Personal Data Policy pursuant to articles 13-14 of EU Regulation 2016/679

Data Subjects: Web users - contacts section.

TRANSMEC SERVIZI SPA as Data Controller for the processing of your personal data, in accordance with EU Regulation 2016/679, hereinafter, the ‘GDPR’, informs you that the above-mentioned regulation provides protection for the data subjects with respect to the processing of personal data and that said ù processing is carried out in accordance with the principles of fairness, legality, transparency and with the aim of protecting your privacy and your rights.

Your personal data will be processed in accordance with the legal provisions of the regulation cited above and the privacy obligations it sets out.

Purposes and legal basis for processing: specifically, your data will be used for the following purposes relating to the execution of measures connected with contractual or pre-contractual obligations:

• Commercial management/pre-contractual activities (contacts by telephone, preparation of an offer or quote, etc.);
• Replying to your requests.

Your data will also be used for the following purposes necessary to pursue the legitimate interest of the data controller:

• Inclusion in a company database also for the purposes of future recognition.

Your personal data may also, based on your consent, be used for the following purposes:

• Sending information relating to the data controller’s products and services, promotions, discounts and events through periodic newsletters.

The provision of your data is optional for the purposes indicated above, and your refusal of processing will not compromise the continuation of the relationship and consistency of the processing.

Methods of processing. Your personal data may be processed using the following methods:

• assignment to third parties for processing operations;
• collection of data via computer or electronically;
• processing using electronic calculators.

All processing takes place in accordance with articles 6 and 32 of the GDPR and through the adoption of the appropriate security measures envisaged.

Your data will be processed only by personnel expressly authorised by the Data Controller and, in particular, by the following categories of workers:

• Operational Personnel;
• Department/Branch Manager;
• Marketing Office.

Communication: Your data may be communicated to external parties for the correct management of the relationship and, in particular, to the following categories of Recipients, including all the duly appointed Data Processors:

• Companies providing website assistance and maintenance;
• Companies providing email marketing services.

Dissemination: Your personal data will not be disseminated in any way.

Retention Period. We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to art. 5 of the GDPR, the retention period of your personal data is:

• established for no longer than is necessary for the purposes for which the personal data has been collected and processed for the performance and execution of the contractual purposes;
• established for no longer than the time required to execute the services provided;
• only for contact data, up to the end of the company business.

Data Controller: the Data Controller pursuant to law is TRANSMEC SERVIZI SPA (VIA PONTE ALTO 32, 41011 CAMPOGALLIANO (MO), ITALY; VAT no.: 02477120360) in the person of its pro tempore legal representative.

You have the right to obtain from the data controller the erasure (right to be forgotten), limitation, updating, correction, portability and objection to the processing of your personal data, and, in general, you may exercise all the rights set out in articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR.

You may also view the updated version of this disclosure, at any time, by connecting to the url https://www.privacylab.it/informativa.php?15800394128.

EU Regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 - Data Subject’s Rights

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exists, even if not yet recorded, to have it communicated in intelligible form and to lodge a complaint with the control authorities.
2. The data subject has the right to be informed of:
   1. the origin of the personal data;
   2. the purposes and methods of processing;
   3. the logic applied in the event of processing with the aid of electronic systems;
   4. the identification details of the data controller, the processor and the designated representative pursuant to art. 5, paragraph 2;
   5. the parties or categories of parties to whom the personal data may be communicated or who may become aware of the personal data as designated representative in the territory of the country, data processors or persons in charge of processing.
3. The data subject has the right to obtain:
   1. the updating, correction or, where the data subject wishes, supplementation of the data;
   2. the erasure, conversion into anonymous form or blocking of the data if it is processed illegally, including data which it is not necessary to store, in relation to the purposes for which the data was collected or subsequently processed;
   3. the certification that the parties to whom the data was communicated or disclosed were informed of the transactions set out under letters a) and b), also as regards their content, unless fulfilling such obligation proves impossible or would involve a disproportionate effort in relation to the right protected;
   4. the portability of the data.
4. The data subject has the right to object, fully or partially:
   1. for legitimate grounds to the processing of his or her personal data, even if pertinent to the purpose for which it was collected;
   2. to the processing of his or her personal data for the purposes of sending advertising material or direct sales or to carry out market research or commercial communication.