GENERAL NOTICE ON THE TREATMENT OF PERSONAL DETAILS
This page describes the methods used by Art-Eco Srl for processing personal details.
This notice is issued pursuant to articles 13 and 14 of EU Regulation 2016/679 – GDPR – to anyone interacting with Art-Eco srl in the ways described below.
THIS DOCUMENT MAY BE UPDATED AS NEEDED. SPECIFIC INFORMATION AND REQUESTS FOR CONSENT WILL BE MADE AVAILABLE IN THE EVENT OF FURTHER PROCESSING ACTIVITIES OTHER THAN THOSE REGULATED BELOW.
1. DATA CONTROLLER
Art-Eco srl, with registered office in Via Aldo Moro 24, Rossano Veneto (VI) – VAT no. 03828040240
2. PURPOSE OF THE PROCESSING, CONSEQUENCES OF FAILURE TO PROVIDE INFORMATION AND NATURE OF THE PROVISION OF INFORMATION
1.1 PROVISION OF SERVICES
The Data Controller processes the data of customers and their collaborators/employees (personal, contact, residence data) as well as of any persons communicating by e-mail or otherwise, in order to provide and manage the requested service and assess customer satisfaction levels.
The Data Controller processes the data of customers who have requested the installation of the ECool-i software (personal data, operating data of the machine on which the device is installed, data of the environment in which the device is installed or to which it is connected) in order to provide and manage the requested system remote control service through ECool-i.
The Data Controller processes the data of customers who have requested the installation of the ECool-i software (master data, email) in order to provide and manage the system operation alert service through ECool-i.
The legal bases for data processing are:
- The execution of a contract of which the Data Subject is part, or the implementation of measures preliminary to the contract on request of the same.
- Pursuit of the legitimate interest of the Data Controller.
The provision of data is mandatory, as it is necessary in order to be able to deliver and manage the service requested
2.2 INTERNAL ORGANISATION
The Data Controller processes the data of suppliers and their collaborators/employees (personal data, contact details) in order to manage the purchase of goods and services and related practices, as well as to evaluate the supplier’s performance.
The Data Controller processes the data of suppliers and customers (personal data, bank details, …) in order to manage the company’s accounts and comply with mandatory regulations.
The legal bases for data processing are:
- The execution of a contract of which the Data Subject is part, or the implementation of measures preliminary to the contract on request of the same.
- The fulfilment of a legal obligation to which the Data Controller must comply.
The provision of data is mandatory, as it is necessary in order to be able to deliver and manage the service requested
2.3 ASSESSMENT OF RECEIVED APPLICATIONS
The Data Controller processes the data of potential collaborators/employees (personal data, contact data, residence data, communicated data) in order to evaluate the candidate with a view to recruitment/collaboration.
The legal bases for data processing are:
- The execution of a contract of which the Data Subject is part, or the implementation of measures preliminary to the contract on request of the same.
- For any particular data disclosed: processing of personal data clearly made public by the party concerned.
The provision of data is optional but failure to provide the data may make it impossible to assess the application received.
2.4 PROMOTIONAL, COMMERCIAL AND MARKETING ACTIVITIES
The Data Controller processes the data of potential customers (personal data, contact data, residence data, communicated data) for the purpose of sending or communicating to them its own commercial information regarding promotions, discounts and events, by e-mail, telephone or other means.
The legal basis for data processing is:
- Expressed consent of the Data Subject.
The provision of data for this purpose is optional but failure to provide the data may make it impossible for the Data Subject to obtain other services by the Data Controller.
2.4.1 DISPENSATION REGARDING THE USE OF CUSTOMER E-MAILS
We inform you that in any case, in accordance with the provisions of Article 130, paragraph 4 of Italian Legislative Decree 196/2003, the e-mail addresses provided by customers in the context of the sale of a service may be used by the Data Controller for the purpose of selling services similar to those covered by the business relationship already established. The customer may request at any time the stop of the forwarding of such material by contacting Art-Eco srl at the e-mail address indicated or using the appropriate link in the communications themselves.
3. DATA PROCESSING PROCEDURE
The processing of data for each of the purposes above will be carried out using paper, computerised or telematic supports, in any case capable of guaranteeing the safety and the confidentiality of the processing.
The data collected (limited to personal data) may be communicated to non-EU countries for the above-mentioned purposes. In this case, Art-Eco srl undertakes to guarantee adequate levels of protection and safeguard in accordance with the applicable regulations.
The Data Controller undertakes to observe specific security measures to prevent loss of data, unlawful or incorrect use and unauthorised access, in full compliance with current laws and regulations.
Except for legal obligations, the data are processed for the period necessary for fulfilling the object for which they were collected, or until withdrawal of the consent for their processing, if subject to the same. However, Art-Eco may continue to retain them for a longer period in order to be able to handle any disputes relating to the relationship established.
4. DATA PROCESSORS
The data collected may be processed, only for the purposes specified, by Art-Eco srl personnel or by third parties such as:
- Customers and/or suppliers of the Data Controller, where communication is necessary for the provision of the service (e.g. fitters, couriers);
- Professional studios, companies providing assistance and consultancy services to the Data Controller (business partners, accountants, labour consultants, companies providing computer system maintenance services …);
- Public bodies that may be authorised to do so, within the limits of the legal, regulatory and contractual provisions.
The updated list of all data processors may be requested from the Data Controller.
5. RIGHTS OF DATA SUBJECTS
The Data Subjects can assert their rights as expressed in articles 15 to 21 of EU Regulation 2016/679, in the manners established by Article 12 of EU Regulation 2016/679, and, by effect:
- Obtain access to personal data, their rectification or deletion, or restrictions on their processing, object to their processing, as well as obtain the right to data portability;
- Revoke consent, if the processing is based on Article 6, paragraph 1, letter a), at any time without jeopardising the lawfulness of the processing based on the consent given before revocation;
- Lodge a complaint with a supervisory authority.
Any such requests may be sent to the following e-mail address: info@art-eco.it; or posted to: Art-Eco srl, Via Aldo Moro 24, Rossano Veneto (VI).
information
