Privacy policy
Information on the processing of personal data (ex art.13 GDPR)
IDRAL SPA a socio unico, with registered office in via ISEI 8/10 28010 GARGALLO (NO), P.IVA 00124610031 as Data Controller, informs the interested parties that their personal data will be processed in compliance with the protection principles established by the EU Regulation no. 2016/679 (GDPR).
Purposes of the processing of collected data
The personal data of the data subject are collected to enable the Data Controller to provide its services and/or fulfil contractual obligations.
Therefore, the data processing has the following purposes:
- to enable the use of any services requested
- process a contact request
- to fulfil legal obligations related to business relations
- to fulfil tax or accounting obligations;
- marketing (statistical analysis and market surveys);
- customer satisfaction checks on products.
Any refusal to consent to the processing of data will make it impossible to use the service requested by the data subject.
Only with your specific and separate consent shall personal data be used for the following other purposes
- to send e-mail newsletters regarding promotions and commercial updates, presentations of new products and technical solutions, invitations to events and trade fairs attended by the Data Controller.
Processing methods
The Data Controller adopts appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of personal data. The processing is carried out by means of computer and/or telematic instruments and/or on paper, with organisational methods and logic strictly related to the purposes.
Legal basis
The provision of data is compulsory for all that is required by legal and contractual obligations and therefore any refusal to provide such data in whole or in part may make it impossible to provide the services requested.
The company processes optional user data on the basis of consent, i.e. through explicit approval of this privacy policy and in relation to the methods and purposes described below.
Categories of recipients
The following categories of authorised persons and/or external data processors, who have been identified in writing and to whom specific written instructions regarding data processing have been provided, may also become aware of the data
- authorised employees;
- designated external data processors carrying out outsourcing activities on behalf of the Data Controller (hosting providers, IT companies, communication agencies).
The updated list of internal appointees and external processors can always be requested from the Data Controller.
Data communication
Without the express consent of the data subject, the Data Controller may disclose your data for the above-mentioned purposes to Supervisory Bodies, Judicial Authorities, as well as to all other parties to whom disclosure is required by law in order to fulfil the above-mentioned purposes.
Your data will not be disclosed.
Period of storage
Data are processed and stored for the time required by the purposes for which they were collected:
- the data required for contractual and accounting purposes are kept for the time required to carry out the business and accounting relationship;
- the data of those who do not purchase or use products/services, even though they have had previous contact with representatives of the company, will be immediately deleted or processed anonymously, if their retention is not otherwise justified, unless the informed consent of the persons concerned has been validly acquired for a subsequent commercial promotion or market research activity.
The data retention period is: 10 years after termination of the relationship.
Rights of the data subject
Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the data subject may, in the manner and within the limits provided for by current legislation, exercise the following rights:
- request confirmation of the existence of personal data concerning him/her (right of access);
- know its origin
- receive intelligible communication of the data
- obtain information on the logic, methods and purposes of the processing;
- request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including data no longer necessary for the purposes for which they were collected;
- in cases of processing based on consent, to receive one's own data provided to the controller, in a structured and machine-readable form and in a format commonly used by an electronic device
- the right to lodge a complaint with the supervisory authority.
Ways of exercising rights
You may exercise your rights at any time by sending
- a registered letter with return receipt to IDRAL SPA a socio unico, Via Isei 8/10,28010 GARGALLO (NO);
- an e-mail to privacy@idral.it
Owner
The Data Controller is IDRAL SPA a socio unico with registered office in Via Isei 8/10, 28010 GARGALLO (NO).
Amendments to this Information Notice
This Information Notice may be subject to variations. We therefore recommend that you check this Information Notice regularly and refer to the most updated version.