Privacy Policy

Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)

Information to be provided where personal data are collected from the data subject

Subjects of the processing

DATA CONTROLLER, pursuant to art. 4 and 24 of the Regulation (EU) 2016/679, is CEAM AMADEO SPA, having its head office in Via Dante 5, 22072 Cermenate (CO) Italy, as represented by the pro-tempore Chairman of the Board of Directors. The contact details of the controller: email [email protected]; telephone: 031771316.

Purposes of the processing Lawfulness of the processing Data retention period

Browsing on this website: the data collected during the navigation will be processed to obtain anonymous statistical information on the use of the site and to check its correct functioning.

Legitimate interest | Valued on the basis of reasonable expectations given by the data subject who surfs the current website.

Only for the related session, after which the data are deleted.

Organizational, administrative, financial and accounting activities and clients / prospects management for the performance of a contract or to take steps at the request of the data subject prior to entering into a contract

Controller’s legitimate interest

Performance of a contract and compliance with a legal obligation

10 years or different legal obligation

Request of contacts or information

Controller’s legitimate interest: reply to users’ requests

1 year

Direct Marketing: for receiving newsletter communications from the Controller

User’s consent

Until users’ objection (opt-out) | unsubscription from the mailing list

NATURE OF DATA PROVISION AND REFUSAL

Except for what specified for navigation data which are necessary in order to allow navigation of the website, data subjects are free to provide their personal data and their failure to provide data may result in the impossibility of obtaining the information or services requested and provided by this website.

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Personal data provided by you may be communicated to recipients, appointed pursuant to art. 28 of the Regulation EU 2016/679, which shall process your data as processors and/or persons acting under the authority of the Controller and the Processor, in order to perform agreements or related purposes. Precisely, your data may be communicated to recipients part of the following categories:

– suppliers of the information system and communication networks (e-mail; web platform)

  advisory and consultancy firms and companies;

– competent Authorities for the fulfillment of obligations of law, if required;

The subjects belonging to the aforesaid categories act as data Processors or act in complete autonomy as separate data Controllers. The list of designated data Processors is constantly updated and available at the offices of the Controller or by writing to  [email protected]

DATA TRANSFER TO A THIRD COUNTRY AND/OR TO INTERNATIONAL ORGANISATIONS
The personal data provided will not be transferred outside the European Union for purposes A), B) and C). With regard to the purpose D) Direct Marketing, the personal data provided will be transferred to countries outside the EU, in particular in the USA, in order to comply with the aforementioned purposes; the data will be transferred according to the art. 44 Reg. 2016/679 – General principle for transfers: the art. 45 – Transfers on the basis of an adequacy decision (Privacy Shield). The interested party can obtain information about the guarantees for data transfer by writing an email to [email protected]

DATA SUBJECT’S RIGHTS

You may exercise your rights pursuant to articles 15 et seq. of the Regulation EU 2016/679, by contacting the data Controller, by writing to  [email protected]

You have the right, at any time, to request the data Controller to access, rectify, cancel your personal data or limit their processing. Furthermore, you have the right to object, at any time, to the processing of your data (including automated processing, e.g. profiling) based on legitimate interest.

Without prejudice to any other administrative and judicial appeal, if you believe that the processing of your data violates the provisions of Regulation EU 2016/679, pursuant to art. 15 letter f) of the aforementioned Regulation EU 2016/679, you have the right to lodge a complaint with the Data Protection Authority and, with reference to art. 6 paragraph 1, letter a) (consent) you have the right to withdraw the consent given at any time.

In case of request of data portability the Controller shall provide you with your personal data in a structured, commonly used and machine-readable format, subject to the provisions set forth in paragraphs 3 and 4 of art. 20 of Regulation EU 2016/679.

Updating date: 19th October 2018