Disclosure in accordance with Article 13 of the European Regulation. On data protection 679/2016 and consent Pursuant to Article 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR), and in relation to your personal data of which the Company Ormac S.p.A. ("ORMAC") will have access to, we inform you of the following: we will make your personal data available to you. ("ORMAC") will become available, we inform you as follows:
  1. GENERAL INFORMATION
This information describes the types of personal data of individuals ("Data Subjects") who come into contact with the company ORMAC, when signing an order for goods, a supply/assistance/collaboration contract, an employment or self-employment relationship, or other type of professional collaboration, as well as the methods for processing the data transmitted by the Data Subject. This information is provided pursuant to Article 13 of Regulation (EU) 2016/679 - General Data Protection Regulation (hereinafter "GDPR").
  1. THE DATA CONTROLLER
The Data Controller is ORMAC S.p.A., C.F./P.IVA 00186510186, with headquarters in Vigevano - Corso P. Togliatti n. 24; tel +39 0381 310796 - fax +39 0381 325023 - info@ormac.it. You may contact the Data Controller at any time at the addresses indicated above to obtain an updated list of the Data Processors, the subjects to whom we communicate data and to exercise the rights recognised to the Data Subject.
  1. MODE OF DATA COLLECTION
We process the data you voluntarily provide us with by filling in electronic or paper forms, through correspondence or at meetings.
  1. TYPES OF DATA PROCESSED AND MANDATORY OR OPTIONAL NATURE OF PROCESSING
The personal data normally requested are biographical and contact data. We process data such as first name, last name, contact details, company name, tax code, address, telephone number, mobile number, e-mail, PEC, bank and payment references, as well as, where necessary for the performance of the relationship. The optional, explicit and voluntary sending of electronic mail to the addresses of the Company entails the subsequent acquisition of the sender's address, necessary to respond to requests, as well as any other personal data included in the message. No sensitive data are processed pursuant to Art. 9 Privacy Regulations, with the exception of membership in trade unions and associations for employees, which can be inferred from the information necessary for personnel management. The computer systems and software procedures responsible for the operation of Ormac's web platforms, in the course of their normal operation, use some personal data whose transmission is implicit in the use of Internet communication protocols. This information is not collected to be associated with identified interested parties, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment.
  1. PURPOSE OF PROCESSING
Ormac processes data for the following purposes:
  • execution and management of the contractual and supply relationship;
  • management of purchases of our products and/or provision of sales and after-sales services;
  • administrative, personnel management, accounting and invoicing activities;
  • Fulfilment of related obligations under laws, regulations and EU legislation (including anti-money laundering legislation);
  • exercise of rights in court.
The provision of data for the above-mentioned purposes is necessary and refusal to provide such data would prevent Ormac from carrying out the contractual relationship.
  1. LEGAL BASIS OF PROCESSING
The processing of personal data is based on the following legal bases:
  • is necessary to fulfil a legal obligation arising from a law, regulation or Community legislation incumbent on ORMAC;
  • is necessary for the performance of a contract to which the data subject is party or the implementation of pre-contractual measures taken at the request of the data subject;
  • is based on express consent.
  1. PROCESSING METHODS AND STORAGE
Your/your Personal Data are processed by means of both paper and computer files (including portable devices). Your/Personal Data are not subject to any fully automated decision-making process. In all cases, the data will be processed and kept in compliance with legislative requirements and required security measures for the period of time necessary to pursue the purposes described in this notice. The retention period for the data collected is 10 years, unless the Data Controller is subject to legal or regulatory retention obligations for a longer period. Our designated staff (e.g., staff of the Administration Offices and IT consultant) and the Manager have access to data on a need-to-know basis. We disclose data to public entities, banks, third parties involved in corporate and extraordinary transactions, legitimate recipients in accordance with the law, as well as any additional third parties exclusively for needs related to the purposes described above. We also transfer the data to consultants, including in associated form, service providers of a professional and technical nature, which are functional for the above purposes as external data processors, providing only the data necessary for their respective functions. Those receiving the data process them for the above purposes in accordance with applicable regulations.
  1. RIGHTS OF THE PERSONS CONCERNED
8.1 RIGHTS OF ACCESS, CANCELLATION, LIMITATION, AND PORTABILITY Data subjects are entitled to the rights set out in Articles 15 to 20 of the GDPR, which may be exercised by means of requests addressed to the Controller's physical address or by email to info@ormac.it. By way of example, each data subject may:
  1. obtain confirmation as to whether or not personal data relating to him are being processed;
  2. where processing is taking place, obtain access to personal data and information relating to the processing and request a copy of the personal data;
  3. obtain the rectification of inaccurate personal data and the integration of incomplete personal data;
  4. obtain, if one of the conditions set out in Article 17 of the GDPR applies, the deletion of personal data concerning him/her;
  5. obtain, in the cases provided for in Article 18 of the GDPR, the limitation of processing;
  6. receive the personal data concerning him in a structured, commonly used and machine-readable format and request their transmission to another data controller, if technically feasible.
8.2 RIGHT OF OBJECTION Each data subject has the right to object at any time to the processing of his or her personal data carried out in pursuit of a legitimate interest of the Data Controller. In the event of an objection, his or her personal data will no longer be processed, unless there are legitimate grounds for processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a legal claim. 8.3 RIGHT TO WITHDRAW CONSENT Where consent is required for the processing of personal data, each data subject may, likewise, revoke consent already given at any time. Consent may be revoked, by emailing info@ormac.it. 8.4 RIGHT TO FILE A COMPLAINT WITH THE GUARANTOR Any data subject may lodge a complaint with the Garante per la Protezione dei Dati Personali if he or she believes that his or her rights under the GDPR have been violated, in the manner indicated on the Garante's website, accessible at: www.garanteprivacy.it. The exercise of the data subject's rights is free of charge.
  1. UPDATING OF INFORMATION
This information is constantly updated to make it accurate and compliant with current regulations.