Privacy Notice for users

Nannini Renato Machinery s.r.l. with registered office in Via Urbania, 26 – 48018 Faenza RA Italy, VAT no. 0231853039 (hereinafter the “Controller”), provides below the privacy policy of the website www.nanninirenato.com (hereinafter, the “Site”), as Controller of the personal data of users who navigate within and are registered with the Site (hereinafter, the “Users”) pursuant to art. 13 of Legislative Decree no. 196/2003 (hereinafter the “Code”) and to art. 13 of EU Regulation 2016/679 of 27 April 2016 (hereinafter the “Regulation”. The Regulation and the Privacy Code are together referred to as “Applicable Regulation”).

The Controller takes into utmost consideration the right to privacy and protection of personal data of its users.

For further information in relation to this privacy policy, Users may contact the Controller at any time using the following means:

  • sending a registered letter with return receipt to the registered office of the Controller
  • sending an email message to the web address info@nanninirenato.com

 

 

1. Purpose of the processing

The personal data of the Users will be treated lawfully by the Controller in accordance with art. 6 of the Regulation for the following processing purposes:

  1. Navigation within the Site in connection with the possibility of detecting the data of the User needed on a technical level, e.g. the IP address, while browsing the site.
  2. Sending newsletters, upon specific request of the User.
  3. Responding to your requests for information, which have reached us through the special contact form.
  4. Legal obligations, i.e. to fulfill obligations set out by the law, by an authority, by a regulation or by European legislation.
  5. Possibility of creating a Custom Audience on the Facebook Advertising Platform (Facebook Ads) in order to display targeted ads.
  6. Possibility of creating Customer Lists (Costumer Match) on the Google advertising platform (Google Ads) in order to display targeted ads.

The provision of personal data for the processing purposes indicated above is optional but necessary, because failure to provide such data will make it impossible for the User to navigate within the Site, subscribe to the Site and use the services offered by the Controller on the Site.

With reference to the purposes set out in points 1/a, 1/b and 1/c, the legal basis of the processing is indeed the execution of the services provided through the Site and required by you (in accordance with article 6, paragraph 1 , letter b of Privacy Code 2016/679); with reference to the purposes referred to in paragraph 1/d of the preceding paragraph, the legal basis of the processing is to fulfill a legal obligation which the Controller is subject to (in accordance with article 6, paragraph 1, letter c of Privacy Code 2016/679).

 

 

2. Processing methods and data retention time

The Controller shall process the personal data of the Users manually or by computer, with logics strictly related to the purposes and, in any case, in such a way as to ensure the security and confidentiality of personal data.
The personal data of the Users of the Site will be kept for the time strictly necessary to carry out the purposes set out in the preceding paragraph 1, or in any case according to what is necessary for the civil protection of the interests of both the Users and the Controller.
Regarding the purpose referred to in point 1.a, data will be retained until you will not object to receiving the newsletter, using the appropriate link contained in the same or through the manner of exercising the rights provided for in paragraph 4. in relation to points 1.e and 1.f your data will be retained and used until you will not oppose to their processing through the manner of exercising the rights provided for in paragraph 4.

 

 

3. Communication scope and dissemination of the data

The personal data of Users may be brought to the knowledge of employees and/or collaborators of the Controller in charge of managing the Site. These individuals, who are formally appointed by the Controllers as “data processors” will process the User’s data exclusively for the purposes indicated in this notice and in compliance with the Applicable Regulations.
Third parties who may collect personal data on behalf of the Controller as “External Processors”, may also become aware of the personal data of the Users, such as, for example, providers of computer and logistics services related to the operation of the site, outsourced service or cloud computing providers, professionals and consultants.
The Users have the right to obtain a list of any data processors appointed by the Controller, upon request to the Controller with the manner specified in paragraph 4 below.

 

 

4. Rights of the Data Subjects

Users may exercise the rights guaranteed to them by the Applicable Legislation by contacting the Controller as follows:

  • sending a registered letter with return receipt to the registered office of the Controller
  • sending an email message to the address info@nanninirenato.com

Under the Applicable Regulations, the Controller informs that Users have the right to be informed:

  1. regarding the origin of personal data;
  2. regarding the processing purposes and methods;
  3. regarding the logic applied in case of processing carried out with the aid of electronic tools;
  4. regarding the identity of the Controller and Processors;
  5. regarding the persons or categories of persons to whom the data may be communicated or who can learn about the data as controllers or processors.

In addition, Users have the right to:

  1. access, update, correct or, if they are interested, supplement the data;
  2. the cancellation, the transformation into anonymous form or the blocking of data processed in violation of the law, including that whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed;
  3. the certification that the operations referred to in points a) and b) have been brought to knowledge, also as regards their content, of those to whom the data has been communicated or distributed, except in the case where this proves impossible or involves a disproportionate use of means with respect to the protected right.

In addition, Users have:

  1. the right to withdraw their consent at any time, if the processing is consent based;
  2. the right to data portability (right to receive all personal data concerning them in a format that is structured, common and readable by an automatic device), the right to limitation of personal data and the right to deletion (“right to ‘oblivion”);
  3. the right to object:
    1. in whole or in part, for legitimate reasons, to the processing of their personal data, even if pertinent to the purpose of collection;
    2. in whole or in part, to the processing of their personal data for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication;
    3. if the personal data are processed for direct marketing purposes, at any time, to the processing of their data carried out for this purpose, including the profiling insofar as it is connected to this direct marketing.
  4. if they consider that the processing affects them in violation of the Regulations, the right to submit a complaint to a Control Authority (in the Member State of their habitual residence, in the State where they work or on the State in which there the alleged violation has occurred). The Italian control body is the Authority for the protection of personal data – www.garanteprivacy.it – www.gpdp.it – E-mail: garante@gpdp.it