PRIVACY POLICY
Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)
Information to be provided where personal data are collected from the data subject
According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you with the due information concerning the processing of the collected personal data.
This notice is provided pursuant to art. 13 of the Regulation (EU) 2016/679 (General Data Protection Regulation) and according to the provisions of the Directive 2002/58/CE, as amended by Directive 2009/136/CE on Cookies, as well as according to the Provision of the Data Protection Authority dated 08.05.2014 on cookies.
DATA CONTROLLER, pursuant to art. 4 and 24 of the Regulation (EU) 2016/679, is NOLANGROUP SPA, having its head office in Via G. Terzi di S. Agata, 2, 24030 Brembate di Sopra (BG), as represented by the pro-tempore legal representative.
| PURPOSES OF THE PROCESSING | AWFULNESS OF THE PROCESSING | DATA RETENTION PERIOD |
|---|---|---|
| Browsing on this website: the data collected during the navigation will be processed to obtain anonymous statistical information on the use of the site and to check its correct functioning. | Legitimate interest | Valued on the basis of reasonable expectations given by the data subject who surfs the current website. | Only for the related session, after which the data are deleted. |
| User profiling with reference to navigation data - refer to the cookie policy by clicking the - following link - | User’s consent | 1 year (o fino a opposizione dell’utente se precedente) - following link - |
| User profiling with reference to preferences, personal interests, buying habits, in order to send commercial proposals of interest to the user | Consent | 1 year |
| To contact you in order to satisfy your request for information | Legitimate interest | Data subject request: the reasonable expectation of the data subject to be contacted on the basis of the request made is presumed | 1 year |
| Personnel selection | Contract | fulfillment of pre-contractual measures | 24 months |
| Subscription to the newsletter by filling-in the relevant form | User’s consent | Subscription duration | Until users’ objection (opt-out) | unsubscription from the mailing list |
| Organizational, administrative, financial and accounting activities and clients / users management | Performance of a contract and compliance with a legal obligation | 10 years or different legal obligation |
PERSONAL DATA RECIPIENTS
Your personal data may be communicated to employees or collaborators in charge of processing activities under the authority of the Controller (art. 29 Reg. UE 2016/679) or to other recipients, appointed pursuant to art. 28 of the Regulation EU 2016/679, which shall process your data as processors and/or persons acting under the authority of the Controller and the Processor. Precisely, in order to comply with contractual obligations or related purposes, your data may be processed by companies contractually involved with the Controller and in particular to third parties belonging to the following categories:
- service providers for the management of the information system and the telecommunications networks (including e-mail, newsletter and website management service) of the Controller;
- professionals, firms or consultancy companies;
- competent authorities for the fulfilment of obligations of law and/or regulations of public bodies, upon request.
The above mentioned subjects will act as data processors or may carry out their processing activities as independent data controllers. The list of data processors is constantly updated and available at Controller’s headquarters and contacts.
DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION
The personal data provided will not be transferred outside the European Union.
NATURE OF DATA PROVISION
Except for what specified for navigation data which are necessary in order to allow navigation of the website, users are free to provide their personal data and their refusal may result in the impossibility of obtaining the information or services requested and provided through this website.
DATA SUBJECT’S RIGHTS
You may exercise your rights pursuant to articles 15, 16, 17, 18, 19, 20, 21, 22 of the Regulation EU 2016/679 by writing to the Controller’s contacts: privacy@nolan.it.
You have the right, at any time, to request the Controller to access your personal data and receive the information concerning their processing. You have the right to rectify, erase your personal data or limit their processing.
Where appropriate, you have the right to object, at any time, to the processing of your data, including profiling, and you have the right to withdraw consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal.
Where personal data are processed for direct marketing purposes, you have the right to object at any time to processing of your personal data for such marketing, which includes profiling to the extent that it is related to such direct marketing.
You have the right to the portability of your personal data; in such case the Controller shall provide you with your personal data in a structured, commonly used and machine-readable format.
Without prejudice to any other administrative or judicial remedy, if you consider that the processing of your personal data infringes the Regulation (EU) 2016/679, you have the right to lodge a complaint with the Data Protection Authority.
Updating date: 14/12/2018
