Privacy policy
GENERAL INFORMATION ON THE PROCESSING OF PERSONAL DATA
This privacy statement pursuant to art. 13 EU Reg 679/2016 ("GDPR") is provided by the data controller Marcato S.p.A. (T.C.: 00729930289 ) with registered office in Campodarsego (PD), via Rossignolo n. 12, contactable at email: privacy@marcato.it
This document may be subject to updates.
PROCESSING, LEGAL BASIS AND PURPOSE and RETENTION TIME.
|
Purpose of processing |
Data subject and data processed |
legal basis |
nature of provision |
|
Provision of services under the customer/user contract (sale of products) and related tasks |
Natural persons consumers: personal, contact, residence, payment data |
-performance of a contract that the data subject is party to or performance of pre-contractual measures taken at the data subject's request
|
compulsory: provision is necessary to provide and manage the requested service
|
|
Administrative and warehouse accounting requirements |
- fulfilment of legal obligations
|
||
|
Sending newsletters and commercial communications |
Natural persons: email address |
Express consent |
optional |
|
Customer profiling |
Natural persons consumers: personal data, contact data, preference data |
Express Consent (see cookies policy) |
optional |
|
Registration on the site |
Natural persons consumers: personal, contact, residence, payment data |
-performance of a contract that the data subject is party to or performance of pre-contractual measures taken at the data subject's request |
optional |
|
Filling in contact forms on the site ("request information, contact information, work with us") |
Natural persons users: identification data, contact data, any information on work experience and education (if applying for jobs) |
-performance of a contract that the data subject is party to or performance of pre-contractual measures taken at the data subject's request |
optional |
We inform you that in any event, pursuant to the provisions of article 130 paragraph 4 of Legislative Decree 196/2003, the e-mail addresses provided by customers in the context of the sale of a service may be used by the Data Controller for the purpose of promoting by e-mail the sale of products similar to those covered by the business relationship already entered into. The customer may at any time request the suspension of the sending of such material by using the email of the Data Controller indicated or by using the appropriate link included in the received communications.
Data will be stored for 10 years, as required by law, in connection with tax and accounting obligations. Any data collected via cookies - if activated by the user - are stored for the time indicated in the cookie policy on the site. The data of job applicants will be stored for two years.
MINORS
This site does not request data from minors under the age of 18: sales transactions may only be concluded by persons of legal age.
PROCESSING METHODS
The processing of data for each of the above purposes will be carried out with the support of paper, computer or telematic means, in any case suitable to guarantee the security and confidentiality of the relative processing.
The data collected (limited to personal data) may be communicated to non-EU countries, for the above-mentioned purposes: in this case, the Data Controller undertakes to ensure adequate levels of protection and safeguards in accordance with the applicable rules.
The data controller undertakes to observe specific security measures to prevent the loss of data, unlawful or incorrect use and unauthorised access, in full compliance with the law and regulations.
SUBJECTS INVOLVED IN PROCESSING
The data collected may be processed, exclusively for the purposes indicated, by staff of the Data Controller or by third parties such as:
- suppliers of the Controller where communication is necessary for the performance of the service provided (e.g. couriers);
- companies that provide computer system maintenance services, maintenance and management of the website or company management system;
- professional firms, companies providing assistance and consultancy to the Controller (business partners, accountant, labour consultant, ...)
- Social security, welfare and insurance institutions, the financial administration, other public bodies that may be authorised, within the limits of legislative, regulatory and contractual provisions
The updated list of all data processors can be obtained from the Data Controller.
THE RIGHTS OF THE DATA SUBJECTS
|
RIGHT |
DESCRIPTION |
|
Right to withdraw consent (art. 13 par. II lett. A and art. 9 par. II lett. A) |
You have the right to revoke your consent at any time for all those processing operations whose legitimacy require your consent, as set out in the above table of purposes. In particular, the withdrawal of consent applies to processing for image capture and publication in the portal. Withdrawal should be sent to the Data Controller - commissioning institute or association, which has undertaken to communicate the withdrawal to Simens Withdrawal of consent does not affect the lawfulness of previous processing.
|
|
Right of access to data (art. 15) |
You may request (a) the purposes of processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations (d) where possible, the period for which the personal data are to be stored or, if this is not possible, the criteria used to determine that period; (e) the existence of the right of the data subject to request from the controller the rectification or erasure of personal data concerning him or her or to object to the processing of personal data concerning him or her (f) the right to lodge a complaint to a supervisory authority; (g) where the data are not collected from the data subject, all available information as to their source; (h) the existence of an automated decision making process, including profiling as referred to in article 22, paragraphs 1 and 4, and, at least in such cases, meaningful information on the logic used, as well as the importance and the envisaged consequences of such processing for the data subject. You have the right to request a copy of the personal data being processed |
|
Right of rectification (art. 16) |
You have the right to request the rectification of inaccurate personal data concerning you and to obtain the integration of incomplete personal data. |
|
Right to be forgotten (art. 17) |
You have the right to obtain from the data controller the erasure of personal data concerning you if the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you withdraw your consent, if there is no overriding legitimate reason to proceed with profiling processing, if the data have been processed unlawfully, if there is a legal obligation to erase the data; if the data relate to web services to minors without consent. Deletion may take place unless the right to freedom of expression and information is overriding, they are retained for the fulfilment of a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the health sector, for archiving in the public interest, for scientific or historical research or statistical purposes or for the establishment, exercise or defence of a legal claim. |
|
Right to restriction of processing (art. 18) |
You have the right to obtain from the controller the restriction of processing when you have disputed the accuracy of your personal data (for the period necessary for the controller to verify the accuracy of such personal data) or if the processing is unlawful, but you object to the deletion of your personal data and instead request that their use be restricted or if they are necessary for the establishment, exercise or defence of a legal claim, whereas the controller no longer needs them. |
|
Right to portability (art. 20) |
You have the right to receive in a structured, commonly used and machine-readable format the personal data concerning you that you have provided to us and you have the right to transmit them to another if the processing is based on consent, on contract and if the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority and such transmission does not harm the right of a third party. |
|
Right to appeal to the Data Protection Authority |
|
Interested parties may exercise their rights by writing to the data controller by email using the specially drafted form.
Rev. 17 October 2024
FORM FOR EXERCISING THE RIGHTS OF THE DATA SUBJECT
To the attention of
Marcato S.p.A.
via Rossignolo, 12
35011 – Campodarsego (PD)
by e-mail to privacy@marcato.it
Subject: Exercise of data subject's rights pursuant to articles 15 as amended of EU Reg. 20167679 on Personal Data Protection.
I, the undersigned:
|
NAME
|
|
|
LAST NAME
|
|
|
DATE OF BIRTH
|
|
|
TAX NUMBER
|
|
|
Email that the reply should be sent to
|
|
|
Contact telephone
|
|
IF the application is made IN THE NAME ON BEHALF OF A THIRD PARTY, please indicate the NAME OF THE INTERESTED PARTY that the data refers to.
NAME________________________
LAST NAME_________________________
DATE OF BIRTH___________________
TAX NUMBER____________________
(attach POWER OF ATTORNEY)
ASK
In relation to the personal data processed by you, to exercise the rights selected in column 3 of the following table
|
Right |
Description |
SELECT the RIGHT you wish to activate, following the instructions |
|
Right to withdraw consent |
You have the right to revoke your consent at any time for all those processing operations whose legitimacy require your consent. Withdrawal of consent does not affect the lawfulness of the previous processing, nor does it affect the retention of data whose retention is mandatory. |
Specify for which treatment/purpose: (e.g. indicate the service for which you wish to exercise withdrawal of consent)....................................................................... ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. |
|
Right of access to data (art. 15) |
You may request (a) the purposes of processing; (b) the categories of personal data concerned; (c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations (d) where possible, the period for which the personal data are to be stored or, if this is not possible, the criteria used to determine that period; (e) the existence of the right of the data subject to request from the controller the rectification or erasure of personal data concerning him or her or to object to the processing of personal data concerning him or her (f) the right to lodge a complaint to a supervisory authority; (g) where the data are not collected from the data subject, all available information as to their source; (h) the existence of an automated decision making process, including profiling as referred to in article 22, paragraphs 1 and 4, and, at least in such cases, meaningful information on the logic used, as well as the importance and the envisaged consequences of such processing for the data subject. You have the right to request a copy of the personal data being processed. |
Specify what information you require, indicating the corresponding letter: (e.g. indicate whether you wish to know for what purpose the data was processed for a specific service, whether your data was disclosed to third parties) ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ………………………………………………………………..
|
|
Right of rectification (art. 16) |
You have the right to request the rectification of inaccurate personal data concerning you and to obtain the integration of incomplete personal data. |
Specify which information requires rectification or supplementation ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. |
|
Right to be forgotten (art. 17) |
You have the right to obtain from the data controller the erasure of personal data concerning you if the data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you withdraw your consent, if there is no overriding legitimate reason to proceed with profiling processing, if the data have been processed unlawfully, if there is a legal obligation to erase the data; if the data relate to web services to minors without consent. Deletion may take place unless the right to freedom of expression and information is overriding, they are retained for the fulfilment of a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the health sector, for archiving in the public interest, for scientific or historical research or statistical purposes or for the establishment, exercise or defence of a legal claim. |
If requested, please specify which data and for which service. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. |
|
Right to restriction of processing (art. 18) |
You have the right to obtain from the controller the restriction of processing when you have disputed the accuracy of your personal data (for the period necessary for the controller to verify the accuracy of such personal data) or if the processing is unlawful, but you object to the deletion of your personal data and instead request that their use be restricted or if they are necessary for the establishment, exercise or defence of a legal claim, whereas the controller no longer needs them. |
If requested, please specify for which data and the reasons. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. |
|
Right to portability (art. 20) |
You have the right to receive in a structured, commonly used and machine-readable format the personal data concerning you that you have provided to us and you have the right to transmit them to another if the processing is based on consent, on contract and if the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority and such transmission does not harm the right of a third party. |
In the event of a request, please specify for which data, relating to which service and the reasons. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. ……………………………………………………………….. |
I am informed that the data indicated in this form are used exclusively for the purpose of responding to requests and will be retained in accordance with the terms of the law in order to ensure legal defence.
Date__________________
SIGNATURE________________________
I enclose
- copy of Identity Document
- any power of attorney if the application is sent on behalf of a third party
