OLICY REGARDING THE PROCESSING OF PERSONAL DATA
(Art. 13 of EU Regulation no.679 of 27 April 2016, on the protection of personal data “GDPR”)
In compliance with requirements imposed by the General Regulation on the protection of personal data, the process Controller hereby provides the data subject with the following information on the processing of personal data carried out.
PROCESS CONTROLLER
Company name PM Oil&Steel S.p.A. VAT / Tax Code IT03520360961 / IT03520360961
CONTACTS FOR EXERCISING RIGHTS
Requests to exercise the rights established by the GDPR or any revocation of consent given may be sent to the Controller at the following contact details:
Address Via Verdi 22 – 41018, San Cesario sul Panaro (MO) – Italy Contact details +39 059 936811, pmgroup@pec.pm-group.eu
CATEGORIES OF DATA SUBJECTS
Website visitors
PROCESSING
Here below please find a list of the personal data processing involving the data subject
Management of support requests or contact via website
Purposes not requiring consent Purposes Legal basis
Management of contact requests and commercial support received Execution of an agreement and/or precontractual measures
Types of data processed E-mail, Name, Surname, Phone number.
Not providing the data indicated will make it impossible for the Controller to continue with the existing relationship
Storage terms for personal data categories Category Storage term
Common Data processing will be kept for the time necessary to achieve the purposes described in the information notice. The data subject will be stored for a period not exceeding 30 days from the date of the request for support or contact.
Internal and external communications
Purposes not requiring consent Purposes Legal basis
(Electronic or not) Communication Execution of an agreement and/or precontractual measures
Archiving of communication Legitimate interest
Types of data processed Name and Surname, E-mail address, phone number, medical documents, Criminal record (Bodies), Summons, Sentences, Deeds of obligation, Legal deeds, Administrative deeds
Not providing the data will make it impossible for the Controller to continue with the activities in question
Storage terms for personal data categories Category Storage term
Common, Judicial, Particular Data processing will be kept for the time necessary to achieve the purposes described in the information notice. The data will be kept for 20 years from the date reported in the communication or in the last communication in the case of an exchange of correspondence, as well as the time necessary to assert legal rights.
RIGHTS OF THE DATA SUBJECT
(Arts. from 15 to 22 and from art. 13 of the GDPR)
Here below please find the rights the data subject may exercise:
Right of access In accordance with art.15 of the GDPR the data subject has the right to request access to his/her personal data.
Right of rectification In accordance with art.16 of the GDPR the data subject has the right to ask the controller to rectify his/her personal data.
Right of erasure In accordance with art. 17 of the GDPR the data subject has the right to ask the controller to erase his/her personal data.
Right of restriction In accordance with art.18 of the GDPR the data subject has the right to ask the controller to restrict the data concerning him/her.
Right to object In accordance with art. 21 of the GDPR the data subject has the right to object to processing.
Right of portability In accordance with art. 20 of the GDPR the data subject has the right to exercise its data portability right.
Additional notes The data subject may also submit a complaint to the control body (for example the Privacy Authority).
AUTOMATED PROCESS
Is there an automated process? Processing is not based on an automated decision-making process.
NAME AND SURNAME (CAPITAL LETTERS) SIGNATURE OF THE DATA SUBJECT DATE