Privacy

Data controller

S.P.M. S.p.a.

Via Patrioti, 44/46

25014 Castenedolo

Subject: Dr. ANDREA LAFFRANCHI

Contact details of data controller: SPM@PEC.SPM-MOULD.COM

Data collected type

Among the Personal Data collected from the site http://www.spm-mould.it, either independently or through third parties, there are:

name, surname, telephone number, address, e-mail, zip code, city, any cookies and usage data.

Full details of each type of data collected are provided below, while for cookies and usage data, see the following link:

http://www.spm-mould.com/cookie/

 The data collected is deliberately and freely indicated by the user by completing the contact form in the section:

http://www.spm-mould.com/work-molding-plastics/

 The mandatory data are indicated directly in the contact form and are:

• Name and Surname
• Company
• E-mail
• Country
• Telephone

If the User refuses to communicate them, it may be impossible for SPM Spa to provide the information or requests. In the cases in which SPM Spa indicates some Data as optional, Users are free to refrain from communicating such Data, without this having any consequence on the availability of providing information and on its operation.

Users who have doubts, about which data are mandatory, are encouraged to contact the owner.

Any use of Cookies – or other tracking tools – by http://www.spm-mould.com or third-party service providers used by http://www.spm-mould.com , where not otherwise specified, it aims to provide the Service requested by the User, in addition to the additional purposes described in this document and in the Cookie Policy.

The User assumes the responsibility of the Personal Data of third parties obtained, published or shared through http://www.spm-mould.com and guarantees that he has the right to communicate or disseminate them, freeing the Data Controller from any liability to third parties.

Mode and place of processing of the collected Data

Treatment modalities

The Data Controller uses appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.

Processing is carried out using IT and / or telematic tools, with organizational methods and logic strictly related to the purposes indicated, based on the principles of correctness and lawfulness of processing.

In addition to the Owner, in some cases, other parties involved in the organization of http://www.spm-mould.it (administrative, commercial, marketing, legal, system administrators) or external parties (such as third party technical service providers, mail carriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, Data Controller by the Owner. The updated list of Data Processors may always be requested from the Data Controller.

Legal basis of the processing

The Owner processes Personal Data relating to the User if one of the following conditions exists:

• the processing is necessary to make a contact with the user, to respond to a request for information and / or to perform pre-contractual measures;

It is in any case always possible to ask the Owner to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, provided for by a contract or necessary to conclude a contract.

Place

The Data are processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For more information, contact the owner.

The User’s Personal Data collected from the Site will not be transferred outside the Italian territory.

Period of conservation

The Data is processed and stored for the time required for the purposes for which it was collected.

Therefore:

• The Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed.
• Personal data collected for purposes of mere request for information will be retained until the customer’s request is exhausted;

When the treatment is based on the consent of the User, the Owner may keep the Personal Data for longer until such consent is revoked. Furthermore, the Data Controller may be obliged to keep the Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the storage period the Personal Data will be deleted. Therefore, upon expiration of this term the right of access, cancellation, rectification and the right to the portability of the Data can no longer be exercised.

Rights of the interested party

Art. 15 (right of access), 16 (right of rectification) of the EU Reg. 2016/679

The interested party has the right to obtain from the controller the confirmation that the processing of personal data concerning him is being carried out and in this case, to obtain access to personal data and to the following information:

1. a) the purposes of the processing;
2. b) the categories of personal data in question;
3. c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations;
4. d) the period of storage of personal data provided or, if this is not possible, the criteria used to determine this period;
5. e) the existence of the data subject’s right to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their processing;
6. f) the right to lodge a complaint with a supervisory authority;
7. g) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the expected importance and consequences of such processing for the data subject.

Right referred to in art. 17 of EU Reg. 2016/679 – right to cancellation (“right to be forgotten”)

The interested party has the right to obtain from the data controller the deletion of personal data concerning him without unjustified delay and the data controller has the obligation to delete personal data without unjustified delay, if one of the following reasons exists:

1. a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
2. b) the data subject withdraws the consent on which the processing is based in accordance with Article 6, paragraph 1, letter, or Article 9, paragraph 2, letter a), and if there is no other legal basis for processing;
3. c) the data subject opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate prevailing reason to proceed with the processing, or he opposes the processing pursuant to Article 21, paragraph 2;
4. d) personal data have been unlawfully processed;
5. e) personal data must be deleted in order to fulfill a legal obligation established by Union law or the Member State to which the data controller is subject;
6. f) personal data was collected in relation to the offer of information society services pursuant to Article 8, paragraph 1 of EU Regulation 2016/679

Right referred to in art. 18 Right to limitation of treatment

The interested party has the right to obtain the treatment limitation from the data controller when one of the following hypotheses occurs:

1. a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
2. b) the processing is unlawful and the data subject opposes the deletion of personal data and requests instead that its use be limited;
3. c) although the data controller no longer needs it for the purposes of processing, personal data is necessary for the data subject to ascertain, exercise or defend a right in court;
4. d) the interested party has opposed the processing pursuant to Article 21, paragraph 1, EU Reg 2016/679 pending verification regarding the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

Right referred to in article 20 Right to data portability

The interested party has the right to receive in a structured format, commonly used and readable by automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without hindrance by part of the data controller

Withdrawal of consent to treatment

You are entitled to revoke your consent to the processing of your personal data by sending a registered letter with return receipt to the following address: SPM SPA – VIA PATRIOTI 44/46 – 25014 CASTENEDOLO (BS) accompanied by a photocopy of your identity document, with the following text: << revocation of consent to the processing of all my personal data >>. At the end of this operation your personal data will be removed from the archives as soon as possible.

If you wish to have more information on the processing of your personal data, or exercise the rights referred to in point 7 above, you can send a registered letter with return receipt to the following address: SPM SPA – VIA PATRIOTI 44/46 – 25014 CASTENEDOLO (BS). Before you can provide, or change any information, you may need to verify your identity and answer some questions. An answer will be provided as soon as possible.