Policy notice for those who fill out the online form
Identity of the Data Controller
The Data Controller of the processing indicated below is ERGOTRON S.R.L. with headquarters in VIA MEZZOMERICO N. 16 28040 Marano Ticino (NO), in the person of its legal representative pro tempore.
Data source and type of data collected
The processed personal data are those provided by filling out the form, possibly supplemented with data obtained from public or known records, providing, in any case, consistency of processing.
Purposes of processing
The personal data are processed to fulfill the demands made by filling out the online form. In addition, the data, including e-mail addresses, will be registered in the archives and used (see also the General Provision of the Guarantor G.U. July 1, 2008, no. 188/C, formulation 6, points a, b, c) for sending, also by e-mail, technical, promotional and commercial communications concerning products and services similar to those for which requests have been made.
Lawfulness of processing
The legal basis for the processing is the execution of a contract to which the data subject is a party, or the fulfillment of his/her requests.
Data recipients
The personal data processed by the Data Controller are not disclosed, which means they are not given to unspecified entities, in any possible form, including that of their provision or simple consultation. They may, however, be communicated to subjects employed by the Data Controller, to external parties who collaborate with it, designated as Data Processors or authorized to the processing as operating under the authority of the Data Controller.
They may also be communicated, to the extent strictly necessary, to persons who, for the purpose of fulfilling users’ requests, must provide goods or perform services on behalf of the Data Controller. Finally, they can be communicated to persons entitled to access them pursuant to legal provisions, regulations and Community regulations.
In particular, on the basis of the roles and duties performed, the workers have been entitled to process users’ personal data, within the limits of their powers and in accordance with the instructions given to them by the Data Controller.
External parties operating under the authority of the Controller have also been appropriately authorized according to the type of service provided, the processing, the nature of the processed data.
The external subjects to whom the Data Controller has entrusted the processing of personal data have been designated as Data Processors.
Data Transfer
The Data Controller shall not transfer personal data to third countries or to international organizations.
However, it reserves the right to use services in the cloud; in which case, the service providers will be selected from those which provide adequate guarantees, as required by art. 46 GDPR 679/16.
Data retention
The Data Controller shall keep and process the personal data for the time necessary to fulfill the purposes indicated. In this case, the data entered in the online forms are retained for two years.
Refusal to provide data
The interested party may refuse to grant the Data Controller its navigation data.
However, failure to provide information could compromise or make it impossible to respond or process requests.
Rights of the data subject
With reference to Articles 15 — right of access, 16 — right of rectification, 17 — right to erasure, 18 — right to restriction of processing, 20 — right to portability, 21 — right of objection, 22 — right to object to the automated decision-making process of GDPR 679/16, the data subject exercises his/her rights by writing to the Data Controller at the address indicated above, or by email, specifying the subject of your request, the right you intend to exercise and attaching a photocopy of an identity document certifying the legitimacy of the request.
The Data Controller wishes to remind in particular that any interested party may exercise the right to object in the forms and manner provided for in art. 21 GDPR.
Withdrawal of consent
With reference to art. 7 GDPR 679/16, the interested party may at any time revoke any consent provided.
However, the processing object of this notice is lawful and permitted, even in the absence of consent, as necessary for the execution of a contract to which the person concerned is a party, or for the fulfillment of his/her demands.
Complaint Proposition
The data subject has the right to lodge a complaint with the supervisory authority of the state of residence.
Automated decision making processes
In no case, with regard to the processing operations indicated below, shall the Data Controller carry out processing operations consisting of automated decision-making processes on the data of natural persons.