INFORMATION ON PERSONAL DATA PROCESSING

  1. Identity and contact of the Controller

This information on personal data processing is given in accordance with Regulation (EU)/2016/679 (hereinafter, “GDPR”) and concerns the processing of personal data performed by Pellini SpA, in via Fusari, 19, 26845, Codogno (LO), registered email pellini@legalmail.it, Ph. +39 0377 466411, Fax +39 0377 436001 (hereinafter, the “Controller”).

Being the Controller established in the Italian territory, no representative has been appointed.

  1. Purposes and legal basis of the processing, consent of the data subject and consequences of a lack of consent

The processing of personal data of data subjects is carried out to guarantee the correct functioning of the application. The application is used for windows controls and different automated functionalities. Download is entirely optional and user may decide to disinstall it or modify the given authorizations at any time, although it may compromise the correct functioning of the application. Without such consent, it will not be possible to create any user profile, hence the use of the application. 

  1. Method of processing data and storage

The personal data will be processed with CRM software and automated logics as well as other IT systems and paper-based systems.

  1. Method of consent expression

The consent to the processing of personal data may be expressed by flagging a specific flagbox upon registration.

  1. Source from which the personal data originate

Will be processed only data provided in compliance with this privacy notice. Data collected from public sources will be not processed.

  1. Recipients or categories of recipients of the data subject’s personal data

The following subjects shall be the recipients of the data subject’s personal data:

  • Companies belonging to the information society, such as those providing web hosting services;
  • Audit companies
  • Agents acting on behalf of the Controller;
  1. Categories of personal data

The Controller will process only personal data from the data subject. There will be no handling of special categories of personal data ex Article 9 of the GDPR.

  1. Transfer of personal data

The Controller may intend to transfer personal data to a third country or an international organization, such as:

  • Communication agencies conducting activities on behalf of the Controller;
  • Companies offering information society services, including, in particular, those offering hosting services;
  • Service providers of the communication company.

The transfer of personal data to the aforesaid subjects is subject to an adequacy decision made by the European Commission after deciding that the third country or one or more specified sectors within that third country, or the international organization in question, ensures an adequate level of protection of personal data. However, if the Controller deems it appropriate to proceed with the transfer of personal data despite the lack of any adequacy decisions, he reserves himself the right to conclude separate agreements with those subjects, requiring them to adopt adequate security measures to safeguard the transferred personal data. Google Inc., in particular, is contractually bound to ensure the appropriate protection of the rights of the person concerned. Personal data of the data subject may be transferred to the United States of America. To obtain a copy of the transferred personal data or to be informed on where personal data have been transferred to, the data subject shall send the Controller a written request to the addressesinfo@pellini.net
 

  1. Personal data retention period

Personal data are processed until their erasure is requested.  The Controller reserves the right, in any case, to request the data subject to renew his/her consent to the processing and/or to verify the consents already expressed.

  1. Data subject’s rights

10.1 Right to object

The data subject has the right to object at any time on grounds relating to the data subject’s particular situation, to the processing of personal data concerning the data subject pursuant to Article 6, sub-section 1, letter (e) or (f) of the GDPR, including profiling on the basis of these provisions. The Controller shall refrain from any further processing of the personal data unless it proves that there are compelling legitimate grounds for the processing which take precedence over the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of a right in court. If personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data carried out for such purposes, including profiling to the extent that it is related to such direct marketing.

If you object on the processing for direct marketing purposes, your personal data shall no longer be processed for such purposes. It is specified that the right of the data subject to object on the processing of his/her personal data for the aforesaid purposes may be exercised even partially, i.e. by opposing, for example, only on sending promotional communications by automated and/or digital means, or on sending paper communications and/or receiving telephone communications.

Where personal data are processed for scientific or historical research or statistical purposes in accordance with Article 89, paragraph 1 of the GDPR, the data subject has the right to object on the processing of his/her personal data for reasons related to his/her particular situation, unless such processing is necessary for the performance of a task in the public interest.

10.2 Other rights

The Controller also wishes to inform the data subjects of the existence of the following rights:


Right to access: the data subject has the right to obtain from the Controller confirmation as to whether or not personal data concerning the data subject are being processed and, if so, to obtain access to the personal data and specific information, in accordance with article 15 of the GDPR;


Right to rectification: the data subject has the right to obtain from the Controller the rectification of inaccurate personal data concerning the data subject without undue delay. Taking into account the processing purposes, the data subject has the right to obtain supplementing of incomplete personal data, including by providing a supplementary statement, in accordance with art. 16 of the GDPR;


Right to erasure of data, including the right to revoke consent: the data subject has the right to obtain from the Controller the erasure of the personal data concerning the data subject without undue delay and the Controller has the obligation to erase the personal data without undue delay, or to revoke consent, if the reasons set out in art. 17 of the GDPR exists. With regard to the right to revocation, the data subject also has the right to revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to revocation;


Right to restriction of processing: the data subject has the right to obtain from the Controller the restriction of processing when the conditions set out in art. 18 of the GDPR exist;


Right to data portability: the data subject has the right to receive in a structured format, commonly used and readable by automatic devices, the personal data concerning the data subject provided to the Controller and has the right to send such data to another controller without any impediment by the Controller in the cases and at the conditions specified in art.20 of the GDPR;


Contractor's right to object on commercial communications: the contractor has the right to object at any time, free of charge, on the receipt of commercial communications.
 

  1. Exercising rights

The applications to exercise the rights indicated in this privacy notice, including, in particular, the right to erasure and the right to object, must be addressed directly to the Controller at the e-mail address: info@pellini.net. Alternatively, such rights can be exercised by sending a registered letter with recorded delivery to Via Angelo Fusari 19, 26845, Codogno (LO), Italia.

  1. Accessibility of privacy notice

The privacy notice is accessible on our website https://www.pellini.net/en/who-we-are/qualities-and-patents/certifications/information-on-personal-data-processing, and c/o the Controller. If so expressly requested, the information can also be provided orally, as long as the identity of the applicant is proven, by means of a phone call request to the addresses of the Controller.

  1. Contact details of the data protection officer

The Controller did not appoint a data protection officer.