Your privacy is important to us.
www.ied-italia.com is an E-commerce site of the IED ITALIA group, based in Via Bra, 3 12100 Cuneo (CN), has drawn up, in a simple and understandable way, this document, concerning the treatment of your personal data, how and why we collect them and how we manage them.
We remind you that the processing of personal data shall mean any operation or set of operations, carried out with or without the help of electronic means, concerning the collection, recording, organization, keeping, interrogation, elaboration, modification, selection, retrieval, comparison, utilization, interconnection, blocking, communication, dissemination, erasure and destruction of data, whether the latter are contained or not in a data bank.
This policy applies when you visit our website or our social media channels; when you purchase our services and use our applications; when you subscribe to our newsletter; request our assistance; or are a vendor, partner, consultant, or any other party doing business with Our Sites.
The information and data provided by you will be processed in accordance with applicable rules and Regulations (including, without limitation, the General Data Protection Regulation – EU Regulation 2016/679 – General Data Protection Regulation or “GDPR”).
The processing of data carried out by Ied-Italia will be based on the principles of correctness, lawfulness, transparency, accuracy, integrity, confidentiality, limitation of purposes and storage and minimization of data.
THE LEGAL BASES OF OUR PROCESSING OF YOUR PERSONAL DATA
Ied-Italia bases the processing of your personal data on various legal bases:
your consent (only when necessary or permitted by law). In this case you will still have the right to revoke it;
the need to enter into a contractual relationship and to fulfil the obligations arising therefrom;
the need to comply with the laws in force and to establish, exercise or defend against legal action
the need to pursue its legitimate interests: to ensure that networks and information are secure, to prevent or investigate alleged or actual violations of law, commercial contracts or instances of non-compliance with its business principles;
the need to respond to your requests;
any other legal basis permitted by applicable law.
WHAT KIND OF PERSONAL DATA WE PROCESS, FOR WHAT PURPOSES AND FOR HOW LONG WE KEEP THEM
a) Navigation data
For the correct functioning of the ied-italia.com website and the services provided, computer systems and software procedures are required which, during their normal operation, acquire certain personal data, the transmission of which is implicit in the use of internet communication protocols. These data are not collected to be associated with identified subjects, but by their very nature could, through processing and association with data held by third parties, allow users to be identified (e.g. IP addresses). These data are used only for anonymous statistical information related to the use of the service and to verify its correct functioning and are kept for the period of time strictly necessary and in any case in accordance with current regulations.
b) Customer data
In order to be able to provide the services foreseen in the contractual agreements, to carry out marketing activities and to comply with fiscal and legal obligations, Ied-Italia will collect the following data relating to clients: Name – Surname – Company name (in the case of a person other than a private individual) – Tax code – VAT number (in the case of a person other than a private individual) – Address – City – Postcode – Province – Telephone numbers – Email addresses. These data will be kept for the purpose of providing services, as well as for promotional activities and for a period of 10 years from the termination of the contractual relationship. For tax purposes and for other obligations under the law, the same data will be kept for 10 years, unless the law does not allow a longer retention period, also because of the maturity of the prescription of any rights claimed by third parties.
c) Dati dei fornitori
Al fine di garantire il regolare svolgimento del rapporto di lavoro ci occorrono i dati di contatto dei soggetti pertinenti che operano all’interno dell’azienda fornitrice (come nomi, cognomi, numeri di telefono ed indirizzi e-mail). Ci occorrono anche tutti i dati necessari all’emissione della fattura, nonché le coordinate bancarie necessarie a saldare i servizi acquistati (se rientra negli accordi contrattuali stipulati). Per le finalità suddette i dati verranno conservati per la durata di un anno a decorrere dalla cessazione del rapporto contrattuale. Per scopi di natura fiscale e per gli altri obblighi previsti dalla legge i dati verranno conservati per 10 anni, salvo che la legge non permetta un periodo di conservazione più lungo, anche in ragione del maturare della prescrizione di eventuali diritti vantati da terzi.
e) Data processing resulting from social media connections
You may register on the site www.ied-italia.com even if you have a Facebook profile. In this case, Facebook will automatically provide Ied-Italia with some of your personal data. If you are already a registered user on our site, you can choose to associate your Ied-Italia account with your Facebook profile to facilitate subsequent access to the site. In the same way, you can associate your client area on Ied-Italia with your other Linkedin, Twitter or Google accounts. These subjects will automatically provide Ied-Italia with some of your personal data. This data will be kept for the purpose of providing services, as well as for promotional activities and for a period of one year from the termination of the contractual relationship. Unless a longer period is imposed by order of the authority.
HOW WE HANDLE YOUR DATA FOR PROMOTIONAL PURPOSES
Ied-Italia may send you, via email, telephone and social networks of other parties, marketing communications relating to its services, products, promotions or events.
These communications may also be personalized taking into account your preferences (expressly indicated by you or deduced from your visits to the site of Ied-Italia or based on the links you clicked). Before engaging in any marketing activities and if required by applicable law, we will ask you to provide your consent, which you may revoke by sending an email request to firstname.lastname@example.org. Even if you revoke your consent to receive marketing communications, you may still receive other types of communications (for example, important technical or administrative notices).
WHO IS THE OWNER OF THE TREATMENT OF PERSONAL DATA
The Data Controller of the processing carried out through the site is IED ITALIA, with headquarters in Via Bra, 3 12100 Cuneo (CN).
The appointed DPO (Data Protection Officer) can be contacted at the following address email@example.com for all information relating to the processing of personal data and to provide a list of all those involved in the management.
WHO THE RECIPIENTS OF THE PERSONAL DATA ARE
The recipients of the personal data collected are:
Individuals, Companies, Professional firms that provide legal advice services to ied-italia.com;
subjects with whom IED ITALIA interacts to provide services such as couriers, subjects who provide services related to the collection of payments (eg bank transfer, credit card);
other bodies or authorities to whom, for reasons or legal obligations, it is necessary to communicate your personal data;
persons authorized by Ied-Italia to carry out activities necessary for the provision of services (with a legal obligation of confidentiality).
A complete list of those responsible for data processing can be requested by sending an e-mail to firstname.lastname@example.org.
WHICH RIGHTS YOU CAN EXERCISE
As a data subject, you may exercise your rights under Articles 16 to 22 of EU Regulation 679/16:
Art. 16 – Right of rectification
You have the right to obtain from the data controller the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the treatment, you have the right to obtain the integration of incomplete personal data, including by providing an additional statement.
Art. 17 – Right to cancellation
You have the right to obtain from the data controller the erasure of personal data concerning you without undue delay, and the data controller is obliged to erase your personal data without undue delay if one of the following reasons applies:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; 4.5.2016 EN Official Journal of the European Union L 119/43
you withdraw the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2)(a) and if there is no other legal basis for the processing;
you object to the processing pursuant to Article 21(1) and there is no overriding legitimate ground for processing, or you object to the processing pursuant to Article 21(2);
personal data have been unlawfully processed;
the personal data must be erased in order to comply with a legal obligation under Union or Member State law to which the controller is subject;
the personal data were collected in connection with the provision of information society services as referred to in Article 8(1).
If the controller has made personal data public and is obliged under paragraph 1 to delete it, the controller shall, taking into account available technology and implementation costs, take reasonable measures, including technical measures, to inform the controllers who are processing the personal data of your request to delete any link, copy or reproduction of your personal data.
Paragraphs 1 and 2 shall not apply to the extent that the processing is necessary:
- for the exercise of the right to freedom of expression and information;
- for the establishment, exercise or defence of legal claims.
Art. 18 – Right to limitation of treatment
You have the right to obtain from the data controller the limitation of processing when one of the following hypotheses applies:
you contest the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such data
the processing is unlawful and you object to the deletion of your personal data, requesting instead that their use be restricted;
although the controller no longer needs the data for processing purposes, your personal data are necessary for the establishment, exercise or defence of legal claims;
you have objected to the processing pursuant to Article 21(1), pending verification as to whether the legitimate grounds of the data controller prevail over those of the data subject.
Where processing is restricted pursuant to paragraph 1, such personal data shall be processed, except for storage, only with your consent or for the establishment, exercise or defence of a legal claim or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State. L 119/44 EN Official Journal of the European Union 4.5.2016 3.
If you have that you have obtained a restriction of processing pursuant to paragraph 1 you shall be informed by the controller before that restriction is lifted.
Article 19 – Right to obtain notification from the data controller in cases of rectification or erasure of personal data or deletion of personal data
The controller shall notify each of the recipients to whom the personal data have been transmitted of any rectification or erasure or restriction of processing carried out pursuant to Article 16, Article 17(1) and Article 18, unless this proves impossible or involves a disproportionate effort. The controller shall notify you of such recipients if you request it.
Art. 20 – Right to portability
You have the right to receive, in a structured, commonly used and machine-readable format, personal data concerning you that you have provided to a data controller and you have the right to transmit such data to another data controller without hindrance from the data controller to whom you have provided it if:
the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b);
the processing is carried out by automated means.
When exercising your rights with respect to data portability pursuant to paragraph 1, you have the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17.
The right referred to in paragraph 1 shall not affect the rights and freedoms of others.
Art. 21 – Right to object
You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you pursuant to Article 6(1)(e) or (f), including profiling on the basis of these provisions. The controller shall refrain from further processing the personal data unless he or she demonstrates compelling legitimate grounds for the processing which override your interests, rights and freedoms or for the establishment, exercise or defence of legal claims. Where personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of personal data about you carried out for such purposes, including profiling insofar as it is related to such direct marketing. If you object to the processing for direct marketing purposes, your personal data will no longer be processed for such purposes. 4.5.2016 EN Official Journal of the European Union L 119/45 4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to your attention and shall be presented clearly and separately from any other information at the latest at the time of the first communication with you. In the context of the use of information society services and without prejudice to Directive 2002/58/EC, you may exercise your right to object by automated means using specific techniques. Where personal data are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89(1),you, on grounds relating to your particular situation, have the right to object to the processing of personal data concerning you, except where the processing is necessary for the performance of a task carried out in the public interest.
Art. 22 – Right to refuse automated processing
You have the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects your person. Paragraph 1 shall not apply if the decision:
is necessary for the conclusion or performance of a contract between you and a data controller;
is authorized by Union law or by the law of the Member State to which the controller is subject, which also lays down appropriate measures to safeguard your rights, freedoms and legitimate interests;
is based on your explicit consent.
In the cases referred to in points (a) and (c) of paragraph 2, the controller shall implement appropriate measures to protect your rights, freedoms and legitimate interests, at least the right to obtain human intervention by the controller, to express your opinion and to contest the decision.
Decisions referred to in paragraph 2 shall not be based on the special categories of personal data referred to in Article 9(1), unless Article 9(2)(a) or (g) applies and appropriate measures are in place to protect your rights, freedoms and legitimate interests.
In this sense you will be able to access your data in order to:
– Verify their veracity
– Modify them if they become inaccurate
– Integrate them also with integrative declaration
– Request their cancellation
– Limit their treatment
– Object to the treatment
The holder of the treatment is obliged to respond without unjustified reason.
Ied-Italia, in compliance with the corresponding right of access to the data subject, has put in place procedures whereby you may request the deletion without undue delay of your personal data or the limitation of the processing of your personal data for the following reasons
– Because the data is no longer necessary for the purposes for which it was collected
– Because you have revoked your consent
– Because you object to the processing
– Because the data are processed unlawfully.
You can exercise these rights by writing an email to email@example.com
You will be informed of such circumstances and the changes will be effective as soon as they are published on our website www.ied-italia.com.
To this end, we invite you to visit the section on Privacy to check the updated version.