Privacy Policy

Disclosure

We are very pleased that you have shown interest in our company. Data protection is particularly important for the management of "INOX CMP srl".
The use of the Internet pages of INOX CMP srl is possible without any indication of personal data; however, if an interested person wishes to use special business services through our website, personal data may need to be processed. If the processing of personal data is necessary and there is no legal basis for such processing, we generally obtain the consent of the data subject.
The processing of personal data, such as an individual's name, address, e-mail address or telephone number must always be in line with the General Data Protection Regulation (GDPR) and in accordance with the protection country-specific data regulations applicable to INOX CMP srl. Through this declaration on data protection, our company wishes to inform the general public about the nature, scope and purpose of the personal data we collect, use and process. Furthermore, data subjects are informed by the present declaration on data protection of the rights to which they are entitled.
As a controller, INOX CMP srl has implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this site. However, Internet-based data transmissions may, in principle, present security gaps, so absolute protection may not be guaranteed. For this reason, each interested person is free to transfer his personal data by alternative means, e.g. by phone.

1. Definitions
The data protection declaration of INOX CMP srl is based on the terms used by the European legislator for the adoption of the General Data Protection Regulation (GDPR). Our data protection declaration should be legible and understandable to the general public as well as to our customers and business partners. To guarantee this, we would first like to explain the terminology used. In this declaration on data protection, we use, inter alia, the following terms:

• a) Personal data
Personal data: any information relating to an identified or identifiable natural person ("subject involved"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by referring to an identifier such as a name, identification number, location data, an online identifier or one or more physiologically specific factors, genetic, mental, economic, cultural or social identity of that natural person.

• b) Subject of data
The data subject is an identified or identifiable natural person whose personal data is processed by the processing manager for processing.

• c) Processing
Processing is any operation or set of operations performed on personal data or on personal data sets, even with automated tools, such as collection, registration, organization, structuring, preservation, adaptation or alteration, recovery, consultation, use, disclosure by transmission , dissemination or otherwise made available, alignment or combination, restriction, cancellation or destruction.

• d) Limitation of treatment
The limitation of processing is the marking of personal data stored with the aim of limiting processing in the future.

• e) Profiling
Profiling: any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning the performance of the physical person at work, the economic situation, health , personal preferences, interests, reliability, behavior, position or movements.

• f) pseudonymisation
Pseudonymisation is the processing of personal data in such a way that personal data can no longer be attributed to a specific individual without the use of additional information, provided that such additional information is stored separately and is subject to technical and organizational measures for ensure that personal data are not attributed to an identified or identifiable natural person.

• g) Controller or controller responsible for processing
The controller or data controller is the natural or legal person, public authority, agency or other body that, alone or in collaboration with others, determines the purposes and means of processing personal data; if the purposes and means of such processing are determined by the law of the Union or of the Member State, the controller or the specific criteria for his appointment may be provided for by Union or Member State legislation.

• h) Processor
Processor is a natural or legal person, public authority, agency or other body that processes personal data on behalf of the controller.

• i) Recipient
The beneficiary is a natural or legal person, a public authority, an agency or another body, to whom personal data are disclosed, whether it is a third party or not. However, public authorities that may receive personal data in the context of a particular investigation in accordance with Union or Member State law are not considered as recipients; the processing of such data by these public authorities must comply with the data protection rules applicable according to the purposes of the processing.

• j) Third parties
The third party is a natural or legal person, public authority, agency or body other than the data subject, the data controller, the processor and persons who, under the direct authority of the controller or processor, are authorized to process personal data.

• k) Consent
The consent of the interested party is a free, specific, informed and unequivocal indication of the wishes of the interested person with whom he or she, through a declaration or a clear affirmative action, signifies consent to the processing of personal data concerning him
2. Name and address of the controller
Controllers for the purposes of the General Data Protection Regulation (GDPR), other data protection laws applicable in EU Member States and other data protection provisions are:
INOX CMP srl
Via Pietro Verri, 06 - Latina Scalo
04100 Latina
Italy
Telephone: +39 0773 631171
Email: [email protected]
Website: www.inoxcmp.com


3. Cookies
The Internet pages of INOX CMP srl use cookies. Cookies are text files that are stored in a computer system via an Internet browser. Many websites and Internet servers use cookies. Many cookies contain a so-called cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters through which pages and Internet servers can be assigned to the specific Internet browser in which the cookie was stored. This allows Internet sites and visited servers to differentiate the individual browser of test subjects from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified using the unique cookie ID.

Through the use of cookies, INOX CMP srl can provide users of this website with more user-friendly services that would not be possible without setting cookies. By means of a cookie, the information and offers on our website can be optimized taking into account the user. Cookies allow us, as mentioned above, to recognize users of our site. The purpose of this recognition is to make it easier for users to use our website. The user of the website that uses cookies, e.g. it is not necessary to enter the access data every time you access the website, as this is taken over by the website and the cookie is then stored on the user's computer system. Another example is a shopping cart cookie in an online store. The online store stores the items that a customer has placed in the virtual shopping cart through a cookie.

The interested party may, at any time, prevent the setting of cookies through our website through the corresponding setting of the Internet browser used, and can therefore permanently deny the setting of cookies. In addition, cookies already set can be deleted at any time via an Internet browser or other software programs. This is possible in all popular Internet browsers. If the person concerned deactivates the setting of cookies in the Internet browser used, not all the functions of our website can be entirely used.

4. Collection of general data and information
The INOX CMP srl website collects a series of general data and information when a data subject or an automated system invokes the website. This data and general information are stored in the server's log files. The types of browsers and versions used can be collected (1), (2) the operating system used by the access system, (3) the website from which an access system reaches our website (so-called referrers), (4) the sub-websites, (5) the date and time of access to the Internet site, (6) an Internet protocol address (IP address), (7) the Internet service provider of the access system and ( 8) any other similar data and information that can be used in case of attacks on our computer systems.

When these data and general information are used, INOX CMP srl does not draw conclusions about the interested party. Rather, this information is necessary for (1) correctly providing the content of our website, (2) optimizing the content of our website and its advertising, (3) ensuring the long-term viability of our information systems and technology of the website and (4) provide the law enforcement authorities with the information necessary for prosecution in the event of an IT attack. Therefore, INOX CMP srl statistically analyzes data and information collected anonymously, in order to increase data protection and data security of our company and to ensure an optimal level of protection of personal data processed. The anonymous data of the server's log files are stored separately from all personal data provided by an interested party.

5. Possibility of contact through the website
The website of INOX CMP srl contains information that allows a rapid electronic contact with our company, as well as a direct communication with us, which also includes a general address of the so-called electronic mail (e-mail address). If a data subject contacts the controller via e-mail or via a contact form, the personal data transmitted by the data subject are automatically stored. Such personal data transmitted on a voluntary basis by a subject interested in the controller is stored for processing purposes or to contact the data subject. There is no transfer of this personal data to third parties.

6. Routine cancellation and blocking of personal data
The controller processes and stores the personal data of the data subject only for the period necessary to achieve the filing purpose, or to the extent that this is granted by the European legislator or by other legislators in laws or regulations to which the manager is subject of treatment a. If the archival purpose is not applicable or if a retention period prescribed by the European legislator or another competent legislator expires, personal data is regularly blocked or deleted in accordance with legal requirements.

7. Rights of the interested party
• a) Confirmation right
Every interested party has the right conferred by the European legislator to obtain from the controller the confirmation of the existence or not of personal data concerning him / her. If an interested party wishes to make use of this confirmation right, he can, at any time, contact any employee of the controller.
• b) Access rights
Each interested party has the right conferred by the European legislator to obtain from the data controller free information on their personal data stored at any time and a copy of such information. In addition, the European directives and regulations grant the data subject access to the following information:
or the purposes of the processing;
or the categories of personal data in question;
o the recipients or categories of recipients to whom personal data have been or will be communicated, in particular recipients in third countries or international organizations;
or where possible, the period for which personal data will be stored or, if not possible, the criteria used to determine this period;
o the existence of the right to request the controller to rectify or delete personal data, or limit the processing of personal data relating to the data subject, or to object to such processing;
o the existence of the right to lodge a complaint with the supervisory authority;
or where the personal data are not collected by the interested party, any information available about their source;
o existence of automated decision-making processes, including profiling, as referred to in Article 22 (1) and (4) of the GDPR and, at least in those cases, significant information on the logic involved, as well as on the significance and expected consequences of such processing for the interested party.

Furthermore, the data subject has the right to obtain information on the transfer of personal data to a third country or an international organization. In this case, the data subject has the right to be informed of the appropriate guarantees relating to the transfer.
If an interested party wishes to make use of this right of access, he can, at any time, contact any employee of the controller.

• c) Right to rectify
Every interested party has the right conferred by the European legislator to obtain from the controller without undue delay the correction of inaccurate personal data concerning him / her. Taking into account the purposes of the processing, the data subject has the right to complete incomplete personal data, also by submitting an additional declaration.
If a data subject wishes to exercise this right of rectification, he may at any time contact any employee of the controller.

• d) Right to cancellation (right to be forgotten)
Each data subject has the right conferred by the European legislator to obtain from the data controller the deletion of personal data concerning him without undue delay and the controller is obliged to delete personal data without undue delay if one of the following reasons is applied , provided the treatment is not necessary: ​​
o Personal data are no longer necessary for the purposes for which they were collected or otherwise processed.
o The data subject withdraws the consent to which the processing is based in accordance with Article 6 (1) (a) of the GDPR, or Article 9 (2) (a) of the GDPR, and where there is no are other reasons for processing.
o The data subject opposes the processing pursuant to Article 21 (1) of the GDPR and there is no legitimate legitimate reason for the processing or the data subject opposes the processing pursuant to Article 21 (2) of the GDPR .
o Personal data have been processed unlawfully.
o Personal data must be deleted for compliance with a legal obligation in the law of the Union or of the Member State to which the controller is subject. o The personal data have been collected in relation to the offer of information society services referred to in Article 8 (1) of the GDPR.
If one of the above-mentioned reasons is applied and the interested party wishes to request the deletion of the personal data filed by INOX CMP srl, he / she may, at any time, contact any employee of the controller. An employee of INOX CMP srl will immediately proceed to immediately comply with the cancellation request.
Where the controller has made personal data public and is required to delete personal data pursuant to Article 17 (1), the controller shall take reasonable steps to take account of available technology and implementation costs. including technical measures, to inform other data controllers that the data subject has requested the cancellation by such controllers of any connection, copying or replication of such personal data, even if processing is not required. An employee of INOX CMP srl will arrange the necessary measures in individual cases.

• e) Processing restriction right
Each interested party has the right, granted by the European legislator, to obtain from the controller the treatment limitation if one of the following conditions applies:
o The accuracy of the personal data is contested by the interested party, for a period that allows the controller to verify the accuracy of the personal data.
o The processing is illegal and the interested party opposes the deletion of personal data and instead requests the limitation of their use.
o The controller no longer needs personal data for processing purposes, but is required by the data subject for the establishment, operation or defense of legal claims.
o The data subject has contested the processing pursuant to Article 21 (1) of the GDPR pending verification that the legitimate grounds of the controller prevail over those of the data subject.
If one of the above conditions is met and the interested party wishes to request the limitation of the processing of personal data stored by INOX CMP srl, he may at any time contact any employee of the controller. The employee of INOX CMP srl will provide for the restriction of processing.
• f) Right to data portability
Each interested party has the right, recognized by the European legislator, to receive personal data concerning him, provided to a controller, in a structured format, commonly used and readable by a machine. He shall have the right to transmit such data to another data controller without impediment to the controller whose personal data have been provided, provided that the processing is based on the consent referred to in Article 6 (1) (a) , the GDPR or point (a) of Article 9 (2) of the GDPR, or a contract within the meaning of Article 6 (1) (b) of the GDPR, and the processing is carried out by automated means, provided that processing is not necessary for the performance of a task performed in the public interest or in the exercise of public authority conferred on the controller.
Furthermore, in exercising its right to data portability pursuant to Article 20 (1) of the GDPR, the data subject shall have the right to transmit personal data directly from one controller to another, where technically feasible and in doing so. do not negatively affect the rights and freedoms of others.
To assert the right to data portability, the data subject may at any time contact any employee of INOX CMP srl.

• g) Right to oppose
Any interested party has the right, recognized by the European legislator to oppose, for reasons relating to his particular situation, at any time, to the processing of personal data concerning him, which is based on point (e) or (f)) of the article 6 (1) of the GDPR. This also applies to profiling based on these provisions. INOX CMP srl will no longer process personal data in the event of opposition, unless we can demonstrate compelling legitimate reasons for the processing that prevail over the interests, rights and freedoms of the data subject, or for the establishment, operation or the defense of legal claims.
If INOX CMP srl processes personal data for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him / her for such marketing. This applies to profiling in so far as it is related to such direct marketing. If the interested party opposes INOX CMP srl to the treatment for direct marketing purposes, INOX CMP srl will no longer process personal data for such purposes.

Furthermore, the interested party has the right, for reasons related to his particular situation, to oppose the processing of personal data concerning him by INOX CMP srl for scientific or historical research purposes, or for statistical purposes pursuant to article 89 (1) of the GDPR, unless the processing is necessary for the performance of an activity carried out for reasons of public interest.
To exercise the right to object, the interested party can contact any employee of INOX CMP srl. Furthermore, the data subject is free in the context of the use of information society services and, by way of derogation from Directive 2002/58 / EC, to avail himself of his right to oppose using automated tools using technical specifications.

• h) automated individual decision making, including profiling
Each person concerned has the right, granted by the European legislator, not to be subjected to a decision based exclusively on automated processing, including profiling, which produces legal effects on him or her, or affects it in a similar way, provided that decision (1) is not necessary to conclude or execute a contract between the data subject and a data controller, or (2) it is not authorized by Union legislation or the Member State to which the controller is responsible; treatment and which also establishes appropriate measures to safeguard the rights and freedoms of the data subject and legitimate interests, or (3) is not based on the explicit consent of the data subject.
If the decision (1) is necessary to stipulate, or execute a contract between the data subject and a data controller, or (2) is based on the explicit consent of the data subject, INOX CMP srl must take appropriate measures to safeguard the rights and the freedom of the data subject and the legitimate interests, at least the right to obtain human intervention from the controller, express their point of view and contest the decision.
If the interested party wishes to exercise the rights related to the automated individual decision-making process, he can, at any time, contact any employee of INOX CMP s.r.l. .

• i) Right to revoke data protection consent
Every interested party has the right, granted by the European legislator, to withdraw their consent to the processing of their personal data at any time.
If the interested party wishes to exercise the right to withdraw the consent, he can, at any time, contact any employee of INOX CMP srl.

8. Data protection for applications and application procedures
The controller of data processing collects and processes the personal data of the applicants for the purposes of processing the application procedure. The treatment can also be done electronically. This is the case, in particular, if an applicant sends the corresponding application documents by e-mail or via a web form on the website to the controller. If the data controller concludes an employment contract with an applicant, the data sent will be archived for the purpose of processing the employment relationship in accordance with the legal requirements. If the controller does not conclude an employment contract with the applicant, the application documents are automatically deleted two months after the notification of the decision to refuse, provided that no other legitimate interest of the controller is against the cancellation. Another legitimate interest in this relationship is, e.g. a burden of proof in a procedure under the General Equal Treatment Act (AGG).

9. Legal basis for processing
Art. 6 (1) turned on. a GDPR serves as a legal basis for processing operations for which we obtain consent for a specific processing purpose. If the processing of personal data is necessary for the execution of a contract to which the data subject is a party, such as when processing operations are necessary for the supply of goods or to provide any other service, the processing is based on Article 6 (1) lit. b GDPR. The same applies to the processing operations necessary for the execution of pre-contractual measures, for example in the case of requests relating to our products or services. Our company is subject to the legal obligation that provides for the processing of personal data, for example for the fulfillment of tax obligations, the treatment is based on the art. 6 (1) turned on. c GDPR. In rare cases, the processing of personal data may be necessary to protect the vital interests of the data subject or of another natural person. This would be the case, for example, if a visitor was injured in our company and his name, age, health insurance data or other vital information should be passed on to a doctor, hospital or other third parties . So the elaboration is based on the art. 6 (1) turned on. d GDPR. Finally, processing operations could be based on Article 6 (1) lit. f GDPR. This legal basis is used for processing operations that are not covered by any of the aforementioned legal grounds, if the processing is necessary for the legitimate interests pursued by our company or third parties, except where such interests are exceeded by interest or rights and fundamental freedoms of the data subject requiring the protection of personal data. Such processing operations are particularly admissible as they have been expressly mentioned by the European legislator. He considered that a legitimate interest could be assumed if the data subject is a customer of the controller (recital 47, sentence 2, GDPR).
10. The legitimate interests pursued by the controller or by a third party
Where the processing of personal data is based on Article 6 (1) lit. For GDPR our legitimate interest is to carry out our business in favor of the well-being of all our employees and shareholders.
11. Period of retention of personal data
The criteria used to determine the retention period for personal data are the respective retention periods required by law. After the expiration of this period, the corresponding data are regularly deleted, provided they are no longer necessary for the fulfillment of the contract or the start of a contract.

12. Provision of personal data as a legal or contractual requirement; Requisite necessary to stipulate a contract; Obligation of the interested party to provide personal data; possible consequences of not providing such data.
We clarify that the provision of personal data is in part required by law (eg tax regulations) or may also derive from contractual provisions (for example information on the contractual partner).
Sometimes it may be necessary to stipulate a contract that the person concerned provides personal data, which must then be processed by us. For example, the data subject is obliged to provide us with personal data when our company signs a contract with him or her. The failure to provide personal data would have the consequence that the contract with the person concerned could not be concluded. Before the personal data are provided by the interested party, the interested party must contact any employee. The employee clarifies to the interested party whether the provision of personal data is required by law or by contract or is necessary for the conclusion of the contract, if there is an obligation to provide personal data and the consequences of non-provision of data personnel. />
13. Existence of automated decision-making processes
As a responsible company, we do not use decision making or automatic profiling.

This privacy policy was generated by the DGD - Your DPO external privacy policy generator developed in collaboration with RC GmbH, which sells used computers and German lawyers from WBS-LAW.