Customers policy
This information is provided to customers who are legal persons and to natural persons who operate in the name and on behalf of customers who are legal persons of this company OFFICINE AMBROGIO MELESI & C. S.r.l., pursuant to and for the purposes of Legislative Decree 196/2003 "Code regarding the protection of personal data" and subsequent amendments and amendments and art. 13 - 14 of EU Regulation 2016/679 "European Regulation on the protection of personal data" to inform you of the essential elements of the processing carried out.
1. Data Controller and Data Protection Officer (DPO)
The Data Controller is the company OFFICINE AMBROGIO MELESI & C. S.r.l., with registered office in Cortenova (LC) Largo De Vecchi N. 11, in the person of its pro tempore legal representative. The company has appointed the "Data Protection Officer" provided for by the Regulation (so-called DPO). For all questions relating to the processing of your Personal Data and/or to exercise the rights provided for by the Regulation itself, you can contact the DPO at the following e-mail address: gdpr@melesi.it.
2. Data Processors and Persons in Charge of the processing
The updated list of data processors and persons in charge of data processing is kept at the headquarters of the Data Controller.
3. Brief description of the treatments
Type of data collected
The data collected by the undersigned are: - personal data of customers and non-customers - tax data of customers - bank data of customers.
Data source
The personal data are those provided by the data subject during:
- visits and/or phone calls;
- requests for information and/or quotes via email;
- previous transactions.
Purpose of the processing
The personal data are collected and processed for the purpose of:
1. To comply with all operations imposed by regulatory obligations; 2. conduct the operations strictly connected and instrumental to the initiation of contractual relationships, including the acquisition of preliminary information at the conclusion of the contract;
3. manage the contractual relationship (technical, administrative and commercial assistance) including any debt collection and litigation activities;
4. manage and control risks, prevent possible fraud, insolvency or default;
5. formulate requests or process requests received from customers (including through complaints) and also from non-customers;
6. manage administrative, accounting, civil and tax obligations;
7. To process any requests for information from the Public Authorities;
8. to forward communications of various kinds and by different means of communication, to formulate requests and to carry out other marketing activities, subject to written consent until revocation of the same.
Personal data will be processed in accordance with the principles of correctness, lawfulness, transparency, protection of confidentiality and rights of the Data Subject, in accordance with the provisions of art. 5 of EU Regulation 2016/679. Finally, both the personal data of customers who are natural persons and the personal data of natural persons who operate in the name and on behalf of customers who are legal persons, will be included in the Data Controller's archives and used to send communications regarding products, services, news and promotions (pursuant to Article 130, paragraph 4 of Legislative Decree 196/2003 and subsequent amendments and additions and the General Provision of the Guarantor of the Official Gazette no. 188c of 1 July 2008, formulation 6, points a, b, c).
Legal basis
a) Consent of the data subject for the purposes referred to in points 1. 2, 3, 4, 5 (pursuant to art. 6 letters a) and b) GDPR);
b) Legal obligations for the purposes referred to in points 6 and 7 (pursuant to art. 6 letter c) GDPR);
c) Legitimate interest of the controller for the purposes referred to in point 8 (pursuant to Article 6 letter f) GDPR).
Period and place of storage
All data provided are processed and stored in the paper and digital archives of our company, located at our operational headquarters. In relation to the retention period, the data provided by the Data Subject for the purposes referred to in points 1, 2, 3, 4, 5, 6, 7 will be stored for the entire duration of the contractual relationship and, after its conclusion, until the end of the legal limitation period (10 years), unless the relationship is renewed again. The data processed for the marketing purposes referred to in point 8 will be stored until consent is revoked They are also processed on behalf of the undersigned by professionals and/or companies in charge of carrying out technical, managerial, development, administrative, accounting, tax, legal activities, etc.
4. Processing methods
The processing of data for the purposes set out above takes place both by automated means, on electronic or magnetic support, and by non-automated methods on paper, in compliance with the rules of confidentiality and security provided for by European and national legislation.
5. Mandatory or optional nature of the provision of data
The purposes of use of the data summarized in the grid on the previous page, under the heading "Processing purposes", with reference to points 1, 2, 3, 4, 5, 6, 7 are essential for the establishment of the contractual relationship (including the pre-contractual phase) and for its execution. The processing purposes referred to in point 8 are not necessary for the provision of the service provided by the company. and therefore the relative consents are optional.
6. Refusal to provide data
The Data Subject may refuse to provide the Data Controller with personal data or revoke consent. If, however, the provision of data is required by a regulatory or contractual obligation, the refusal or revocation of the provision of data puts the undersigned in the condition of not being able to execute or continue the contract, for reasons not attributable to it.
7. Consent for Marketing Purposes
In particular, the Data Controller will use the data provided for promotional and marketing purposes (point 8), or to send communications regarding products, services, news and promotions (pursuant to Article 130, paragraph 4 of Legislative Decree 196/2003 and subsequent amendments and additions and the General Provision of the Guarantor Official Gazette no. 188c of 1 July 2008, formulation 6, points a, b, c) only with the express consent of the data subject. The processing of data for the purposes set out above takes place both by automated means, on electronic or magnetic support, and by non-automated methods on paper, in compliance with the rules of confidentiality and security provided for by European and national legislation.
8. Recipients of the data
The personal data processed by the Data Controller will not be disseminated, i.e. will not be disclosed to unspecified subjects, in any possible form, including that of making them available or simple consultation. Instead, they may be communicated to the Data Controller's employees and to some external parties who collaborate with them. They may also be communicated, within the limits strictly necessary, to persons who, for the purpose of issuing orders or requests for information or quotes, must supply goods and/or perform services or services. Finally, they may be communicated to persons entitled to access them by virtue of legal provisions, regulations, EU legislation. In particular, on the basis of the roles and work tasks performed, some workers have been legitimized to process personal data, within the limits of their competences and in accordance with the instructions given to them by the Data Controller.
9. Rights of the Data Subject
At any time, the Data Subject may exercise his/her rights pursuant to Legislative Decree 196/2003 and subsequent amendments and additions and articles 15 to 22 of EU Regulation 2016/679 by contacting the Data Controller, sending an e-mail to info@melesi.it or writing to the Data Protection Officer (DPO) at gdpr@melesi.it. By way of example, you have the right, at any time, to ask where applicable to: 1. Access your data. 2. Verify and rectify your data. 3. Obtain erasure (Right to be forgotten). 4. Obtain the restriction of processing. 5. Achieve data portability. 6. Object to the processing of data. 7. Oppose automated decision-making. 8. Withdraw consent at any time. The Data Subject may revoke consent to the processing of data at any time. The withdrawal of consent does NOT, however, affect the lawfulness of the processing based on the consent given before the withdrawal. There is no automated decision-making process. Without prejudice to any other administrative and judicial remedy, if you believe that the processing of data concerning you violates the provisions of EU Reg. 2016/679, pursuant to art. 15 letter f) of the aforementioned EU Reg. 2016/679, you have the right to lodge a complaint with the Guarantor for the protection of personal data. In the cases envisaged, you have the right to the portability of your data and in this case the Data Controller will provide you with the personal data concerning you in a structured, commonly used and machine-readable format.
10. Data transfer
For all the purposes indicated in this policy, the personal data of a common nature of the Data Subject will not be transferred or communicated to others, outside the recipients indicated in this policy or if present they may be communicated to companies belonging to the group, subsidiaries, associates, etc. also located abroad, inside and outside the European Union, in compliance with the rights and guarantees provided for by current legislation, subject to verification that the country in question guarantees an "adequate" level of protection. The undersigned also reserves the right to use cloud services, ensuring that the service providers will be selected from those who provide adequate guarantees, as provided for by art. 46 of EU Regulation 2016/679 "European Regulation on the protection of personal data".
11. Automated decision-making
The Data Controller does not carry out processing on the data of natural persons that consists of automated decision-making processes.
12. Modification of the Privacy Policy
The owner reserves the right to modify, update, add or remove parts of this privacy policy at its discretion and at any time, by giving notice to it.
OFFICINE AMBROGIO MELESI S.r.l. recommends that you inform the Data Subjects (e.g. directors, employees and collaborators whose data the Company comes into possession of for the purposes of executing the contract) about the content of this Policy.