Privacy

Information to the data subject on the processing of personal data pursuant to Article 13 of Regulation (EU) 679/2016 Pursuant to Article 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on data protection (hereinafter “Regulation” or “GDPR”), in relation to the processing of your personal data, the undersigned company Progex Srls (hereinafter also referred to as “Controller”), whose identity and contact details are indicated below, informs you of the following.

IDENTITY AND CONTACT DETAILS OF THE DATA CONTROLLER:

The data controller pursuant to Articles 4 and 24 of the Regulation is Progex Srls, via Pietro Micca 4A, Tradate 21049 Tel. 024237255, e-mail: info@progexitalia.it. You can contact the Data Controller by writing to the above address or sending an e-mail to the aforementioned e-mail address.

The personal data directly provided by you or otherwise collected by the undersigned Controller will be processed exclusively for: a) purposes related to the execution of the services provided (response to requests for information and/or contact received via chat, etc.); b) purposes related to the fulfillment of a legal obligation to which the Controller is subject. The legal basis for the processing of personal data for the purposes referred to in point a) is Article 6, paragraph 1, letter b) of the Regulation (“processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”). The legal basis for the processing of personal data for the purposes referred to in point b) is the fulfillment of a legal obligation to which the Controller is subject pursuant to Article 6, paragraph 1, letter c) of the GDPR (“processing is necessary for compliance with a legal obligation to which the controller is subject”).

METHODS OF DATA PROCESSING:

The processing of your personal data may be carried out with the aid of electronic or otherwise automated means, with methods and procedures strictly necessary for the pursuit of the purposes described above. In relation to the aforementioned purposes, the processing of your personal data will take place using manual, computer and telematic tools for the mere realization of the purposes themselves and, in any case, in such a way as to guarantee their security and confidentiality. The processing will be carried out with systems designed to store, manage and transmit the data, with logic strictly related to the purposes themselves, based on the data in our possession and with your commitment to promptly communicate any corrections, additions and/or updates.

POTENTIAL RECIPIENTS AND CATEGORIES OF RECIPIENTS OF PERSONAL DATA:

Personal data may be communicated for the purposes specified above to subjects who carry out activities necessary for the provision of services offered by the Site (for example, the analysis of the functioning of the Site itself) who will process the data as processors (Article 28 of the Regulation) and/or as authorized persons acting under the authority of the Controller and the Processor (Article 29 of the Regulation) or as subjects expressly designated to process data in the terms provided for by the GDPR and by the national legislation adapting to the provisions of the GDPR (Legislative Decree no. 101/2018) such as, for example, providers of IT services and/or archiving or other services of a technical/organizational nature or employees and collaborators used by the Controller.

TRANSFER OF PERSONAL DATA TO A THIRD COUNTRY OR AN INTERNATIONAL ORGANIZATION:

No personal data of the User will be transferred to a third country outside the European Union or to International Organizations.

PERIOD OF STORAGE OF PERSONAL DATA:

The personal data being processed will be stored in compliance with the provisions of Article 5, paragraph 1, letter e) of the Regulation in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes referred to in point 2 for which the personal data are processed or for the time strictly necessary to fulfill legal obligations. At the end of the retention period, the data you have provided will be deleted or made anonymous.

RIGHTS OF THE DATA SUBJECT:

Access to one’s personal data; rectification or erasure of the same or restriction of processing concerning them; objection to processing; data portability in the terms of Article 20 cited; where processing is based on Article 6, paragraph 1, letter a), or on Article 9, paragraph 2, letter a) cited, the right to withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. Without prejudice to any other administrative or judicial remedy, a data subject who considers that the processing relating to him or her infringes the GDPR has the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement pursuant to Article 77 cited (the Italian supervisory authority is the Garante per la protezione dei dati personali). To exercise the above rights, the data subject may contact the Controller at the contact details indicated in point 1 of this information notice. Whether the provision of personal data is a statutory or contractual requirement, or a requirement necessary to enter into a contract, as well as whether the data subject is obliged to provide the personal data and of the possible consequences of failure to provide such data. The communication of your data is mandatory in order to be able to respond to your request for information and/or contact received by the Controller. Failure to communicate personal data will result in the impossibility for the Controller to respond to your request for information and/or contact.

EXISTENCE OF AUTOMATED DECISION-MAKING, INCLUDING PROFILING:

Pursuant to Article 13, paragraph 2, letter f) of the GDPR, we inform you that the personal data collected will not be subject to any automated decision-making process, including profiling referred to in Article 22, paragraphs 1 and 4 of the Regulation.

PROCESSING OF PERSONAL DATA FOR A PURPOSE OTHER THAN THAT FOR WHICH THEY WERE COLLECTED:

If the Data Controller intends to further process personal data for a purpose other than that for which they were collected, before such further processing, it will provide the data subject with information regarding this different purpose and any other relevant information referred to in Article 13, paragraph 2 of the Regulation.

Updates

La presente privacy policy può subire modifiche e/o integrazioni a seguito di eventuali successive modifiche e/o integrazioni normative, all’aggiornamento o erogazione di nuovi servizi ovvero ad intervenute innovazioni tecnologiche.