Data Subjects: reporters who provide personal data
METALSIDER2 SPA, in its capacity as Data Controller (hereinafter, the “Data Controller”) of your personal data – pursuant to and for the purposes of Articles 13 and 14 of EU Reg.to 2016/679 (hereinafter, ‘GDPR’), hereby informs you that the aforementioned legislation provides for the protection of data subjects with regard to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness, transparency and protection of your privacy and your rights.
1.1 Identity and contact details of the Data Controller
METALSDER2 SPA
Strada Villavara 15/B
41122 Modena
Tel: 059 251942
e-mail: info@metalsider2spa.it
telephone: 059 251942
VAT number: 02077140354
1.2 Data Protection Officer (“DPO” or “DPO”)
The Data Controller, in accordance with art.. 37 to 39 Reg.to EU 2016/679 and the guidelines on Data Protection Officers WP 243 rev.01, assessed the exclusion of the mandatory nature and the possible opportunity for appointment of the DPO.
2. Purpose and legal basis of the processing:
Your data, if voluntarily provided, will be processed on a legal basis (art. 6, lett. b, GDPR), as indicated by Decree 24/2023,
– Management of the report made by you through the channels provided.
We remind you that the legislation allows you to remain anonymous and therefore the provision of data is optional and concerns your personal choice.
3. Categories of personal data processed.
Pursuant to art. 4, no. 1, GDPR, the “personal data” that will be processed by the Data Controller, within the scope of the purposes of the processing indicated above, have as their subject, name and surname and other data voluntarily provided by you, including those belonging to third parties.
You will refrain from sending personal data to the Data Controller, which are not strictly necessary for the performance of the indicated purpose. Otherwise, the personal data must be transmitted to the Data Controller in an anonymous or pseudonymised form, in accordance with the principle of minimisation provided for in Article 5, paragraph 1, GDPR.
4. Categories of recipients of personal data
Your data will be processed for the above purposes only by the reporting manager.
Your personal data will not be disseminated.
5. Processing methods.
Your personal data is processed in the following ways:
– processing by means of electronic computers
– manual processing by means of paper archives
The processing of your personal data is carried out by means of the operations indicated in art. 4, no. 2), GDPR – carried out without the aid of automated processes – and precisely: collection, recording, organization, structuring, updating, storage, adaptation or modification, extraction and analysis, consultation, use, communication by transmission, comparison, interconnection, restriction, erasure or destruction of data.
All processing takes place in compliance with the methods set out in art. 6, 32 of the GDPR and through the adoption of the appropriate (technical and organizational) security measures provided.
6. Communication and transfer of personal data abroad
Communication to third parties may take place in the forms and according to the indications of the law for the sole purpose of managing the report. The management and storage of personal data takes place on servers located within the European Union and in any case owned and/or available to the Data Controller and/or third-party companies appointed and duly appointed as Data Processors.
7. Personal Data Retention Period.
We would like to point out that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to art. 5 of the GDPR, the retention period of your personal data is:
– With reference to the purposes referred to in paragraph 2 above::
the time it takes to handle the report.
8. Rights of the Data Subject
In accordance with the provisions of Articles 15, 16, 17, 18, 19, 20, 21 and 22, GDPR, you have the right to exercise the rights contained therein and in particular,
(i) access your personal data;
(ii) obtain the rectification or erasure of the same or the limitation of the processing concerning him/her. In the event of a request for erasure, the Data Subject also has the right to obtain that the Joint Controllers – taking into account the available technology and the costs of implementation – take reasonable measures, including technical measures, to inform the data controllers who are processing the personal data of the Data Subject’s request to delete any link, copy or reproduction of his/her personal data;
(iii) object to processing;
(iv) request data portability;
(v) withdraw consent, where applicable, at any time, without, however, affecting the lawfulness of the processing based on the consent given before the withdrawal;
(vi) lodge a complaint with the supervisory authority.
You may exercise these rights by simply sending a request by e-mail to the Data Controller’s address: info@metalsider2spa.it