This page describes the website management procedures with regard to the processing of the personal data of users who visit it.
This is a privacy notice issued pursuant to Article to those who interact with the company’s web services.
The notice is issued only for this website, and not for other websites that may be visited by users via a link.
The notice identifies certain minimum requirements for the collection of personal data online, and, in particular, the procedures, the time frames and the nature of the information that the data controllers must provide to users when the latter connect to a web page, regardless of the purposes of the connection.
THE “DATA CONTROLLER”
Following a visit to this website, data relating to identified or identifiable persons may be processed.
The “data controller” for this processing is Cattani S.p.A., in the person of its pro tempore legal representative.
LOCATION OF THE DATA PROCESSING
The data processing associated with the web services of this site takes place at the corporate headquarters, and is handled exclusively by technical staff classified as persons in charge of data processing, or by any persons in charge of occasional maintenance operations.
No data derived from the web service shall be communicated or disseminated.
Personal data provided by users who submit requests for informational material (newsletters, CD-ROMs, catalogues, price lists, answers to questions, documents, etc.) are used exclusively for the purposes of carrying out the service or performing the act requested.
TYPES OF DATA PROCESSED
The information systems and software procedures involved in the functioning of this website acquire, during the course of their normal operations, some personal data whose transmission is implicit in the use of internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but due to its very nature can, by means of processing and integration with data held by third parties, allow users to be identified.
This category includes the IP addresses or domain names of the computers used by the users to connect to the website, URI (Uniform Resource Identifier) form addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the reply given by the server (done, error, etc.) and other parameters concerning the user’s operating system and computer environment.
These data are used with the sole purpose of obtaining anonymous statistical information concerning the use of the site and to check its correct operation, and are deleted immediately after being processed. These data can be used to ascertain responsibility in the case of hypothetical computer crimes to the detriment of the website. Without prejudice to this possibility, as things stand, data on web contacts are not kept for more than seven days.
Data supplied voluntarily by the user
The optional, explicit and voluntary dispatching of electronic mail to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, which is necessary in order to reply to requests, as well as any other personal data contained in the message.
Specific summary information to data subjects shall progressively be reported or displayed on web pages dedicated to particular services on request.
VOLUNTARY NATURE OF DATA PROVISION
Other than for browsing data, the user is free to choose whether or not to provide their personal data.
However, the refusal to provide personal data will make it impossible for the user to obtain anything they have requested.
DATA PROCESSING PROCEDURES
Personal data are processed by computerised means for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed in order to prevent the loss of data, unlawful or incorrect use and unauthorised access.
TRANSFER OF DATA TO THIRD COUNTRIES
Any transfer of personal data to a third country outside of the European Union or to an international organisation shall take place on the basis of an adequacy decision by the Commission or, in the case of transfers pursuant to Articles 46, 47 or 49, paragraph 2, of the EU Regulation, on the basis of appropriate and suitable guarantees.
RIGHTS OF THE DATA SUBJECT
The persons to whom the personal data refer have, at any time, the rights to access and rectification of the data, erasure, restriction of processing, objection to processing, and data portability; they also have the right to file a complaint with the supervisory Authority.
Requests should be addressed to the Data Controller or the Data Protection Officer, Mr Juri Torreggiani, whose office is located in Reggio Emilia, at Via Piccard no. 16/G, tel. 0522/30.11.69, fax 0522/38.79.96.
Privacy notice issued by Cattani S.p.A. pursuant to Article 13 of EU Regulation 2016/679
1) following your visits to this website, filling out of forms, receipt of your requests/questions, preliminary contact, surveys and market research, or the establishment of any commercial relations, our company shall collect and process your personal data;
2) for the sake of clarity, we shall specify the following definitions given in EU Regulation 2016/679:
Personal data: any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Processing: any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
In consideration of the above, pursuant to Article 13 of EU Regulation 2016/679,
we inform you
that the collection and processing of personal data shall be carried out by our company in accordance with the following:
a) general purposes: the data shall be processed in order to respond to your requests/questions, for the correct fulfilment of bureaucratic, accounting, fiscal, commercial and technical requirements, and for corporate activities that are compulsory by law and in any case strictly pertain to the relations in place;
b) “direct marketing” purposes: your data may also be used, only and exclusively with your free, optional, specific and explicit consent, which may be revoked at any time, to send advertising material/communications by post, email, phone, fax, SMS, MMS or similar means; after having expressed consent, you shall be entitled to object, at any time and free of charge, to the processing of your data for these purposes;
c) procedures: the data shall be processed using both paper and electronic/computerised/automated tools/means, in full compliance with the applicable legislation, in accordance with the principles of lawfulness and integrity, and in such a way as to protect your privacy;
d) optional provision of data: the provision of your data is optional and not compulsory;
e) consequences of refusal: refusal to provide your data or total objection to the processing of your data for the purposes set out under point a) may make it impossible to satisfy some of your requests; denial of permission to use your data for the purposes set out under point b), however, shall not have any consequences on the granting of advantages linked to promotions or on the relations in place between us;
f) persons or categories of persons (recipients) to whom the data may be communicated or disseminated: the data may be communicated to third parties only in order to fulfil legal or contractual obligations. The data shall not under any circumstances be disseminated;
g) persons authorised to process the data: the data shall be processed exclusively by a restricted number of company employees in the administrative, marketing and commercial departments and the data processing centre who are specifically authorised to do so;
h) automated decision-making processes (e.g. profiling): no automated decision-making processes are used to process your data;
i) rights of the data subject: you have all the rights enshrined in EU Regulation 2016/679, such as the rights to access and rectification of the data, erasure, restriction of processing, objection to processing, and data portability. You also have the right to file a complaint with the supervisory Authority;
j) transfer of data to third countries: any transfer of personal data to a third country outside of the European Union or to an international organisation shall take place on the basis of an adequacy decision by the Commission or, in the case of transfers pursuant to Articles 46, 47 or 49, paragraph 2, of the EU Regulation, on the basis of appropriate and suitable guarantees;
k) data storage period: the data shall be stored for the period of time strictly necessary to respond to the data subject's requests or in accordance with the regulations in force or any contractual clauses;
l) data controller: the data controller is Cattani S.p.A., whose registered offices are in Parma (PR), at Via Natta no. 6/A, in the person of its pro tempore legal representative;
m) data protection officer: the data protection officer is Mr Juri Torreggiani, whose office is located in Reggio Emilia, at Via Piccard no. 16/G, tel. 0522/30.11.69, fax 0522/38.79.96: any request for clarification or information can be addressed to him.
Date: 2 October 2018
The data controller