This section contains a description of website management procedures for the processing of users’ personal data.
This information is also provided pursuant to art. 13 of Legislative Decree dated June 30th 2003 No. 196 “Personal data protection code” for those interacting with M.I.V.V. METAL INDUSTRIA VAL VIBRATA S.P.A. online services, publicly available via electronic network from the address: https://www.mivv.com.
This information is given for the “M.I.V.V. METAL INDUSTRIA VAL VIBRATA S.P.A” website only and not for other websites consulted by the user through the link.
The consultation of this website involves the issue of information and personal data.
The data “controller” is M.I.V.V. METAL INDUSTRIA VAL VIBRATA S.P.A., with head office in Zona Industriale – 64027 Sant’Omero (TE) – Italy
PLACE OF DATA PROCESSING
The data processing linked to the online services provided by this website takes place at the above M.I.V.V. METAL INDUSTRIA VAL VIBRATA S.P.A.’s head office and is arranged only by the technical staff in charge of processing, or by occasional persons in charge of maintenance operations.
TYPE OF PROCESSED DATA AND PURPOSES OF PROCESSING
All information requested during the recording phase will be used in order to enable the access to the M.I.V.V. METAL INDUSTRIA VAL VIBRATA S.P.A. online services.
M.I.V.V. METAL INDUSTRIA VAL VIBRATA S.P.A. can communicate users’ personal data to other companies belonging to the Group in order to guarantee all linked or instrumental activities be.
Furthermore, and once the service has been chosen and upon further information, being the recording preliminary for the access to online services, clients’ personal data shall be processed for the purposes related and/or functional to the chosen service.
Should the selected services be managed by third people, data are communicated to each management team. It acts as a “controller” for the processing related to the supply of services falling within its own competence.
Certain personal data, whose transmission is implicit in the use of the Internet communications protocols, are collected by the information systems and software procedures involved in the functioning of this website during its regular running.
The information is not collected in order to be linked to identified parties concerned but, however, by its very nature, it could be able to identify users through processing and association with data held by third parties.
This type of information includes IP addresses or domain names of the computers used by users who link up to this website, URI (Uniform Resource Identifier) notation addresses of requested resources, the time of the request, the method used in submitting the request to the server, the size of the file received in response, the numeric code indicating the state of the answer given by the server (successful, error, etc) as well as other parameters related to the user’s operating system and computer environment.
This kind of data, used only to extract anonymous statistical information on the use of the website and to check on its proper operation, is stored as long as it is provided for by the referenced law. Data could be used to ascertain the responsibility in case of hypothetical information technology crimes that are prejudicial to the website.
Personal data shall be processed through information/automated systems and for purposes linked and/or serving as a means to get online service or, merely for website browsing, in compliance with the Italian Law in force; all this in particular to let:
- the service be supplied;
- legal requirements be met.
Data processing shall be carried out by systems and/or methods aiming at granting data confidentiality and safety, as provided for by the articles 33 et seq. of the Legislative Decree dated June 30th 2003, No. 196.
THE RIGHTS OF THOSE CONCERNED
Subjects whom personal data are referred to are entitled to obtain confirmation as to whether of the existence or non-existence of his/her personal data, be informed about their contents and source, check their accuracy or apply for their integration, updating or rectification (art. 7, Legislative Decree dated June 30th, 2003, No. 196).
In compliance with the above article, all subjects shall have the right to obtain erasure, anonymization or blocking of data that have been processed unlawfully as well as to object on legitimate grounds to their processing.
The requests shall be made to the data controller’s head office.
Art. 7. Leg. Decree 196/03 – Right to access personal data and other rights
The person concerned has the right to obtain confirmation as to whether or not personal data concerning him/her exist, regardless of their being already recorded, and communication of such data in intelligible form.
The person concerned has the right to be informed:
- of the source of the personal data;
- of the purposes and methods of processing;
- of the logic applied to the processing, if the latter is carried out with the help of electronic means;
- of the identification data concerning data controller, data processors and the representative designated as per Section 5 (2);
- of the entities or categories of entities to whom or which personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of processing.
The person concerned has the right to obtain:
- updating, certification or, where interested therein, integration of the data;
- erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes they have been collected for or subsequently processed;
- certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves to be impossible or involves a manifestly disproportionate effort compared to the right that is to be protected.
The person concerned has the right to object, in whole or in part:
- on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
- to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.