(Art. 13 of EU Regulation no.679 of 27 April 2016, on the protection of personal data “GDPR”)
In compliance with requirements imposed by the General Regulation on the protection of personal data, the process Controller hereby provides the data subject with the following information on the processing of personal data carried out.
PROCESS CONTROLLER
Company name: PM Oil&Steel S.p.A.
VAT / Tax Code: IT03520360961 / IT03520360961
CONTACTS FOR EXERCISING RIGHTS
Requests to exercise the rights established by the GDPR or any revocation of consent given may be sent to the Controller at the following contact details:
Address: Via G. Verdi 22 – 41018, San Cesario sul Panaro (MO) – Italia
Contact details: +39 059 936811, referente_privacy@pm-group.eu
CATEGORIES OF DATA SUBJECTS
Website visitors
PROCESSING
Here below please find a list of the personal data processing involving the data subject
- MANAGEMENT OF SUPPORT REQUESTS OR CONTACT VIA WEBSITE
Purposes not requiring consent:
Purposes: Management of contact requests and commercial support received
Legal basis: Execution of an agreement and/or precontractual measures
Types of data processed: E-mail, Name, Surname, Phone number.
Not providing the data indicated will make it impossible for the Controller to continue with the existing relationship.
Storage terms for personal data categories:
Category: Common
Storage term: Data processing will be kept for the time necessary to achieve the purposes described in the information notice. The data subject will be stored for a period not exceeding 30 days from the date of the request for support or contact.
- INTERNAL AND EXTERNAL COMMUNICATIONS
Purposes not requiring consent
Purposes: (Electronic or not) Communication.
Legal basis: Execution of an agreement and/or precontractual measures.
Finalità: Archiving of communication.
Base giuridica: Legitimate interest.
Types of data processed: Name and Surname, E-mail address, phone number, medical documents, Criminal record (Bodies), Summons, Sentences, Deeds of obligation, Legal deeds, Administrative deeds.
Not providing the data will make it impossible for the Controller to continue with the activities in question.
Storage terms for personal data categories:
Category: Common, Judicial, Particular
Storage term: Data processing will be kept for the time necessary to achieve the purposes described in the information notice. The data will be kept for 20 years from the date reported in the communication or in the last communication in the case of an exchange of correspondence, as well as the time necessary to assert legal rights.
RIGHTS OF THE DATA SUBJECT
(Arts. from 15 to 22 and from art. 13 of the GDPR)
Here below please find the rights the data subject may exercise:
Right of access: In accordance with art.15 of the GDPR the data subject has the right to request access to his/her personal data.
Right of rectification: In accordance with art.16 of the GDPR the data subject has the right to ask the controller to rectify his/her personal data.
Right of erasure: In accordance with art. 17 of the GDPR the data subject has the right to ask the controller to erase his/her personal data.
Right of restriction: In accordance with art.18 of the GDPR the data subject has the right to ask the controller to restrict the data concerning him/her.
Right to object: In accordance with art. 21 of the GDPR the data subject has the right to object to processing.
Right of portability: In accordance with art. 20 of the GDPR the data subject has the right to exercise its data portability right.
Additional notes: The data subject may also submit a complaint to the control body (for example the Privacy Authority).
AUTOMATED PROCESS
Is there an automated process? Processing is not based on an automated decision-making process.