Information on the processing of personal data in compliance with article 13 of the personal data protection Code (legislative decree 196/2003, from now on the “Code”) and article 13 of the European Regulations (GDPR 679/2016, from now on the “Regulations”) and any possible update.
- INFORMATION FOR CUSTOMERS/SUPPLIERS/USERS
EXTREMA S.R.L., in the person of its legal representative, with registered offices in Bagnolo San Vito (MN), Via dell’Industria 2, fiscal code and VAT number 01909470203, telephone number 0376 252443, dedicated e-mail address: firstname.lastname@example.org,
Informs You that it is entitled to the processing of the data considered personal in accordance with the Code and Regulations, acquired through the establishment and implementation of existing or future contractual relationships with You and\or with Your organisation and\or through operations (for example information request or quotations) on www.extrema.it (the “Site”) and concerns all personal data that EXTREMA S.R.L. collects and holds on its users, while it does not apply to the data collected from other websites visited by the user through links to external pages.
The expression “personal data” refers to any information concerning an individual, identified or identifiable, directly or indirectly, for example through an identification with name, identification number, data about the location, an on-line identification or through one or more characteristics of their physical, physiological, genetic, psychic, economical, cultural or social identity (art.4 Regulations).
Therefore, with honesty, lawfulness and transparency, EXTREMA S.R.L. provides the following information.
- Type of data processed
EXTREMA S.R.L. processes Your personal identifying data (name, surname, trade name, address, telephone number, e-mail address, bank details).
EXTREMA S.R.L. is not in possession of Your sensitive data (or specific data categories under art. 9 of the Regulations) or any biometric, genetic or legal data.
The data will be processed in compliance with the principles of purpose limitation, data minimisation, accuracy, relevance, non-redundancy and privacy protection.
- Purposes of the processing
Your data can be processed:
- in relation to pre-contract and contract needs and the fulfilment of the resulting legal, fiscal and accounting obligations,
- to allow an efficient management of service, financial and commercial relationships, or for administration needs related to orders, shipping, arrivals and invoices;
- to allow the subscription to specific additional services, such as newsletters for promotional offers and other information services.
The provision of data for the purposes indicated at points 1 and 2 is necessary to allow the implementation of the service required (for example a quotation) or for the establishment and implementation of the contract; therefore it is mandatory and refusing the consent to the Processing makes it impossible to perform the services required with regard to the purchase of goods and services.
EXTREMA S.R.L. will send You newsletters and commercial communications to the e-mail address you provided, only in case You have given Your consent. In any case, You will be able to dissent to receive communications from EXTREMA S.R.L. in any moment. Every commercial communication sent by EXTREMA S.R.L. will provide You the information and means necessary to the dissent.
Your data is not subject to automatic processing.
- Origin of personal data.
The personal data processed by EXTREMA S.R.L. are collected because provided directly by the person concerned.
Among the data provided directly by the person concerned are also all the personal data inserted on the Site (to browse, get in contact with the company, or any other reason) or that are provided to EXTREMA S.R.L. in any way. Examples of data provided directly by the person concerned are: name, address, telephone number, e-mail address.
- Processing method
The processing of data is performed through the operations indicated in article 4 Privacy Code and article 4 n.2) of the Regulations, and specifically: collection, record, organisation, storage, consultation, elaboration, modification, selection, extraction, comparison, use, interconnection, limitation, communication, cancellation and destruction of data.
The data are subject to paper, electronic and mixed processing.
- Retention period
The Controller will process the data for the time necessary to the implementation of the contract and for the fulfilment of further legal obligations or for administrative and accounting purposes. After that, for the sole purpose of storage, the data will be kept for 10 years starting from the termination of the contract, for any reason.
Moreover, the Controller will process the data for the time necessary to the elaboration of the request made through the website and for the fulfilment of further legal obligations or for administrative and accounting purposes. After that, for the sole purpose of storage, the data will be kept for 10 years (ordinary period of limitation).
The Controller will process the data collected for purposes 3 at point 2 (allow the subscription to specific additional services, such as newsletters for the communication of promotional offers) for 8 years from the collection, without prejudice to the possibility for the User to modify and/or revoke their will in any moment.
- Obligation to provide data
The provision of data is mandatory for the pursue of the purposes described at point 2, n. 1 and 2: Your non-provision of these data will make it impossible to implement or continue any pre-contractual or contractual relationship.
On the other hand, the provision of data for commercial communications and newsletters is completely discretionary. You will be able to modify your commercial consent in any moment, even after the implementation of the contractual relationship.
- Withdrawal of the consent to the processing of personal data
The personal data processed by the Controller are necessary for the purposes described at point 2, n.1 and 2. You have the right to withdraw Your consent in any moment, without prejudice to the lawfulness of the processing based on the consent given. In case of withdrawal of the consent previously given, or in case of opposition to the processing of personal data (art. 7 of the Code and 21 of the Regulations), the Controller will not be able to continue the contractual relationship; the withdrawal will therefore be the cause of termination of the contract starting from the date of effectiveness of the withdrawal.
You can also modify the consent given for the reception of commercial communications and newsletters as specified at point 12.
The personal data are processed by EXTREMA S.R.L. and/or by third parties carefully selected for their reliability and competence; the data might be communicated if necessary or appropriate for performing activities, also instrumental or ancillary.
For the purposes stated in article 2, Your data can be made accessible to the following categories of subjects:
- employees and collaborators of EXTREMA S.R.L. as entitled to the processing, named by the Controller (including administrators and mayors);
- Companies that are part of the same group, their title-holders and employees, with whom EXTREMA S.R.L. signed a service contract, that perform outsourcing activities on behalf of the Controller (for example accounting activities), as external controllers;
- third companies or other subjcts (for example companies that provide IT and software management services) that perform outsourcing activities on behalf of the Controller, as external controllers;
Moreover Your data can be communicated to:
- Supervisory bodies (such as IVASS),
- Legal authorities,
- Public authorities,
- all the subjects the data must be communicated to for the purposes indicated at point 2. These subjects will process the data as autonomous controllers.
Your data will not be spread.
- Data transfer
Your personal data are kept on local servers located in the company, in Bagnolo San Vito (MN), on Via dell’Industria 2 and, therefore, in the European Union. Some data may be kept on servers owned by LODI LUIGI & FIGLI S.R.L., according to the service contract between the parties.
- Exercise of the rights by the person concerned
In any moment, the person concerned can exercise their rights on the Controller. In compliance with article 7 of Legislative Decree 196/2003 and articles 15 ss of the EU Regulations 2016/679 the person concerned is entitled to: a) obtain the confirmation of the existence of personal data about them, even if not recorded yet, and their intelligible communication; b) obtain the indication of the origin of personal data, the purposes and modalities of the processing, of the logic applied in case of processing with electronic tools, of the identification details of the controller and people in charge, of the subjects and categories of subjects to whom the personal data can be communicated as people appointed; c) obtain the update, correction or when of interest, the integration of data; d) obtain the cancellation of data in the cases mentioned in art. 17 EU Reg. 2016/679, the anonymous transformation or the blocking of the data processed in violation of the law, including those that is not necessary to keep for the purposes they were collected or later processed; e) obtain the limitation of the processing in the cases included in art. 18 of the EU Reg. 2016/679; f) receive the personal data about them in a structured format, common and readable by automatic devices, and the right to communicate them to another Controller; g) oppose, due completely or in part to a particular situation, the processing of personal data, albeit in line with the purpose of the collection; h) oppose the processing of personal data for direct marketing, advertising or direct sales, or for market research or commercial communication; i) lodge a complaint to the Competition Authority for the Protection of Personal Data.
The exercise of rights is not subject to any restrictions and it is free of charge.
Articles 7 of the Code and articles from 15 to 23 of the Regulations can be consulted at the following link: www.garanteprivacy.it
- Procedure for the exercise of the rights
To exercise Your rights, You can address the Controller directly, by sending:
– a registered letter with proof of delivery to EXTREMA S.R.L. to the following address: Via dell’Industria 2, 46031 Bagnolo San Vito (MN); or, as an alternative,
– an e-mail to email@example.com.
- Modification to the commercial consent.
To modify the commercial consent even after the termination of the contract You can use the same procedures stated at point 12 or you can click on the link “Unsubscribe” that You find in our newsletters.
What are cookies?
As clarified by the Competition Authority for Privacy, cookies are small text files – made of letters and numbers – “that the sites visited by the user send to their device (usually to the browser), where they are memorised in order to be sent to the same sites during the following visit by the same user”. Cookies can be memorised only for the time necessary to visit a site (session cookies) or for a longer period of time, not connected to the session (persistent cookies). Cookies operate with the content of the website and usually improve its use and the web browsing experience. They allow Extrema S.r.l. to know the content viewed, the selections made and any use of the Site by the user. This function also allows Extrema S.r.l. to offer the most useful advertising to every single user. Extrema S.r.l. can also collaborate with third companies that use tracking technologies, to advertise online. These companies can anonymously collect information on the visits to our Site.
Through cookies, Extrema S.r.l. cannot access other information recorded on your device, although that is where cookies are downloaded. Cookies cannot upload any code, transmit viruses or malware and cannot damage the user’s device.
The site memorises the user’s choice, therefore the information will not be shown in other sessions from the same device. However, the user can always revoke completely or in part the authorisation.
Should there be technical problems related to the authorisation, please contact us using one of the ways specified on this site.
What cookies do we use?
Currently the site is using the following cookies with the functions listed below, that the user can enable or disable in the “Cookie settings” section at the end of every Site page.
COOKIE RELEASED BY EXTREMA S.R.L.
Extrema S.r.l. releases technical session and browsing cookies. These cookies are necessary for browsing because they allow the correct use of the Site and its full functions. They include those cookies that allow to view the content in the selected language at every access, by identifying the nation the user is connecting from (and memorising such information for future access). These cookies are necessary to the functioning of the Site and their disabling can jeopardise the experience and the successful browsing. This category also includes analytical cookies that allow, through other IT systems, the statistical analysis of the users’ browsing on the Site, with the aim of understanding the user’s experience. They include for example cookies that record the number of clicks on a Site page and the number of pages visited. Such analysis takes place on aggregated and anonymous data and has exclusively statistical purposes. They are not necessary for the functioning of the Site but being processed anonymously, they do not jeopardise the interests of the data owner. For the release of these cookies, the consent of the User is not necessary.
Extrema S.r.l. also releases cookies functional to the use of the Site. These cookies allow Extrema S.r.l. to facilitate and improve the use of the Site by the user. They are not necessary for the use of the Site, but they facilitate and speed its use. Also for the release of these cookies, the consent of the User is not necessary, and it is always possible not to allow their activation on the device.
THIRD-PARTY COOKIES, THAT IS, RELEASED BY OTHER SITES
How can I disable cookies?
For more information and to modify cookie settings, including their enabling and disabling, it is possible to access the dedicated area linked in the footer of the Site under “Cookie Settings”.
Moreover, the browser settings allow the User to be notified every time a new cookie is sent, or to completely disable cookies. Their complete disabling might jeopardise many functions, or the correct browsing or visualisation of the Site or other web pages.