Notice pursuant to art. 13 of EU Regulation 2016/679 | GDPR

 

METALPRESS S.P.A. hereinafter referred to as “METALPRESS” based in San Giovanni Lupatoto (VR), Via Monte Corno n. 10, VAT 01704340239 whose contact details are as follows:

Tel. +39 045 8778602 | Mail: privacy@metalpress.it

hereby intends to inform you pursuant to art. 13 of EU Regulation 2016/679 (hereinafter referred to as “Regulation” or “Applicable Standard” or “GDPR”) of its role as the Data Controller of the personal data that will be submitted by you and will therefore see to the related data processing for the purposes and according to the methods described below.

Please note that this notice is only issued in regard to the website www.metalpress.it (“website”), and that it does not apply to other websites that may be consulted through external links, and is to be understood as a Notice issued pursuant to art. 13 of the Regulation for those who interact with the relevant website.

It is hereby specified that pursuant to and for the purposes of articles 12 of the Applicable Standard, the personal data submitted by you will be recorded, processed and stored in our paper and electronic archives, in compliance with appropriate technical and organisational measures pursuant to art. 32 of the GDPR. The processing of personal data will take place through the use of tools and procedures suitable for guaranteeing data security and confidentiality.

 

  1. Types of data
  2. Purpose and legal basis of data processing. Processing that DOES NOT require the data subject CONSENT
  3. Possible recipients of personal data
  4. Data transfer to third-party countries
  5. Periodo di conservazione dei dati
  6. Data storage period
  7. Obligation/option to submit personal data
  8. Rights of the data subject.

 

 

 

1. Types of data

METALPRESS may collect all or part of the following data:

  • Company name, Name and Surname, Address, Telephone, Fax, E-mail;
  • Navigation data.

It is hereby specified that should you submit personal data of third parties (i.e. not your own personal data) to METALPRESS, you will act as the independent data controller for such data assuming all related legal obligations and responsibilities. As such, you hereby commit to holding METALPRESS fully harmless against any dispute, claim, claim for damages resulting from data processing etc. that should be initiated by third parties whose personal data have been processed as a result of your spontaneous submission in violation of the applicable rules on the protection of personal data. In any case, if you submit or otherwise process personal data belonging to third parties, you hereby guarantee – assuming all related responsibility – that this particular form of data processing has an adequate legal basis pursuant to art. 6 of the Regulation which legitimises the processing of any such information.

 

2. Purpose and legal basis of data processing. Processing that DOES NOT require the data subject CONSENT

Your data will be processed for the following purposes:

  1. to respond to your requests to be contacted and possibly arrange meetings with a view to starting a professional relationship;
  2. to answer your questions.

The form of processing referred to in letters a) and b) above is necessary to respond to your requests, therefore, METALPRESS is not requested to obtain your specific consent to the processing of data as the legal basis for the processing of your personal data for the purposes indicated above is art. 6(1)(b) of the Regulation (“[…] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”) and art. 6(1)(c) of the Regulation (“[…] processing is necessary for compliance with a legal obligation to which the controller is subject”).

 

3.  Possible recipients of personal data

Personal data may be disclosed, to the extent that this is necessary, to authorised personnel, adequately prepared and trained by the Data Controller, who are committed to confidentiality or have an adequate legal obligation to ensure confidentiality.

METALPRESS will not indiscriminately disclose your data, or in other words, will not disclose such data to undetermined subjects – including by making such data available or available for consulting.

 

4.  Data transfer to third-party countries

The personal data submitted through the website will not be transferred to non-EU countries and METALPRESS will not carry out any profiling activity using the data collected.

 

5.  Data storage period

Personal data will be retained for the period of time strictly necessary for the pursuit of the specific purposes of data processing and in any case, for a period of time not exceeding 6 months. The data will subsequently be deleted or destroyed.

 

6.   Obbligo/facoltà di fornire i dati personali

METALPRESS specifies that the submission of data for the purposes referred to in point 2 lett. a) and b) is necessary to respond to your requests and that in case of failed submission METALPRESS will not be able to fulfil your request.

 

7. Data processing method

Your personal data may be processed by carrying out any operation or set of operations among those indicated in art. 4, paragraph 1, point 2 of the GDPR.

Personal data will be processed through the use of tools and procedures suitable for guaranteeing security and confidentiality; data processing can be carried out, directly and/or through appointed third parties, either manually on paper media, or by means of computerised or electronic tools. For the purposes of correct management of the relationship and the fulfilment of legal obligations, personal data may be included in the Data Controller’s internal documentation and if necessary, also in the records and registrations required by law.

 

8. Rights of the data subject

Pursuant to articles 15 and following ones of the Regulation, the data subject has the right to ask METALPRESS, at any time, to obtain access to personal data, to rectify or delete such data or to object to data processing in the cases provided for by art. 21 of the Regulation, and has the right to request restriction of processing in the cases provided for by art. 18 of the Regulation, as well as to obtain in a structured format, commonly used and readable by an automatic device, any such personal data in the cases provided for by art. 20 of the Regulation.

The aforementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated here above.

Requests relating to the exercise of the data subject’s rights will be processed without undue delay and, in any case, within one month of the request; only in particularly complex cases and in the event of a high number of requests may this deadline be extended by a further 2 (two) months.

In any case, you will always be entitled to file a complaint with the competent supervisory authority (personal data protection authority) pursuant to art. 77 of the Regulation if you believe that the processing of your personal data is in violation of the regulations in force.