Information on the processing of personal data
Dear user, pursuant to art. 13 of the Regulation (EU) 2016/679 on the protection of individuals with regard to the processing of personal data as well as the free circulation of such data, the undersigned company Ultraflex srl, as the data controller of the data deriving from the interaction with web services accessible electronically starting from the address https://ultraflexgroup.it/ e https://www.ultraflex.it/ , wishes to inform you about the processing of your personal data and invites you to authorize the processing of your data for the purposes described by voluntarily and freely expressing your consent to data processing. The information is provided only for the owner’s site and not for other websites that may be consulted by the user via links.
1 – Data controller
Ultraflex S.p.A. (Legal representative Mr. Pietro Gai)
VIA CROSE , 2
16015 CASELLA (GE) – ITALY
TEL. +39 (0)10 96761
2 – Processing methods
Your data will be processed at the headquarters of the Data Controller in verbal and / or written form, with electronic tools and / or on paper, in the manner and within the limits necessary to pursue the purposes indicated, in compliance with the principles set out in art. 5 paragraph 1 of EU Regulation 2016/679, namely:
- Lawfulness, fairness and transparency
- Purpose limitation
- Minimization of collected data
- Accuracy of the data
- Limitation of retention
- Integrity and confidentiality
- Responsibility of the owner
The treatments carried out concern the following data and purposes:
- Navigation data. The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site, for registering access to the site and to check its correct functioning. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the site: except for this possibility, the data on web contacts do not currently persist for more than seven days.
Personal data provided voluntarily by the user (eg name, surname, email address) aimed at satisfying a specific request of the user using the services provided by the website. The provision is optional and voluntary, but necessary to respond to the request and for the user to receive the service.
The user is free to provide personal data contained in the request forms to request the sending of the newsletter, information material or other communications of a commercial nature. Their missing or incomplete conferment may make it impossible to obtain what is requested.
Personal data are processed for the time strictly necessary to achieve the purposes for which they were collected or in any case as long as there is consent. The processing will be carried out exclusively by employees appointed and authorized in the context of their respective functions and in accordance with the instructions received from the Data Controller, always and only for the purposes set out above, to guarantee data security and confidentiality and the protection of your rights. . These data are not subject to transfer to non-EU countries or international organizations, nor to outsourcing to third parties. The data may be communicated, to the extent of their competence in carrying out tasks on behalf of the Data Controller, to external persons in charge of the processing, public and private, natural and / or legal persons.
Data processing does not include an automated decision-making process including profiling.
Personal data aimed at the drafting and conclusion of sales contracts, their execution, including the performance of technical-operational and administrative-accounting activities connected and functional to the work activity, in fulfillment of the contract and legal obligations in tax matters . The provision of data is mandatory for the execution of the contract and for legal obligations, under penalty of inability to perform the service and to correctly comply with the tax / administrative legislation in force.
The processing will be carried out exclusively by employees appointed and authorized in the context of their respective functions and in accordance with the instructions received from the Data Controller, always and only for the purposes set out above, to guarantee data security and confidentiality and the protection of your rights. .
The data must or may be communicated, to the extent of their specific competence in carrying out tasks on behalf of the Data Controller, to public and private subjects external to the Data Controller’s structure, including suppliers, collaborators, lawyers, accountants, labor consultants, consultants in general. , credit institutions, public bodies and competent offices, which have the authority to request them. The data may also be transferred to non-EU countries or international organizations in the presence of adequacy decisions by the Commission or in any case only for the aforementioned purposes.
The data will be kept for the entire duration of the relationships established and in any case for a period of time not exceeding the achievement of the aforementioned purposes for which they are processed. The accounting / administration data provided for tax purposes (accounting records) are kept by law (Civil Code) for at least 10 years from the date of the last registration or until any tax assessments of the bodies in charge relating to the corresponding period have been completed tax subject to verification (Article 22, paragraph 2, Presidential Decree no. 600/1973).
The processing of your data does not include an automated decision-making process including profiling.
3 – Rights of the interested party
The Regulation confers on you, as an interested party, the exercise of specific rights, listed in articles from 15 to 22. You can therefore ask the data controller:
- access to personal data (Article 15): obtain confirmation of whether or not personal data is being processed and be able to access it;
- data correction (Article 16): obtain the correction of inaccurate data and the integration of incomplete data;
- the cancellation of data – “oblivion” (Article 17);
- the limitation of processing (Article 18);
- data portability (Article 20): receive the data provided to the owner and be able to transmit them without impediments to another owner;
- to oppose the processing (Article 21);
- not to be subjected to a decision based solely on automated processing that produces legal effects or affects his person (Article 22).
Furthermore, you are entitled to:
- lodge a complaint with the Data Protection Authority;
- withdraw your consent at any time, without affecting the lawfulness of the processing carried out up to that moment (Article 7, paragraph 3). The right of revocation cannot concern cases in which the processing is necessary to fulfill a legal obligation to which the data controller is subject.
You can exercise the above rights at any time and free of charge, by contacting the data controller Ultraflex S.p.A. (Legal representative Mr. Pietro Gai) to the e-mail addresses: firstname.lastname@example.org email@example.com
In the event of a violation of personal data deemed suitable to present a high risk for your rights and freedoms, you will be duly notified without undue delay, in accordance with art. 34 of the Regulation.