, for safety reasons and for determining the identities of relevant parties in case of any cybercrimes. These data are deleted after 12 months.
2.Data provided voluntarily by you
By using the Website, you have the opportunity to voluntarily provide your Personal Data such as your name and email address in order to sign up for the Newsletter service, request product quotations, register using the “Registration” form, contact the Data Controller using the “Contact us” form or send us your CV. We will process these data in compliance with the Applicable Regulations. Where you provide us with a third party’s personal data, you confirm that you have been expressly authorised to do so and you will comply with all relevant duties and responsibilities of a Data Controller under Applicable Regulations and you hereby fully indemnify and hold us harmless from all and any disputes, claims, requests for compensation for damage caused by the processing etc. that may be raised by third parties whose Personal Data you have processed in this manner.
3. Cookies and similar technologies
3.PURPOSES, LEGAL BASIS AND MANDATORY OR OPTIONAL NATURE OF THE PROCESSING
We will process your Personal Data for the following purposes:
Providing the Personal Data for the purposes listed above is optional, but any failure to do so could make it impossible to meet the requests submitted by you or to fulfil a legal obligation to which we are is subject
We may share your Personal Data in accordance with the purposes specified at paragraph 3 as follows:
a.with parties required to ensure the provision of the services offered by the Website – including, for example, sending emails and analysing the working order of the Website – who typically act as our Data Processors;
b. with persons authorised by us to process your Personal Data and who have undertaken to maintain the confidential nature of the same or have a suitable legal duty to maintain confidentiality; (e.g. our employees and contractors); (a. and b. are jointly referred to as “Recipients”);
c. with court authorities when carrying out their functions, as required by Applicable Regulations.
Some of your Personal Data may be transferred to Recipients outside the European Economic Area (EEA). We will ensure that in this case the Recipients will process your Personal Data using paper and digital means in compliance with the Applicable Regulations. In such cases, the transfers may be made on the basis of an adequacy decision or the Standard Model Clauses approved by the European Commission. Further information and a copy of these agreements can be providing by submitting a request to the Data Controller.
We will process your Personal Data only for so long as is necessary to fulfil the purposes stated under paragraph 3. For example, we will process your Personal Data for the Newsletter service until you decide to cancel your subscription to the service. Without prejudice to the terms stated above, we will process your Personal Data for the time permitted by Applicable Regulations in order to protect our rights and interests. Further information regarding the period for which the Personal Data are stored and the criteria used to determine such a period can be requested by writing to the Data Controller.
7.RIGHTS OF THE DATA SUBJECT
Within the limits of the Applicable Regulations, you are entitled to ask us for access to your Personal Data at any time, as well as have your Personal Data corrected and/or deleted. You can also object to processing, restrict processing, or request the transfer of your personal data in a structured, commonly used and machine-readable format.
Requests must be sent by email to the address: email@example.com
Pursuant to the Applicable Regulations, you have the right complain to the competent supervisory authority (UK ICO) if you think your Personal Data have been, or are being, processed unlawfully.
9.OUR DATA PROTECTION MANAGER
Our Data Protection Manager can be contacted at firstname.lastname@example.org