PRIVACY NOTICE

The following information is provided in accordance with Article 13 of Regulation (EU) 2016/679 (GDPR) relating to the processing of the personal data provided by you. This privacy notice does not cover any other websites that may be accessed via links on the data controller’s websites, so the data controller may not be held responsible for third-party websites.

What does “personal data” mean?

“Personal data” means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

Browsing data

During normal operation, the IT systems and software procedures used to run a website collect some personal data, which is implicitly transmitted through the use of internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, the addresses in URI/URL (Uniform Resource Identifier/Locator) notification of the requested resources, access time, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the state of the data response from the server (successful, error, etc.) and other information relating to the user’s operating system and IT environment.

Personal data provided by the data subject

If you choose to voluntarily send any messages to the contact addresses or fill in and send forms on the data controller’s website, your contact data will be collected as will any other personal information included in the messages; such personal data shall be used solely for the purpose of responding to your request.

Cookies

Please read the Cookie Policy for more information about the cookies used by the website.

The data controller

For the purposes of Articles 4 and 24 of Regulation (EU) 2016/679, the data controller is:

Vanetti SpA - Viale Kennedy, 986 - 21050 Marnate (VA) – Italy - VAT No: IT02543400127

in the person of the legal representative pro tempore, which may be contacted at: tel: +39.0331.389077

email: vanetti@vanettimaster.com The purposes of the processing Purpose A: Browsing the website Purpose B: Newsletter service

Purpose C: Completing contact request forms

Legal grounds for processing:

For purpose A: legitimate interest ((f) of Article 6(1)): processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject, based on activities that are strictly necessary for website functions and providing a browsing service on the platform.

For purpose B: consent ((a) of Article 6(1)): the data subject has given consent to the processing of his or her personal data.

For purpose C: legitimate interest | requested by the data subject ((f) of Article 6(1)) and considering 47 (GDPR).

Data storage period:

For purpose A: for the entire duration of the browsing session.

For purpose B: until consent is withdrawn, which may be easily done by contacting the data controller.

For purpose C: for the time necessary to respond to the request, but in any case for no longer than one year.

Providing data

For purpose A: data must be provided so that you can browse the website.

For purpose B: providing data is optional and if they are not provided, your data will not be processed for this purpose.

For purpose C: data must be provided to enable the data controller to respond to requests submitted via the form.

To whom is the collected personal data disclosed?

Personal data may be shared with entities that process the data as data processors (Article 28 of Regulation (EU) 2016/679) and/or as natural persons acting under the authority of the controller or of the processor (Article 29 of Regulation (EU) 2016/679) for the abovementioned purposes, such as:

• entities that provide services to manage the data controller’s IT system and telecommunications networks, including the newsletter service;

• self-employed professionals, offices or companies that provide support and consulting;

• competent authorities for fulfilling legal obligations and/or complying with regulations of public bodies. The list of data processors is constantly updated and available from the data controller upon request.

Transfers outside the EU

 

Personal data collected on the data controller’s website shall not be transferred to countries located outside the European Economic Area (EEA).

Automated processes

We do not use automated decision-making, including profiling.

Rights of the data subject

Under Articles 15 to 22 of Regulation (EU) 2016/679, the data subject shall have the right to obtain from the controller, by submitting a request, access to his or personal data, rectification and erasure of said personal data, restriction of processing, or to object to processing; the data subject also has the right to portability of his or her personal data. In summary, the main rights of the data subject are:

1. To obtain confirmation as to whether the data controller holds his or her personal data and obtain and communication of such data in intelligible form; be informed of the source of the personal data, the purposes and methods of the processing, the logic applied to the processing if carried out with electronic means, and the identity of the data controller, data processors, persons in charge of the processing, and entities that may become aware of the personal data;

2. To obtain updating, rectification or integration of the data, erasure, anonymisation or blocking of data that have been processed unlawfully, certification to the effect that the abovementioned operations have been notified to the entities to whom or which the data were communicated or disseminated, and data portability.

3. To object to the processing of personal data relating to him or her where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys; and to object to the processing also for other purposes where there exist legitimate grounds.

If the data subject considers that the processing of personal data relating to him or her infringes this Regulation, he or she shall have the right to lodge a complaint with the supervisory authority for personal data protection or judicial authority as provided for by Article 77 of Regulation (EU) 2016/679.

Further information

The data controller reserves the right to amend, update, and add or remove parts to and from this privacy notice at its discretion and at any given time. You can easily see when this privacy notice was last updated by checking the date on this page.

 

 

Last updated: 21/03/2024