Information on the processing of personal data pursuant to Art. 13 of European Regulation No. 679/2016 on the protection of individuals with regard to the processing of personal data (GDPR) and Art. 13 of Legislative Decree No. 196/2003 – Code regarding the protection of personal data.
DATA CONTROLLER:
Grillo S.p.A.
Registered office: Via Cervese 1701 - 47521 CESENA (FC) - Italy
VAT number IT00814230405
Telephone: +39 0547 633111 – email: grillo@grillospa.it
CATEGORIES OF DATA SUBJECTS
Grillo Spa processes the personal data of website users. Personal data means any information relating to an identified or identifiable natural person (“data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
TYPE OF DATA PROCESSED
Various types of personal data are processed through the Website:
BROWSING DATA
During normal operation, the IT systems and software procedures used to operate this website acquire some personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes IP addresses or domain names of computers and terminals used by users, URI/URL (Uniform Resource Identifier/Locator) addresses of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) etc.) and other parameters relating to the user's operating system and IT environment.
DATA PROVIDED VOLUNTARILY BY THE USER
The Website offers users the opportunity to voluntarily provide personal information by filling out the form on the “Contact” page and in the “Demonstration” section to send a request to the Company. The data requested are: First and Last Name; City; Province; Country; Telephone Number; Email Address. It is understood that Grillo Spa may process additional data beyond that requested, if provided by the user in the “request” field and subject to their authorization.
THIRD-PARTY DATA
If the user decides to provide us with third-party data, it is recommended to ensure that these subjects have been previously and adequately informed about the methods and purposes of processing indicated here. In relation to this hypothesis, the user acts as an independent data controller, assuming all legal obligations and responsibilities.
DATA ON CHILDREN UNDER 14 YEARS OLD
Users are reminded that if they are under 14 years of age, they may not provide any personal data and, in any case, Grillo S.p.A. assumes no responsibility for any false statements provided. If we become aware of the existence of any untruthful statements, we will proceed with the immediate deletion of any personal data acquired.
COOKIE
The Website collects personal data using cookies or similar technologies. For further information, please refer to the Cookie Policy.
PURPOSE AND LEGAL BASIS OF THE PROCESSING
The personal data provided will be processed in compliance with the conditions of lawfulness set out in Article 6, paragraph 1, of EU Regulation 2016/679 (“GDPR”): performance of a contract to which the data subject is party or performance of pre-contractual measures taken at the request of the data subject; consent; pursuit of the legitimate interest of the data controller, for the following purposes:
to respond to the User's request: Users' personal data is collected and processed by the Data Controller for the sole purpose of fulfilling their request. The User data collected by the Data Controller for this purpose includes: First and Last Name; City; Province; Country; Telephone number; email address, as well as any personal information that the User may voluntarily provide;
administrative and accounting purposes, i.e. to carry out organizational, administrative, financial, and accounting activities, such as internal organizational activities and activities functional to responding to your request;
purposes related to the selection of personnel for the establishment of an employment relationship.
NATURE OF THE CONTRIBUTION
The provision of personal data for the processing purposes indicated above is optional but necessary, as failure to provide such data will make it impossible for the User to submit a request to the Data Controller and for the latter to provide a response.
METHOD OF TREATMENT
All data will be processed mainly in electronic format. Personal data and any other information that can be associated, directly or indirectly, to a specific user are collected and processed by applying technical and organizational security measures to ensure a level of security appropriate to the risk, taking into account the state of the art and the costs of implementation and, where applicable, security measures prescribed by specific regulations, such as, by way of example and without limitation, measures provided for by provisions issued by the Italian Data Protection Authority or by specific laws and regulations.
The data voluntarily provided by the user will be converted into an email that may be stored within the email reception system used by the website owner.
RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
Within the scope of the purposes indicated above, personal data will be accessible (limited to their respective areas of competence) to persons appointed by the Data Controller to process the data, in particular:
- persons authorized by the Data Controller to process personal data who have received adequate operating instructions, have committed themselves to confidentiality, or are subject to an adequate legal obligation of confidentiality;
- any third-party service providers, who will act as Data Processors pursuant to Article 28 of the GDPR, only if this is necessary for the operation and maintenance of the website and the services made available through the website itself;
- persons, entities, or authorities to whom the communication of the data subject's personal data is mandatory under the provisions of the law or orders of the competent authorities.
Except for the cases considered above, personal data will not be disclosed and/or communicated to third parties.
TRANSFER OF DATA OUTSIDE THE EUROPEAN UNION
Personal data will not be transferred to countries outside the European Union and the European Economic Area.
Should such a transfer become necessary and/or unavoidable for organizational reasons on the part of the Data Controller, please note that:
- it will only take place to countries for which the European Commission has adopted an adequacy decision;
- in the case of a country other than that referred to in the previous point, the transfer of data will be governed by the Standard Contractual Clauses, unless the parties involved agree to adopt another of the safeguards established by Article 46 of the GDPR or to apply one of the derogation mechanisms referred to in Article 49 of the GDPR.
DATA RETENTION AND PROCESSING DURATION
The processing will last no longer than is necessary for the purposes for which the data was collected, after which it will be stored in accordance with the terms of the law. Once the aforementioned term has expired, your data will be destroyed or made anonymous in accordance with technical deletion and backup procedures.
RIGHT OF THE DATA SUBJECT AND COMPLAINTS
We inform you that you enjoy the rights provided for in the following articles of GDPR Regulation 679/2016:
- Article 7, paragraph 3: Conditions for consent, Right to withdraw consent;
- Article 13, paragraph 2, letter d): Right to lodge a complaint with a supervisory authority;
- Article 15: Right of access by the data subject;
- Article 16: Right to rectification;
- Article 17: Right to erasure (“right to be forgotten”);
- Article 18: Right to restriction of processing;
- Article 20: Right to data portability;
- Article 21: Right to object.
In order to exercise the rights referred to in the previous points, the data subject may contact the Data Controller directly by sending a written communication to the following email address: grillo@grillospa.it, who must respond in writing within 30 days - 90 days in particularly complex cases. The exercise of rights is generally free of charge, except for the right to request a contribution from the data subject in the case of manifestly unfounded, excessive, or repetitive requests.
If the data subject believes that the processing of their personal data violates the law, they may lodge a complaint with the Data Protection Authority. This is without prejudice to the possibility of appealing to the competent judicial authority. For further information on data protection rights and regulations in general, please visit the website of the Data Protection Authority at http://www.garanteprivacy.it/
SOCIAL NETWORK INTERACTION
This site also incorporates plugins and/or buttons for social networks, in order to allow easy sharing of content. These plugins are programmed so as not to set any cookies when accessing the page, in order to safeguard the privacy of users.
