Disclosure pursuant to Art. 13 EU Reg 2016/679 (“GDPR”): Montanari Giulio & C. S.r.l. with registered office in Via Bulgaria 39, Modena – 41122, as Data Controller, will process your common personal data (name, surname, e-mail address and telephone number), as directly provided by you and subject to your specific consents possibly given in this email, for the following purposes:
Marketing purposes: The company may send you promotions, commercial communications and/or advertising about its products and events. Among the activities may also be understood the conduct of market research and surveys to detect your satisfaction or to carry out statistical analysis, including with anonymous data and/or in aggregate form. The processing in is based on your freely expressed consent as defined by art.6.1 lett. “a” of the GDPR and your refusal will not affect your ability to purchase our products and/or proceed with the provision of services.
Your personal data, with reference to the above-mentioned purposes, may be processed by paper, electronic and/or telematic means, by means of electronic computers using software systems managed by third parties, through the inclusion of the same within the Holder’s corporate CRM, by traditional means (e. g. telephone contact, individual e-mails, etc.) and through automated modes of contact (e.g. automated campaigns of sending e-mails, SMS, social networks, etc.). The Controller to compare and possibly improve the results of communications, uses systems to send newsletters and promotional communications with reports. Thanks to the reports, the Owner will be able to know, for example: the number of readers, opens, unique “clickers” and clicks; the devices (iPhone, Blackberry, Nokia…) and operating systems (Windows, Apple, Linux, Android… ) used to read the communication; detail on the activity of individual users; detail on emails sent by date/time/minute; detail on delivered and undelivered, forwarded emails; the ‘list of unsubscribers to the newsletter; who opened an email or clicked on a single link; users with problems viewing the message; link tracking (i.e., the number of clicks made on the links in the message); click tracking (which links were clicked on and by whom). All this data is used for the purpose of comparing, and possibly improving, the results of communications.
Your data will be processed only by personnel designated by the Data Controller and in particular by the Marketing Department and CED.
Your data will be communicated externally to companies acting as Autonomous Data Controllers or Data Processors:
- External parties that provide cloud services;
- Providers of technical support services;
- Third-party companies that provide services to manage the computer system, including server hosting and back-up services;
Your data will not be disseminated.
Please note that in accordance with the principles of lawfulness, purpose limitation and data minimization, pursuant to Article 5 of the GDPR, the retention period of your personal data is established:
- In relation to marketing purposes, until you exercise your right to withdraw your consent or object to the processing of your data, which can be exercised at any time by pressing the “Unsubscribe” button in the footer of communications sent for the above purposes or by contacting the Controller at the company contact details provided herein.
You have the right to obtain from the Data Controller the cancellation (right to be forgotten), restriction, updating, rectification, portability, opposition to the processing of personal data concerning you, as well as in general you can exercise all the rights provided for in Articles 15 et seq. of the European Regulation 2016/679 by writing to firstname.lastname@example.org or by contacting the Data Controller at the company contact details provided in this document.
RIGHTS OF DATA SUBJECTS
EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject
- The subject has the right to obtain confirmation of the existence or non-existence of personal data concerning him or her, even if not yet recorded, and their communication in an intelligible form and the possibility to file a complaint with the Supervisory Authority.
- The subject has the right to obtain information on:
a) the origin of the personal data;
b) of the purposes and methods of processing;
c) the logic applied in case of processing carried out with the aid of electronic instruments;
d) of the identification details of the data controller, data processors and the representative designated pursuant to Article 5, paragraph 2;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of the data in their capacity as designated representative in the territory of the State, managers or personnel authorized to process personal data.
- The subject has the right to obtain:
a) updating, rectification or, when interested, integration of the data;
b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
c) certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data were communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate to the protected right;
(d) the portability of the data.
- The subject has the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning him/her, even if pertinent to the purpose of collection;
b) to the processing of personal data concerning him/her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication