Policy pursuant to and for the purposes of Arts. 13 and 14 of GDPR 679/2016 (General Data Protection Regulation)

Dear Customer/User,
This document constitutes a policy that we make available to you in accordance with the European regulation on the protection of personal data EU REG. 679/2016 of 27 April 2016 which came into force on 25 May 2018 (General Data Protection Regulation or "GDPR") in relation to the use of you contact data - collectively referred to as "Personal Data" - which is required in the contact form available on the website www.metalmecsrl.it

The Data Controller of your personal data is METALMEC S.r.l, with registered office in Mapello (BG), Via S. Cassiano 6, VAT No. and Tax Code 02082890167 registered at the Bergamo Register of Companies, tel. +39 035 4945858, fax +39 035 4945149, email: info@metalmecsrl.it

Processing purpose and legal basis: your Personal Data, collected in the manner described above, will be processed for the purposes and by virtue of the following legal bases:

Purpose Legal basis of processing
a): reply to your contact request Processing is necessary in relation to the reply to your contact request
b): for sending promotional communications of products manufactured/offered by the Controller your consent

Scope of communication of Personal Data - Dissemination

Your Personal Data may be transferred:

Recipients of Personal Data Purpose
Third-party companies that provide services relating to the activity of the Controller and with which specific agreements have been signed pursuant to the GDPR Support to the Controller in the management of activities

Data retention period (determination criteria)

Below is a table containing the indications of the retention period of Personal Data, divided according to the related purpose and legal basis:

Purpose Retention period
a) reply to your contact request In the event that you, having communicated your data, do not give any consent for the further processing referred to point b), your Personal Data will be deleted after 12 months
b) sending promotional communications 8 years from collection, subject to the possibility for the data subject to modify and/or withdraw consent at any time

Rights of the data subject

We hereby inform you that, at any time and in the presence of the conditions established by the GDPR, you can exercise the rights (a) to access your personal data (and know the origin and processing purposes, the details of parties to which it is communicated, the data retention period or the criteria necessary to determine it), (b) to request its rectification and (c) erasure ("right to be forgotten"), if no longer necessary, incomplete, erroneous or collected in violation of the law, (d) to request that processing be restricted to a part of the information concerning you; (e) to receive personal data concerning you in a structured, commonly used and machine readable format; (f) as well as to withdraw consent at any time, if this constitutes the basis for processing. The withdrawal of consent does not however affect the lawfulness of processing based on such consent before its withdrawal.

You also have the right to object to the processing of your personal data. The aforementioned rights may be exercised by means of a written request addressed without formalities to the Controller at the addresses indicated in point 1.

If the response to your requests is not satisfactory in your opinion, you can contact and lodge a complaint with the Personal Data Protection Authority (http://www.garanteprivacy.it/) in the ways provided for by Applicable Legislation.