This Website collects certain Personal Data of its Data Subjects.
Data Controller
Artimino S.p.A. – Viale Papa Giovanni XXIII, 1 – 59015 Artimino, Carmignano (PO) tel. +39 055 8751635 privacy@artimino.com., Tax code 01298080480
VAT no. 00253870976
Types of Data Collected
The term “Personal Data” means any information relating to an identified or identifiable natural person with specific reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of their identity.
The Personal Data collected on the Website are the following:
a) Navigation Data: The website’s computer systems collect certain personal data, the transmission of which is strictly linked in the use of Internet communication protocols. This information is not collected in order to be associated with the Data Subject, but by its very nature could, through processing and association with data held by third parties, allow the identification of the Data Subject. Among these, there are data relating to the connection, IP address, domain names and other parameters relating to the browser and operating system used to connect to the site. These data are used to obtain anonymous statistical information on the use of the website and to check its correct functioning; to allow – given the architecture of the systems used – the correct provision of the various functions requested, for security reasons, and to ascertain responsibility in the event of hypothetical computer crimes against the website or third parties.
b) Data provided voluntarily: Through the website, the Data Subject has the chance to voluntarily provide personal data such as name, surname, address, company name, billing and address data, telephone number, email address.
c) Cookies: the use of Cookies – or other tracking tools – by this Website or by the owners of third-party services used by this website, unless otherwise specified, is for the purpose of providing the Service requested by the Data Subject, in addition to the additional purposes described in this document and in the Cookie Policy. Please refer expressly to the cookie policy.
Personal Data may be freely provided by the Data Subject or, in the case of Navigation Data, automatically collected during the use of this website. Unless otherwise specified, all data requested by this website are mandatory. If you refuse to provide them, it may be impossible for this website to provide the service. In cases where this website indicates certain data as optional, Data Subjects are free to refrain from communicating such data, without this having any effect on the availability of the service or its operation.
The Data Subject takes liability for the Personal Data of third parties obtained, published or shared through this Website and warrants that they have the right to communicate or disseminate them, thus releasing the Controller from any liability towards third parties.
Types of Processing Modes and Place of Processing of Collected Data
Processing methods
The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of Personal Data. The processing is carried out by means of computer and/or telematic tools, with organisational methods and logics strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Website (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as Data Processors by the Data Controller, may have access to the data. An updated list of the Data Processors can always be requested from the Data Controller.
Legal basis of the processing
All Personal Data provided by the Data Subject will be processed by the Data Controller for the purposes of: (a) responding to and satisfy Data Subject’s requests; (b) fulfilling any contractual obligations of the Data Controller; (c) pursuing legitimate interests of the Data Controller [e.g. in case of extraordinary merger, sale or transfer of a business unit, in order to allow the performance of the operations necessary for the due diligence activity and preparatory to the sale or in case it is necessary in order to ascertain, exercise or defend a right of the Data Controller in court]; (d) fulfilling legal and/or fiscal obligations.
Only if the Data Subjects expressly give their consent, may Personal Data be processed for purposes related to the Controller’s business, such as the promotion and/or commercial offer of products and events, as well as the sending of information material, also via email and/or text message. If given, the Data Subject has the right to withdraw consent for the processing of Personal Data for this purpose at any time. With reference to these purposes, moreover, the Data Controller may use automated decision-making systems/processes (such as profiling) to offer the activities described above.
Place
The Data are processed at the operational headquarters of the Data Controller and in any other place where the parties involved in the processing are located. For further information, please contact the Data Controller using the methods described in detail below.
Information submitted through our website may be transferred to countries outside the European Union (“EU”) and/or the European Economic Area (“EEA”). By way of example, this may happen if we use a technical service provider located in a country outside the EU/EEA. If we transfer personal data outside the EU/EEA in this way, we will take steps to ensure that your privacy rights continue to be protected. This means more specifically that we will only transfer personal data to such third countries when we are permitted to do so, for example, on the basis of an adequacy decision of the European Commission or on the basis of adequate safeguards provided by standard contractual clauses adopted by the European Commission.
Retention period
The Data are processed and stored for the time required by the purposes for which they were collected.
At the end of the retention period, personal data will be deleted or made anonymous.
Purposes of Data Collection
The Personal Data are collected to allow navigation on the website, the purchase of services provided by the Controller, as well as, upon consent, for the following purposes: promotion and/or commercial offer of products and events, as well as sending of informative material, also via email and/or text message.
The Data Subject’s rights
Data Subjects may exercise certain rights with reference to the Data processed by the Data Controller.
In particular, the Data Subject has the right to:
– revoke consent at any time. The Data Subject may revoke the consent to the processing of their Personal Data previously expressed.
– object to the processing of their Data. The Data Subject may object to the processing of their Data when it is carried out on a legal basis other than consent. Further details on the right to object are set out in the section below.
– access their Data. The Data Subject has the right to obtain information on the data processed by the Controller, on certain aspects of the processing, and to receive a copy of the data processed.
– verify and request rectification. The Data Subject may verify the correctness of their data and request that it be updated or corrected.
– obtain the restriction of the processing. When certain conditions are met, the Data Subject may request the deletion of their data by the Data Controller. In this case, the Data Controller will not process the data for any purpose other than retention.
– obtain the deletion or removal of their Personal Data. When certain conditions are met, the Data Subject may request the deletion of their data by the Data Controller.
– receive their data or have them transferred to another owner. The Data Subject has the right to receive their data in a structured, commonly used and machine-readable format and, where technically feasible, to have them transferred without hindrance to another controller. This provision is applicable when the data are processed by automated means and the processing is based on the Data Subject’s consent, on a contract to which the Data Subject is a party or on contractual measures related to the contract.
– lodge a complaint. The Data Subject may lodge a complaint with the competent data protection supervisory authority or take legal action.
Details of the right to object
When personal data are processed in the public interest, in the exercise of public powers vested in the Controller or in pursuit of a legitimate interest of the Controller, Data Subjects have the right to object to the processing for reasons related to their particular situation. Data Subjects are reminded that if their Data are processed for direct marketing purposes, they may object to the processing without providing any reasons. To find out whether the Controller processes data for direct marketing purposes, Data Subjects may refer to the related sections of this document.
How to exercise rights
In order to exercise their rights, Data Subjects may send a written request to the Controller’s contact details, by writing to: Artimino S.p.A. – Viale Papa Giovanni XXIII, 1 – 59015 Artimino, Carmignano (PO), tel. +39 055 8751635 e-mail privacy@artimino.com.
Legal references
This privacy policy is provided pursuant to Articles 13 and 14 of Regulation (EU) 2016/679. Unless otherwise specified, this privacy policy applies exclusively to this website.