Privacy disclaimer

INFORMATION FOR THE PROCESSING OF PERSONAL DATA

PURSUANT TO REGULATION (EU) 2016/679 ("GDPR") ARTICLES 13 AND 14 AND SUBSEQUENT NATIONAL ADJUSTMENT RULES

This document ("Information") intends to provide you with information on the processing of information, as specified below, which will be provided by you or otherwise available at our facility and which will be processed by the same and / or by other subjects identified for purposes indicated below. The information, in particular, is provided pursuant to EU Regulation no. 679/2016 ("GDPR") and subsequent national adaptation rules (together with the GDPR hereinafter "Applicable Law").

1. Identity and contact details of the Data Controller

The Data Controller, i.e. the natural or legal person who determines the purposes and means of processing personal data, is Allera Costruzioni Metalmeccaniche Srl, Interrato Area Industriale, snc 89026 San Ferdinando (RC) - Tel .: +39 0966 767809 - ( hereinafter "Owner").

2. Contact details of the Data Protection Officer (so-called "RPD-DPO")

The Data Controller does not carry out activities that require the designation of the person in charge of the protection of personal data, which remain with Cosimo Allera, legal representative of Allera Costruzioni Metalmeccaniche srl.

3. Purpose and legal basis of the processing

The Personal Data collected will be processed for the purposes and under the legal bases set out below:

for the management of your contractual relationship or to execute pre-contractual measures (such as, for example, the request for information or a quote). In this case, you are free to provide your personal data, even particular ones; however, failure to provide it will not allow you to establish the aforementioned relationship and satisfy your request.

Legal basis of the processing the processing is necessary in relation to the execution of a contract to which you are a party

4. Categories of personal data processed (pursuant to Article 14)

Within the limits of the purposes and methods described in this Notice, information may be processed that can be considered as "Personal Data", which includes your personal details, your contact details (such as, for example, mobile number, e-mail address , etc.).

5. Recipients and categories of recipients

Personal data will not be disseminated, or will not be disclosed to indeterminate subjects. Instead, they may be communicated to well-defined subjects, in full compliance with the provisions of the law, for purposes strictly related to those previously indicated. Any access to your personal data is limited to the subjects authorized by the Data Controller. The communication to the identified recipients, only if involved and functional, is linked to the achievement of the purposes referred to in point 3 above, therefore the personal data collected and processed may be:

a) used anonymously for statistical purposes;

b) made available to the Data Controller's collaborators, as managers or persons authorized to process personal data;

c) communicated to third parties, natural or legal, public administrations, professionals, law enforcement agencies, government bodies, regulatory bodies, courts or other public authorities authorized by law;

d) communicated to commercial partners, only in the case of the User's prior and express consent.

e) if necessary, transferred to another Data Controller in accordance with the provisions of the GDPR, also with regard to the right to data portability.

The information may also be disclosed whenever communication may be necessary to comply with requests from the Judicial or Public Security Authorities. The collected data will in no case be disclosed.

The list of personal data processing managers is available at the headquarters of the Data Controller.

6. Transfer of data abroad

The data will not be transferred outside the European Union.

7. Data retention period (determination criteria)

Below are the indications of the retention times (or the criteria for determining) of the Personal Data:

Purpose

point 3, lett. a): contract management

Conservation times

For the entire duration of the relationship and subsequently for 10 years (ordinary prescription).

8. Methods of data processing

The processing of Personal Data will take place using manual, computerized or telematic tools, suitable for guaranteeing their security and confidentiality and will be carried out by personnel duly trained in compliance with the Applicable Regulations.

In cases where it is necessary to contact you for needs related to the management of your position, you can be contacted by e-mail, text message, or through any equivalent electronic tool or by paper mail or call through an operator at all the addresses provided.

9. Rights that are recognized to you

We inform you that you may exercise the rights recognized by the Applicable Law including, by way of example, the right (i) to access your Personal Data (and to know the origin, purposes and purposes of the processing, the data of the subjects to which they are communicated, the data retention period or the criteria useful to determine it), (ii) to request their rectification, (iii) their cancellation ("oblivion"), if no longer necessary; incomplete, erroneous or collected in violation of the law, (iv) to request that the processing be limited to a part of the information concerning you; (v) to the extent that it is technically possible, to receive in a structured format or to transmit to you or to third parties indicated by you the information concerning you (so-called "portability" of the information concerning you and those that have been from you voluntarily provided); (vi) as well as to withdraw your consent at any time, if this constitutes the basis of the processing. In any case, the withdrawal of consent does not affect the lawfulness of the processing based on the consent given before the withdrawal itself.

You also have the right to object to the processing of your Personal Data, including profiling. The aforementioned rights may be exercised by means of a written request addressed without formalities to the Data Controller at the contacts indicated in point 1.

The Data Controller must proceed in this sense without delay and, in any case, at the latest within one month of receiving the request. The deadline can be extended by two months, if necessary, taking into account the complexity and number of requests received by the Data Controller. In such cases, the Data Controller will inform you within one month of receiving your request and will inform you of the reasons for the extension.

Reminds you that, if the response to your requests has not been satisfactory in your opinion, you can contact and lodge a complaint with the Authority for the Protection of Personal Data (http://www.garanteprivacy.it/) in the ways provided for by the Law. Applicable.

Revision December 2020