PRIVACY POLICY
pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 on the processing of personal data (GDPR)
Pursuant to of Article 13 of Regulation (EU) 2016/679 (the ‘GDPR’), information is provided herein on the processing of users’ personal data in relation to contact activities carried out through the institutional website of Aglatech 14 S.r.l: https://www.aglatech14.com.
1. Subject and purpose of the processing
(a) The processing of personal data provided voluntarily upon filling out our contact form (such as name, surname, email address, company and content of the message) to request information or a quote is carried out solely in order to provide a response to your request.
(b) Subject to the data subject’s consent, the processing may also involve activities related to sending the AglaMagazine Newsletter via email, as well as providing commercial communications related to Aglatech 14’s services and initiatives.
2. Data processing methods
Pursuant to Article 5 of the GDPR, personal data will be processed lawfully and fairly and will not exceed the purposes set forth in point no. 1. Data related to requests for information and quotes (point no. 1, letter a) will be retained for a maximum period of 12 months from the last contact. If the user and the Data Controller enter into an agreement, the Data will be used for the period set out in the relevant Privacy Policy, which shall be annexed to the agreement. Data related to marketing (point no. 1, letter b) will be retained for a period of 2 years from registration, without prejudice to the user’s right to opt-out at any time. In the event of a deletion request, the data will be deleted within 3 months of the request, without prejudice to any special legal obligations on the storage of accounting and administrative records.
The processing is carried out by means of the operations or set of operations set forth in Article 4, par. 2 of the GDPR and more precisely: the collection, recording, organisation, storage, consultation, elaboration, alteration, selection, retrieval, comparison, use, interconnection, blocking, communication, dissemination, erasure or destruction of data, even if not recorded in a database.
The operations may be carried out with or without the aid of electronic or otherwise automated tools, based on logic that is fully in line with the purposes pursued and the processing method.
The Data Controller implements all technical and organisational measures required to guarantee the conservation and integrity of your data from the moment you fill out the contact form on the website.
The processing of data is carried out by the Data Controller, by persons authorised to process data (Processors), and by Data Processors duly appointed pursuant to Art. 28 of the GDPR (the complete list of Processors is available at the company upon request).
3. Nature of data provision – Refusal to provide data
The legal basis for processing data for the purposes set forth in point no. 1 above, letter a), is the performance of pre-contractual obligations (Article 6, letter b, of the GDPR). As a result, the provision of specific, explicit consent by the data subject is not required. The provision of personal data is optional and it is strictly necessary to perform the above activities. Therefore, the data subject’s refusal to provide their personal data makes it impossible to fulfil said activities.
The legal basis of the processing of personal data for the purposes set forth in point 1, letter b) above is the data subject’s consent (art. 6, letter a, of the GDPR). The provision of personal data is optional and it is strictly necessary to perform the above activities. Therefore, the data subject’s refusal to provide their personal data makes it impossible to fulfil said activities.
4. Scope of data communication
Your data, forming the subject of the processing, will not be disclosed to third parties, without prejudice to any specific legal obligations.
Duly authorised and/or appointed external Data-Processing Operators and Data Processors will only process the data if this is necessary for the performance of their assigned tasks.
All this without prejudice to the guarantee of protection of the data subject’s rights.
5. Scope of data dissemination
Personal data is not subject to dissemination.
6. Data transfer abroad
Personal data may be transferred to countries within the European Union within the scope of the purposes set forth in point no. 1, if said transfer is functional to the provision of the services offered by the Data Controller. Moreover, in the event of transferring data to third countries, for example due to the use of cloud platforms and/or to the storage of data, said data will be processed in accordance with the provisions of Article 44 et seq. of the GDPR.
7. Rights of the Data Subject
Data subjects, pursuant to articles 15, 16, 17 and 18 of the GDPR, may enforce their rights by sending a request to the Data Controller via email at the following addresses (point no. 8).
In particular, under Article 15 of the GDPR, you can obtain from the Data Controller:
◦ confirmation of the existence or otherwise of your personal data and its provision in intelligible form;
◦ information on the origin of the data;
◦ information on the purposes and methods of processing;
◦ information on the logic applied to the processing;
◦ information on the identification details of the Controller and of the persons to whom the data may be communicated;
◦ updating, rectification and integration of data;
◦ erasure, transformation into anonymous form or blocking of data processed in breach of the law;
◦ limitation of processing.
The data subject may object, on legitimate grounds, to the processing of data concerning them, even if pertinent to the purpose of collection, and is also entitled to obtain data portability under Article 20 of the GDPR.
Pursuant to art. 77 of the GDPR, data subjects are also entitled to lodge a complaint with the Italian Data Protection Authority if they believe that the processing of their personal data is in breach of the provisions of the Regulation.
8. Data Controller
The Data Controller is Aglatech 14 S.r.l. (Tax ID No. 08699190966), in the person of its legal representative pro tempore, with registered office in Milan (20123 – MI), Via Carducci 26, email: privacy@aglatech14.it.