Privacy notice for the website
This page describes the website management procedures with regard to the processing of the personal data of users who visit it.
This is a privacy notice issued pursuant to Article to those who interact with the company’s web services.
The notice is issued only for this website, and not for other websites that may be visited by users via a link.
The notice identifies certain minimum requirements for the collection of personal data online, and, in particular, the procedures, the time frames and the nature of the information that the data controllers must provide to users when the latter connect to a web page, regardless of the purposes of the connection.
THE “DATA CONTROLLER”
Following a visit to this website, data relating to identified or identifiable persons may be processed.
The “data controller” for this processing is Cattani S.p.A., in the person of its pro tempore legal representative.
LOCATION OF THE DATA PROCESSING
The data processing associated with the web services of this site takes place at the corporate headquarters, and is handled exclusively by technical staff classified as persons in charge of data processing, or by any persons in charge of occasional maintenance operations.
No data derived from the web service shall be communicated or disseminated.
Personal data provided by users who submit requests for informational material (newsletters, CD-ROMs, catalogues, price lists, answers to questions, documents, etc.) are used exclusively for the purposes of carrying out the service or performing the act requested.
TYPES OF DATA PROCESSED
The information systems and software procedures involved in the functioning of this website acquire, during the course of their normal operations, some personal data whose transmission is implicit in the use of internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but due to its very nature can, by means of processing and integration with data held by third parties, allow users to be identified.
This category includes the IP addresses or domain names of the computers used by the users to connect to the website, URI (Uniform Resource Identifier) form addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (done, error, etc.) and other parameters concerning the user’s operating system and computer environment.
These data are used with the sole purpose of obtaining anonymous statistical information concerning the use of the site and to check its correct operation, and are deleted immediately after being processed. These data can be used to ascertain responsibility in the case of hypothetical computer crimes to the detriment of the website. Without prejudice to this possibility, as things stand, data on web contacts are not kept for more than seven days.
Data supplied voluntarily by the user
The optional, explicit and voluntary dispatching of electronic mail to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, which is necessary in order to reply to requests, as well as any other personal data contained in the message.
Specific summary information to data subjects shall progressively be reported or displayed on web pages dedicated to particular services on request.
VOLUNTARY NATURE OF DATA PROVISION
Other than for browsing data, the user is free to choose whether or not to provide their personal data.
However, the refusal to provide personal data will make it impossible for the user to obtain anything they have requested.
DATA PROCESSING PROCEDURES
Personal data are processed by computerised means for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed in order to prevent the loss of data, unlawful or incorrect use and unauthorised access.
TRANSFER OF DATA TO THIRD COUNTRIES
Any transfer of personal data to a third country outside of the European Union or to an international organisation shall take place on the basis of an adequacy decision by the Commission or, in the case of transfers pursuant to Articles 46, 47 or 49, paragraph 2, of the EU Regulation, on the basis of appropriate and suitable guarantees.
RIGHTS OF THE DATA SUBJECT
The persons to whom the personal data refer have, at any time, the rights to access and rectification of the data, erasure, restriction of processing, objection to processing, and data portability; they also have the right to file a complaint with the supervisory Authority.
Requests should be addressed to the Data Controller or the Data Protection Officer, Mr Juri Torreggiani, whose office is located in Reggio Emilia, at Via Piccard no. 16/G, tel. 0522/30.11.69, fax 0522/38.79.96.
Privacy notice to customers and suppliers issued by Cattani S.p.A.
pursuant to Article 13 of EU Regulation 2016/679
This privacy notice is drawn up and issued pursuant to Article 13 of EU Regulation 2016/679 (also referred to hereinafter simply as the “EU Regulation”), which introduced significant regulatory changes.
This privacy notice therefore updates and replaces any previous versions issued.
In consideration of the above, it should be pointed out that:
1) as a result of the establishment of the commercial relations and during the course of the performance thereof, our company shall collect and process your personal data;
2) for the sake of clarity, we shall specify the following definitions given in the aforementioned EU Regulation:
Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
Pursuant to Article 13 of EU Regulation 2016/679, therefore,
that the collection and processing of your personal data shall be carried out by our company in accordance with the following:
a) purposes: the data shall be processed for the correct fulfilment of accounting, fiscal, commercial and technical requirements and for all corporate activities in general pertaining to the relations in place;
b) advertising purposes: the data may also be used, subject to your specific, explicit consent, to send advertising material/communications by post, email, phone, fax, SMS or similar means; after having expressed consent, you shall be entitled to object, at any time and free of charge, to the processing of your data for these purposes;
c) procedures: the data shall be processed using both paper and electronic/computerised/automated tools/means, in full compliance with the applicable legislation, in accordance with the principles of lawfulness and integrity, and in such a way as to protect your privacy;
d) optional provision of data: the provision of data is optional and not compulsory;
e) consequences of refusal: refusal to provide your data or total objection to the processing of your data may make it impossible to pursue any commercial or other relationship with our company; denial of permission to use your data to send advertising material/communications, however, shall not have any consequences on any present or future relationship between us;
f) persons or categories of persons (recipients) to whom the data may be communicated or disseminated: the data may be communicated to third parties only in order to fulfil legal or contractual obligations. The data shall not under any circumstances be disseminated;
g) persons authorised to process the data: the data shall be processed exclusively by company employees in the administrative and commercial departments who are specifically authorised to do so;
h) automated decision-making processes (e.g. profiling): no automated decision-making processes are used to process your data;
i) rights of the data subject: you have all the rights enshrined in the EU Regulation, such as the rights to access and rectification of the data, erasure, restriction of processing, objection to processing, and data portability. You also have the right to file a complaint with the supervisory Authority;
j) transfer of data to third countries: any transfer of personal data to a third country outside of the European Union or to an international organisation shall take place on the basis of an adequacy decision by the Commission or, in the case of transfers pursuant to Articles 46, 47 or 49, paragraph 2, of the EU Regulation, on the basis of appropriate and suitable guarantees;
k) data storage period: the data shall be stored for the period of time strictly necessary to respond to the data subject’s requests or in accordance with the regulations in force or any contractual clauses;
l) data controller: the data controller is Cattani S.p.A., whose registered offices are in Parma (PR), at Via Natta no. 6/A, in the person of its pro tempore legal representative;
m) data protection officer: the data protection officer is Mr Juri Torreggiani, whose office is located in Reggio Emilia, at Via Piccard no. 16/G, tel. 0522/30.11.69, fax 0522/38.79.96: any request for clarification or information can be addressed to him.
Parma (PR), 2 October 2018
The data controller