VALSECCHI ROBERTO STAMPERIA METALLI PRIVACY POLICY

"Data protection. European Reg. 2016/679 pursuant to Article 13 on the protection of personal data (GDPR) and request for consent for the processing of personal data collected from the interested party "
The European Regulation 2016/679 (regarding the protection of personal data), hereinafter the GDPR, and as far as is of interest, the Legislative Decree 30.06.2003 n. 196 (Code regarding the protection of personal data) and subsequent amendments and / or additions to the adaptation legislation, provides for the protection of persons and other subjects regarding the processing of personal data.
According to the indicated legislation, this treatment, in paper, computerized and telematic form, will be based on principles of correctness, lawfulness and transparency and protection of the privacy and rights of the interested party, as well as in compliance with fundamental freedoms.
Pursuant to articles 12-13 and 15 of the GDPR, therefore, we provide you with the following information:
- Identification details of the Owner and Manager and of any appointees -
The data you provide will be processed at the Company's headquarters.
The Data Controller is the Valsecchi Roberto company, CF / PI 02514160130, with registered and production headquarters in Rogeno (Lc) in Via Calvenzana Inferiore n. 8, in the person of the pro tempore legal representative and sole administrator, Mr. Mario Valsecchi. who can be contacted, at the e-mail address info@valsecchiforging.com and limited to requests for information through the form on the valsecchiforging.com website,
We also inform you of the appointment as External Data Processor of the chartered accountant, as well as of the management software assistance company.
The data provided may be processed by authorized persons, collaborators or external subjects, previously authorized, who operate in our offices or on behalf of the Company.
- Purpose and legal basis of the processing for which the data are intended:
The processing of the personal data provided is aimed solely at the management of orders and the consequent execution of the contract. The legal basis of the processing is the contract, or consent in the event that information is requested through the appropriate form on the website valsecchiforging.com.
- Nature of the provision of data and consequences of a refusal to respond; - data retention period -
The treatment will be carried out in paper, computerized and telematic form. Personal data will be entered in relevant databases which can be accessed by authorized subjects for processing. In any case, no profiling activity will be carried out.
As part of the described treatments, it is necessary to know and store information relating to identification data, including personal data, tax code, VAT number, including accounting and banking data as well as electronic contact data. And only personal data and electronic contact details in the case of information requested through the appropriate form on the website valsecchiforging.com.
Any non-communication, or in any case incorrect communication, of any of the information indicated will have the following consequences:
• the impossibility of the owner to guarantee the adequacy of the treatment itself to the contractual obligations assumed;
• the possible mismatch of the results of the processing itself with the obligations imposed by the tax and / or administrative legislation to which it is addressed.
The provision of personal data is mandatory as it is necessary for the correct fulfillment of contractual obligations. Any refusal to provide data could result in the non-execution and / or continuation of the contractual relationship, its correct performance and any legal obligations, including tax.
Personal data are stored and processed at the operational headquarters of the Company, for the time prescribed by civil and fiscal regulations and, in any case, for the entire duration of the relationship and for the following ten years (ordinary prescription), except for a shorter term. required by legislation and industry practice. In the case of requests for information on the website www.valsecchiforging.com , until the related request is processed.
- Scope of communication and dissemination of data -
The processed data will not be communicated to subjects without authorization granted by the Data Controller, without prejudice to the communication or dissemination of data requested, in accordance with the law, by police forces, judicial authorities, information and security organizations or other subjects. public for purposes of defense or state security, prevention, detection or repression of crimes.
Personal data may be disclosed in order to allow the fulfillment of contractual or legal obligations:
- to all subjects whose right of access to such data is recognized by virtue of regulatory provisions;
- to our collaborators, employees, agents and suppliers, in the context of their duties and / or any contractual obligations, relating to commercial relations with the interested parties, as well as to banking institutions for the management of collections and payments;
- to post offices, shippers and couriers, for sending documentation and / or material;
- to all those natural and / or legal persons, public and / or private (legal, administrative and tax consultancy firms, Judicial Offices, Chambers of Commerce, etc.), when the communication is necessary or functional to the performance of our business and in the ways and for the purposes described above.
Within the scope of the purposes indicated in this information, your personal data will not be communicated / transferred to third parties established in countries not belonging to the European Union.
Your data could be transmitted to a cloud services operator - in any case operating within the territory of the European Union, of proven technical reliability and proven professional reliability and "GDPR compliant" - solely for the purpose of guaranteeing their integrity. (backup copy).
- The rights of the interested party provided for by articles 15, 16, 17, 18, 20, 21 and 22 of the EU Regulation, n. 2016/679 -
At any time you can exercise the following rights towards the Data Controller:

• Art. 15 - Right of access - The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and to information regarding the processing.

• Art. 16 - Right of rectification - The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.

• Art. 17 - Right to cancellation (right to be forgotten) - The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel without unjustified I delay personal data.

• Art. 18 - Right to limitation of processing - The interested party has the right to obtain from the data controller the limitation of treatment when one of the following hypotheses occurs: a) the interested party disputes the accuracy of personal data, for the necessary period to the data controller to verify the accuracy of such personal data; b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited; c) although the data controller no longer needs them for processing purposes, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court; d) the interested party opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

• Art. 20 - Right to data portability - The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments by the data controller to whom he provided them. In exercising their rights relating to data portability pursuant to paragraph 1, the data subject has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.

• Art. 21 - Right to object - The interested party has the right to object at any time, for reasons connected with his particular situation, to the processing of personal data concerning him pursuant to Article 6, paragraph 1, letters e) of ), including profiling based on these provisions.

• Art. 22 - Right not to be subjected to automated decision-making, including profiling The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her similarly significantly on his person

The aforementioned rights may be exercised by sending a specific request to the Data Controller, in the person of the contact person, through the contact channels indicated in art. 1 of this information.
You can lodge a complaint pursuant to art. 77 GDPR to the competent supervisory authority based on your habitual residence, place of work or place of violation of your rights; for Italy, the Guarantor for the protection of personal data is competent, which can be contacted via the contact details shown on the website http://www.garanteprivacy.it. It is hoped, however, that you, before proposing a complaint, contact the undersigned company so that it can take the appropriate corrective actions.
Requests relating to the exercise of your rights will be processed without undue delay and, in any case, within one month of the request; only in cases of particular complexity and high number of requests, this deadline may be extended by a further 2 (two) months.
- Revocation of the processing consent -
The consent you have given to the processing of data for the purposes indicated above may be revoked by you at any time; the exercise of this right will not in any way prejudice the lawfulness of the treatments carried out before the revocation.

]We take no responisibility for the correctness and completeness of the translation]