COMPLETE PERSONAL DATA PROTECTION STATEMENT

 

Statement in compliance with and for the purposes of articles 13 and 14 of EU Reg. 679/2016, and Italian decree N°. 101/2018 and subsequent amendments.

The company CED Costruzione Elettrica Desiana (hereafter also «the data controller»), VAT n°. IT 00718100969 – fiscal ID. 01573690151, based at Viale degli Artigiani 6 – 20832 Desio (MB) Italy, as Data Controller for the personal details that you choose to communicate to us, as per EU regulation 679/2016 – General Data Protection Regulation (GDPR), hereafter also «GDPR», acknowledges the importance of protecting personal data, and considers this protection to be one of the main objectives of its business. This data protection statement aims to give clear and complete information to users of the website www.ceditaly.it regarding the processing of their personal data and the use of automated tools for the collection of the same.

 

DATA CONTROLLER

The data controller for this website is CED, as defined above. Processing related with the site's web services takes place at CED's data centre, with registered office in Viale degli Artigiani 6 – 20832 Desio (MB), Italy, as well as on the premises of the data controller and on the data controller's devices. For any information pertaining to the processing of personal data by the data controller, including the list of data controllers who process the data, please write to this address: info@ceditaly.it.

We employ the services of outside companies and persons to perform certain activities on our behalf, such as fulfilling orders or services, sending printed matter and emails, data analysis, providing marketing support and research results, and processing payments. These third parties only have access to the personal data necessary for the fulfilment of their duties, and are not permitted to process the data which comes into their possession for any other purposes. Furthermore, these third parties are obliged to process the personal data which comes into their possession in compliance with this data protection statement, and with all relevant data protection standards.

 

DATA CONTROLLER

Furthermore, the data controller is identified in the person of Mr. Matteo Frighi.

 

PERSONAL DATA SUBJECT TO PROCESSING

The data collected using a variety of channels is as follows:

• Contact details – information regarding name, address, telephone number, e-mail address.

• Other personal data – information that you choose to supply to us, such as your date of birth, qualifications or professional status.

• Use of the website and of communications – information regarding the way in which you use the website, open or forward communications from the Data controller, including information gathered using cookies and other tracking systems.

The data controller processes your personal data if you contact us directly, via our website or e-mail, to request information on our services. Before providing personal data on someone else's behalf, it is your responsibility to ensure that the person in question has read this data protection statement. If you are under 16 years of age, please do not give us any personal information.

 

PURPOSE OF PROCESSING

Your personal data will be processed for the following purposes:

• Fulfilment of your requests – in order to fulfil your requests for information, quotes, clarification, requests for contact or participation in events open to the public. The premise for processing is the implementation of pre-contractual measures.

• Compliance with juridically binding requests for your personal data and defence in court of our own rights – in order to fulfil legal obligations, regulations or the provisions of judicial authorities, as well as in defence of our rights in legal proceedings. The premise is the fulfilment of legal obligations or orders from authorities, as well as the legitimate interests of the data controller.

• Statistical research/analysis – to verify the good functioning of the website, traffic levels, usability and browsing experience. In this case any personal data gathered is in anonymous form, and cannot be traced back to any individual.

 

DATA STORAGE

The data controller stores your personal data only for the time strictly necessary to fulfil the purposes for which it was collected, or for any other legitimate related purpose.

Implementation of contractual obligations: data processed in the fulfilment of any contractual obligation towards you may be stored for the duration of the contract, and for 10 years from the end of the tax year subsequent to the year in question, in readiness for any fiscal checks and/or disputes.

In case of disputes: where the need arises to defend ourselves or to take action or to make claims against you or any third parties, the data controller may store the personal data considered reasonable and necessary to process to these ends, for as long as this claim can be pursued.

 

DATA TRANSFER

The site may share some data collected with services located outside the European Union, in particular with Google, Twitter, Facebook and Microsoft (LinkedIn), using social plugins and the service of Google Analytics. This data transfer is authorized according to specific decisions made by the European Union and by the personal data protection authority, hence further consent is not required. The abovementioned companies guarantee their adhesion to the Privacy Shield.

 

YOUR RIGHTS

In compliance with the provision of the GDPR, you are entitled to exercise the following rights:

a. right of access – to obtain confirmation as to whether or not personal data concerning you are being processed, and, where that is the case, access to the personal data and, in particular, to information regarding: the purposes of the processing, the categories of personal data concerned, the envisaged period for which the personal data will be stored, and the recipients to whom the personal data may have been disclosed (article 15, GDPR);

b. right to rectification – to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you, and to have incomplete personal data completed (article 16, GDPR);

c. right to erasure – to obtain the erasure of personal data concerning you without undue delay on the grounds foreseen by the GDPR (article 17, GDPR);

d. right to restriction – to obtain from the controller restriction of processing, on the grounds foreseen by the GDPR (article 18, GDPR);

e. right to portability – to receive the personal data concerning you, which you have provided to a controller, in a commonly used and machine-readable format, and to transmit those data to another controller without hindrance, in the cases foreseen by the GDPR (article 20, GDPR);

f. right to object – to object to processing of personal data concerning you, unless the controller demonstrates compelling legitimate grounds for the processing to continue (article 21, GDPR);

g. right to withdraw consent at any time, without prejudice to the lawfulness of the processing based on the consent given prior to withdrawal;

h. Right to lodge a complaint with the supervisory authority – to lodge a complaint with the personal data protection authority, located in Piazza di Montecitorio n. 121, 00186, Rome, Italy.

You may at any time exercise your rights as stated above, by sending an email to this address: info@ceditaly.it

 

AMENDMENTS

This Data Protection Statement is in force from 25/05/2018. The data controller reserves the right to amend or update its contents, partially or completely, including in case of variations to relevant legislation. For this reason the data controller invites you to visit this section of the website on a regular basis, in order to remain informed of the latest version of the statement and, thus, of the data collected and how it is used.