Privacy Policy pursuant to Legislative Decree No. 196/2003 and Article 13 of Regulation No. 2016/679/EU
Dear user,
we would like to inform you that Legislative Decree no. 196/2003, as amended, and Regulation no. 2016/679/EU (hereinafter together the "applicable legislation"), regulate the protection of the fundamental rights and freedoms of natural persons (hereinafter the "Data Subject"), with regard to the processing of personal data.
Cefla S.c.,/B.U. Engineering, recognizing the importance of the protection of personal data processed and considering their protection as one of the main objectives of its activity, provides this information notice (hereinafter the "Notice"), in order to describe the methods of processing of personal data collected through its website (hereinafter the "Site").
1. Personal data controller
Name: Cefla S.c., in the person of the legal representative pro tempore.
Address: via Selice Provinciale n. 23/A, Imola (BO), 40026, Italy
Contact information
e-mail: privacy@cefla.it
Internal Privacy Contact Person - B.U. Engineering: Mr. Massimo Milani.
2. Type of data processed
As part of the use of the B.U. Engineering Site, the following data may be collected and processed:
I. common personal data (by way of example but not limited to: name, surname, address, tax code, telephone number, e-mail, contact details) provided by the data subject in order to register and/or access a restricted area or to receive a specific service;
II. browsing data (i.e. but not limited to: IP address, location - country -, information about the pages visited, access and browsing time on each page, clickstream analysis);
III. cookies (i.e., small text strings that can be sent and recorded on the user's computer by the websites visited, and then transmitted back to the same sites when the user visits them again. For further details, please refer to the Cookie Policy on the Site.
3. Legal basis, purpose of data processing and nature of providing data
Personal data collected may be processed for the following purposes:
(a) Service purposes
To execute a specific request of the data subject and/or provide a requested service;
and/or to enable the navigation and enjoyment of the services offered through the Site;
b) Statistical Purposes
to allow statistical research/analysis on aggregated or anonymous data, aimed at measuring the functioning of the Site, measuring traffic and assessing usability and interest;
c) Marketing Purposes
to allow the sending of informative, promotional and/or commercial mailing lists/newsletters related to Cefla S.c.'s products and activities;
and/or analyze behaviors, attitudes and propensities to consumption of the data subject, in order to improve products and services provided by Cefla S.c.
The processing operations put in place for service purposes are necessary for the fulfillment of contractual obligations and, therefore, do not require specific consent from the data subject.
The treatments put in place for statistical purposes are based on aggregate and/or anonymous data do not require specific consent.
Processings put in place for marketing purposes are carried out only with the specific consent of the data subject.
4. Scope of data circulation
Data may be communicated and processed:
- by employees and / or collaborators of Cefla S.c., belonging to the offices involved for the purposes set out as authorized to process;
- by agents, distributors and the entire sales network in general of Cefla S.c. or companies controlled by Cefla S.c., affiliated or otherwise belonging to the Cefla Group, in Italy, in the European Economic Area (EEA) or in countries not belonging to the EEA, by virtue of specific contractual obligations;
- by suppliers of Cefla S.c. such as, by way of example, suppliers of technological services, email marketing service, consultants and/or freelancers who provide assistance, advice or collaboration in accounting, administrative, legal, tax and financial matters and who have committed themselves to Cefla S.c. to security and confidentiality;
- by persons appointed/delegated by Cefla S.c. to carry out the activities or part of the activities related to the provision of sales and after-sales services;
- by jurisdictional authorities and/or public administration in the exercise of their institutional functions.
5. Transfer of data to EEA and non-EEA territory.
Exclusively for purposes related to the services requested and on an occasional basis, some data may be transferred outside the EEA territory, including through the inclusion of the same in databases managed by third party companies, operating on behalf of Cefla S.c.
Should it be necessary to transfer data to non-EEA territories, this will be done in compliance with the standard contractual clauses adopted by Cefla S.c., which are suitable to guarantee an adequate level of data protection and in compliance with the security and protection measures provided for by the applicable legislation on the protection of personal data.
6. Modalities and duration of processing
The processing of the personal data of the interested party will be carried out according to the principles of correctness, lawfulness and transparency, through manual, computerized and telematic tools with logics strictly related to the purposes of processing and, in any case, in such a way as to ensure the security and confidentiality of the data.
With reference to service purposes, personal data will be kept for the period strictly necessary for the related contractual fulfillment and in compliance with the legal terms for storage.
With reference to marketing purposes and unless consent is revoked by the data subject, personal data will be retained for the maximum period of 24 months starting from the date of provision of the same and, in any case, within the limits allowed by current legislation.
At the end of the data processing period, the data should be deleted, or permanently anonymized.
7. Rights of the data subject
The data subject may at any time exercise the following rights:
- access to his/her personal data;
- obtain confirmation of the existence or otherwise of personal data concerning him/her and its communication in intelligible form;
- obtain the rectification, integration, cancellation or restriction of the processing of personal data concerning him/her;
- object to the processing;
- exercise the right to data portability;
- revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation;
- file a complaint with the competent supervisory authority (Privacy Guarantor).
To exercise the above rights, report problems or request clarifications on the processing of personal data, the Interested Party may send a registered letter with return receipt to Cefla S.c.,/B.U. Engineering, Via Selice Provinciale, 23/A - 40026 - Imola (BO), Italy or write an e-mail to: privacy@cefla.it.
8. Links and other websites and social networks
Links to third party websites are provided for your convenience only. The interactions and consequent processing of personal data carried out by and on external platforms are to be considered governed by and subject exclusively to the privacy policies established by the relevant data controllers, i.e. the companies that manage the relevant websites and social networks.
9. Changes
This Policy is current as of February 12, 2021. If changes are introduced in the future, Cefla S.c. will give appropriate notice by publishing the updated version of the Policy on this Website.