Policy notice for those who fill out the online form

Identity of the Data Controller

The Data Controller of the processing indicated below is ERGOTRON S.R.L. with headquarters in VIA MEZZOMERICO N. 16 28040 Marano Ticino (NO), in the person of its legal representative pro tempore.

Data source and type of data collected

The processed personal data are those provided by filling out the form, possibly supplemented with data obtained from public or known records, providing, in any case, consistency of processing.

Purposes of processing

The personal data are processed to fulfill the demands made by filling out the online form. In addition, the data, including e-mail addresses, will be registered in the archives and used (see also the General Provision of the Guarantor G.U. July 1, 2008, no. 188/C, formulation 6, points a, b, c) for sending, also by e-mail, technical, promotional and commercial communications concerning products and services similar to those for which requests have been made.

Lawfulness of processing

The legal basis for the processing is the execution of a contract to which the data subject is a party, or the fulfillment of his/her requests.

Data recipients

The personal data processed by the Data Controller are not disclosed, which means they are not given to unspecified entities, in any possible form, including that of their provision or simple consultation. They may, however, be communicated to subjects employed by the Data Controller, to external parties who collaborate with it, designated as Data Processors or authorized to the processing as operating under the authority of the Data Controller.

They may also be communicated, to the extent strictly necessary, to persons who, for the purpose of fulfilling users’ requests, must provide goods or perform services on behalf of the Data Controller. Finally, they can be communicated to persons entitled to access them pursuant to legal provisions, regulations and Community regulations.

In particular, on the basis of the roles and duties performed, the workers have been entitled to process users’ personal data, within the limits of their powers and in accordance with the instructions given to them by the Data Controller.

External parties operating under the authority of the Controller have also been appropriately authorized according to the type of service provided, the processing, the nature of the processed data.

The external subjects to whom the Data Controller has entrusted the processing of personal data have been designated as Data Processors.

Data Transfer

The Data Controller shall not transfer personal data to third countries or to international organizations.

However, it reserves the right to use services in the cloud; in which case, the service providers will be selected from those which provide adequate guarantees, as required by art. 46 GDPR 679/16.

Data retention

The Data Controller shall keep and process the personal data for the time necessary to fulfill the purposes indicated. In this case, the data entered in the online forms are retained for two years.

Refusal to provide data

The interested party may refuse to grant the Data Controller its navigation data.

However, failure to provide information could compromise or make it impossible to respond or process requests.

Rights of the data subject

With reference to Articles 15 — right of access, 16 — right of rectification, 17 — right to erasure, 18 — right to restriction of processing, 20 — right to portability, 21 — right of objection, 22 — right to object to the automated decision-making process of GDPR 679/16, the data subject exercises his/her rights by writing to the Data Controller at the address indicated above, or by email, specifying the subject of your request, the right you intend to exercise and attaching a photocopy of an identity document certifying the legitimacy of the request.

The Data Controller wishes to remind in particular that any interested party may exercise the right to object in the forms and manner provided for in art. 21 GDPR.

Withdrawal of consent

With reference to art. 7 GDPR 679/16, the interested party may at any time revoke any consent provided.

However, the processing object of this notice is lawful and permitted, even in the absence of consent, as necessary for the execution of a contract to which the person concerned is a party, or for the fulfillment of his/her demands.

Complaint Proposition

The data subject has the right to lodge a complaint with the supervisory authority of the state of residence.

Automated decision making processes

In no case, with regard to the processing operations indicated below, shall the Data Controller carry out processing operations consisting of automated decision-making processes on the data of natural persons.