PRIVACY STATEMENT, ACCORDING TO SECTION 13 OF ITALIAN LEGISLATIVE DECREE 196/03 AND EU DIRECTIVE 95/46/EC Introduction Personal data are collected and processed according to the regulations of Italian Legislative Decree No. 196 of 30/06/2003, in order to guarantee that the data processing is carried out by respecting data subjects’ rights, fundamental freedoms and dignity. Pursuant to and for the purposes of Section 13 of the above Decree, we would inform you that the data supplied will be processed by respecting the confidentiality, lawfulness and transparency obligations imposed by the regulation to protect your rights. 1) PURPOSES OF DATA USE The information collected from you are as follows: 1. Information identifying you (name, email address, text of message, etc.) to follow up your requests, whatever they may be. 2) METHODS OF PROCESSING The data processing will be will be performed with the electronic and/or manual means, lawfully and correctly in order to guarantee, in compliance with Section 9 of Italian Legislative Decree 196/03, confidentiality and security through suitable logical, organizational and physical safety measures. The processing will concern all the operations provided for in Section 4 of the above law. The data will be processed for the time necessary to carry out the requests received or services delivered, and subsequently for the fulfilment of all legal obligations, as well as for possible future commercial, management and accounting purposes connected to them. 3) PROVISION OF DATA Provision of the data is compulsory for the purposes shown in Point 1.1., in order to allow delivery of the required services. Without your consent it will not be possible to give you the services you have requested. Any failure, either partial or total, to provide the compulsory information will mean that it is objectively impossible to set up or further carry out any relationship with you; for optional data, there will be no negative consequence, subject to the impossibility of managing advantageous information in relationships between the parties and/or updates on commercial initiatives. 4) COMMUNICATION OF DATA The personal data relating to the processing in question will not be communicated in any way to third parties. 5) DISSEMINATION OF DATA The personal data processed, in any way, will be brought to the attention of unspecified persons. 6) TRANSFER ABROAD The personal data processed will not be transferred abroad. 7) RIGHTS OF THE DATA SUBJECT According to Section 7 of Italian Legislative Decree No. 196 of 30/06/2003, shown below, you are entitled, at any time and free of charge, to ask for information regarding your data, as well as regarding the methods and purposes of the processes to which they are subject, to have them modified or erased or to oppose their further use and in addition to obtain information about the initiatives you are participating in. Requests according to Section 7 of Italian Legislative Decree No. 196/2003 may be forwarded to the data controller as shown below, by writing to CFT SpA, Via Paradigna, 94/A - 43122 Parma – Italy,
[email protected] 8) DATA CONTROLLER The data controller is CFT SpA, Via Paradigna, 94/A - 43122 Parma – Italy SECTION 7 – RIGHT TO ACCESS PERSONAL DATA AND OTHER RIGHTS 1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him or her exist, regardless of whether they are already recorded, and communication of such data in intelligible form; 2. A data subject shall have the right to be informed: a) of the source of the personal data; b) of the purposes and methods of the processing; c) of the logic applied to the processing, if the latter is carried out with the help of electronic means; d) of the identification data concerning data controller, data processors and the representative designated as per Section 5 (2); e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing 3. A data subject shall have the right to obtain a) updating, rectification or, where interested therein, integration of the data; b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. 4. A data subject shall have the right to object, in whole or in part, a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.