General Data Protection Regulation n. 2016/679
DATA CONTROLLER, DATA PROCESSOR AND PROCESSING MECHANISM
PROCESSING MECHANISM OF PERSONAL DATA AND ITS PURPOSES
The simple consultation of the website does not itself involve the collection or processing of users’ personal data. The data collected and consequently processed are usually limited to the user’s first name and last name, postal address and e-mail address. In only cases where the provision of data is functional for the establishment of a professional or commercial cooperation, further identification data of the person and/or company and the activity from these turnarounds may be required. There won’t be any collection of data defined as “sensitive” according to the current regulations.
Unless otherwise indicated, the provision of the required data from time to time is mandatory for the purpose of refining the procedures for accessing the reserved areas of the website or other specific features. The purposes of the processing mechanism are diversified according to the areas of the website where the data is requested. In compliance with Decree no. 679/2016, in particular:
Contact Us: user personal data, granted during the registration process, will be processed exclusively for related purposes at the request of information forwarded and, subject to explicit consent of the user, for purposes related to the sending of descriptive, promotional and publicity material of Silmax world and products.
- Registered Trademarks: in this case, user personal data will be processed to initiate the procedure for the release (and possible revocation) of the user authorization for the use of “SILMAX” registered trademark on the web sites. c) Work with us: the data provided is processed in order to evaluate the possibility of establishing a cooperative relationship between the user and Silmax Spa and for human resources purposes. Even if there is no follow-up to the contact created by the CV or other data, the latter will be retained by Silmax Spa for a period of one year after the acquisition, after which they will be cancelled.
- Sellers: user personal data will be processed in order to qualify the User as a Professional Dealer and this allows his/her access to the restricted areas of the website within which he/she will find textual and photographic material to be used for information or communication activities related to Silmax. Upon explicit consent of the user, the data may be processed for purposes related to the sending of descriptive, promotional and publicity material of Silmax world and products. e) Dealers: user personal data will be processed in order to qualify as Silmax Dealer and this allows his/her access to the restricted areas of the website within which he/she will find textual and photographic material to be used for information or communication activities related to Silmax. Upon explicit consent of the user, the data may be processed for purposes related to the sending of descriptive, promotional and publicity material of Silmax world and products.
- Contact our dealers: in this case, the purpose of the process mechanism is simply to contact users at a particular Silmax dealer in the world and, subject to his/her explicit consent, to submit descriptive, promotional and publicity material of Silmax world and products; the disclosure of such data by the user takes place even directly to the benefit of the dealer to whom the consent to the process mechanism granted is extended, for the same purposes as described herein. In all of the above mentioned cases, the data provided is kept for the time strictly necessary to achieve the purposes for which they were collected.
Data may be disseminated to the following persons or entities:
to components of the sales network of Silmax S.p.a. including dealers, agents and attorneys, only within the limits of what is strictly necessary and functional to the pursuit of the purposes set forth in the previous paragraph “PROCESSING MECHANISM OF PERSONAL DATA AND ITS PURPOSES”;
to public authorities for compulsory fulfilment set by primary and secondary laws or European regulations (e.g. ASL, Employment Offices, Tax and Financial Administrations).
The data provided may in any case be known by the persons responsible and those responsible for the processing mechanism appointed by Silmax S.p.a., whether internal or external from the Company.
Right to Access Personal Data and Other Rights
In every time user can exercise the rights contained in Section 7 of Legislative Decree no. 679/2016, as follows:
“Section 7” – Right to Access Personal Data and Other Rights
A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
A data subject shall have the right to be informed:
a) of the source of the personal data;
b) of the purposes and methods of the processing;
c) of the logic applied to the processing, if the latter is carried out with the help of electronic means;
d) of the identification data concerning data controller, data processors and the representative designated as per Section 5(2); and
e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
A data subject shall have the following rights:
a) to obtain updating, rectification or, where interested therein, integration of the data;
b) to obtain erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c) to obtain certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
A data subject shall have the right to object, in whole or in part,
a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.”