PRIVACY & COOKIES POLICY
INFORMATION NOTICE PURSUANT TO ART. 13 GDPR
Esseco S.r.l hereby provides information on the ways in which the company processes personal data, pursuant to Art. 13 of Regulation no. 2016/679/EU of the European Parliament and Council of 27 April 2016, General Data Protection Rules (GDPR).
1) DATA CONTROLLER
The Data Controller is Esseco S.r.l. (hereinafter Esseco), with registered offices in San Martino di Trecate, Via San Cassiano, 99, e-mail address [firstname.lastname@example.org].
2) TYPES OF DATA PROCESSED
The following personal data (Data) referring to you (Data Subject) will be processed, such as, merely by way of example, common data, personal details, identifying data, contact data, employer and work duties.
Such Data will be provided by the Data Subject:
– by filling in on-line forms on the Esseco web site, including, possibly, registering to receive the newsletter and registering to create an account on the Esseco web site; or
– by communications from the Data Subject, for example indications and requests within the scope of information notices and commercial information connected with the Esseco web site.
You are required to provide such Data when registering to receive the newsletter or when you open an account with Esseco through the web site.
Esseco cannot accept registrations or Data from persons under 16 years of age, pursuant to Art. 8 GDPR, or any other minimum age limit as may be defined by the country of residence. Therefore, by registering on the Esseco site, the Data Subject confirms and declares that he/she has reached the minimum age for their data to be lawfully processed from their country of residence.
3) PURPOSES AND LEGAL BASIS OF THE DATA PROCESSING
Your Data will be processed only with your consent for the following purposes:
a) For promotional activities by the company, including sending emails, newsletters, commercial communications or advertising material concerning products or services offered by the Data Controller, including customer satisfaction surveys relating to the quality of the services;
b) To organise events, meetings and celebrations included in the Company’s corporate and promotional activity.
The conferring and the processing of the Data for the aforementioned purposes is optional, with the consequence that you may decide not to give your consent, or to withdraw it at any time.
Please be aware that withdrawing consent does not prejudice the lawfulness of the processing based on consent given prior to its withdrawal.
4) MODALITY OF PROCESSING
The Data may be processed with or without the aid of electronic means of processing, with or without the aid of automated processes, with means which are able to memorise, manage and transmit the Data and will include all operations or series of operations required for the processing in
question, including the processing and management of your Data in the Company’s management programmes and by communication of such Data to the persons indicated at point 6).
6) COMMUNICATION TO THIRD PARTIES AND DATA PROCESSORS
In the event and to the extent necessary or functional for the purposes indicated above, your Data will be communicated to the following categories of persons or entities:
– to companies in the Esseco Group, to which the Company belongs.
An up-to-date list of data processors may be requested by contacting the Company at the following e-mail address [email@example.com].
Your Data may always be communicated to judicial authorities, supervisory authorities, state bodies and agencies.
7) STORAGE AND TRANSFER OF PERSONAL DATA
Your Data is stored using cloud storage and on servers located both within and outside the European Union used by the Company, other companies in the group to which the Company belongs or because they are owned or used by third party companies appointed as data processors.
The transfer of your Data outside the European Union is carried out using adequate measures such as the adoption of standard clauses drafted in compliance with the decisions of the European Commission.
8) PERSONAL DATA STORAGE PERIOD
Your Data will be processed and stored only for the time necessary for the purposes for which it has been collected, and in any case for no longer than two years.
9) DATA SUBJECT’S RIGHTS
You are entitled to exercise the following rights:
a) right of access: to obtain confirmation at any time that your Data are being processed and to receive information in relation to such processing;
b) right of rectification: to obtain without undue delay the rectification or integration of your incorrect Data;
c) right of erasure: to obtain without undue delay the erasure of your Data;
d) right of restriction: to obtain that the processing of your Data be restricted merely to its storage;
e) right of portability: to receive your Data in a structured, commonlyused and machine-readable format and to have your Data transferred to another data controller indicated by you;
f) right of objection: to object to the processing of your Data pursuant to Art. 21 of GDPR.
To exercise your rights under GDPR you may contact the Company by sending a request to the following e-mail address [firstname.lastname@example.org].
With reference to the processing of your Data and to the exercise of your rights as data subject you are entitled to make a complaint to the Data Protection Authority, Piazza di Monte Citorio no. 121 – 00186 Roma – www.gpdp.it – www.garanteprivacy.it.
What is a cookie?
This site uses Google Analytics to collect information about users’ browsing done on the site itself.
To learn about Google privacy policies, please refer to http://www.google.com/intl/it/privacy/privacy-policy.html.
You can disable Google Analytics cookies by downloading a specific plug-in browser available at the following url: https://tools.google.com/dlpage/gaoptout
You can deny recording of cookies on your hard drive by configuring your web browser (Internet Explorer, Mozilla Firefox, Opera, Safari etc …) in order to disable cookies.
After this, however, some web pages features may not be performed properly.