Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA

Pursuant to art. 13 European Regulation n. 679/2016 and of Legislative Decree 196/2003 as amended by Legislative Decree 101/2018

The European Regulation n. 679/2016 GDPR and the harmonization laws of the Member States, recognize the protection of their personal data that are processed by third parties, as an expression of respect for human dignity and fundamental rights and freedoms of the person.

On the basis of the provisions of the European and internal regulations in force, the processing of personal data will be carried out by Doctor Car di Giuliano Marsili in full compliance with the principles of lawfulness, correctness, relevance, proportionality and transparency and protection of confidentiality, in compliance with legal requirements.

“Personal Data” means any information concerning an identified or identifiable natural person; by “Interested” the person providing the data; for “Data Controller” the person, natural or legal, who determines the purposes and means of the processing of personal data; for “Data Processor” the person, natural or legal, who processes data on behalf of the owner; for “Recipient” the person, natural or legal, public authority, service or other body that receives communication of personal data.

Data controller

Berto by Bertoni Andrea, with registered office in Castel Bolognese, via Emilia Levante 400/G, PIVA: 02380520391, PEC: , who can be contacted at the following email address info@bertoelevators.com and at the telephone number +393407362186, acts as Data Controller.

Purpose of the processing:

The data is acquired for the following purposes of the processing:

Browsing the website, including filling out the forms therein, at www.bertoelevators.com
Contact with the user in the contractual and pre-contractual phase aimed at the provision of the service, the stipulation of assignments, their relative execution and the obligations related to the fulfillment of the same;
Operational, organizational, fiscal, financial, insurance, administrative, accounting, legal management of the contractual relationship with the interested party;
First contact with the candidate for the purpose of evaluating the feasibility of the request; subsequently, the operational, organizational, managerial, fiscal, financial, insurance, administrative, accounting, legal management of the employment relationship;
Monitoring of the methods of providing professional services, of the progress of relations with suppliers and the analysis and management of the risks associated with the relationship;
Any legal obligations or obligations;

Legal basis The basis of lawfulness of the processing for the purposes in points: 1, 2, 3, 4, 5 relates to the fulfillment of the contract of which the interested party is a party (or to the execution of pre-contractual measures adopted on the request of the same – Article 6.1.b GDPR) and, where applicable, to the legitimate interest of the owner in the management of disputes (Article 6.1.f GDPR); for the purposes in point 6, the legal basis is the legal obligation (Article 6.1.c GDPR);

In the case of CVs spontaneously sent by the interested party to the mailbox on the site, as required by Legislative Decree no. 101/2018, the information to the interested party, pursuant to art. 13 of the 2016/679 European Regulation, will be made at the first next useful contact.

Categories of data processed

The personal data processed are the following:

personal data (name, surname, physical address, nationality, province and municipality of residence, landline and / or mobile telephone, fax, address (s), e-mail etc);
billing data (tax code, VAT number);
bank details (IBAN, bank, postal data etc)
data, deeds or documents from which it is possible to identify the interested and necessary and relevant to the provision of the service or to the obligations deriving from the contract;
site usage data, automatically acquired by the platform, such as IP addresses, incoming domain names to the site, the addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained, etc. These data are stored in the hosting provider’s servers and are treated anonymously, to process aggregate statistics on the use of the application, to monitor its correct functioning, and for the possible ascertainment of responsibility in case of hypothetical computer crimes against of the site;
Cookies: The sites use small text strings that are sent to the user’s browser to then be re-transmitted to the same sending sites at the next visit by the same user, and manage their authentication and the access profile. During navigation, the user can also receive cookies on his terminal sent from different websites or web servers (called “third parties”), on which some elements (images, maps, links, etc.) present on the site may reside that the user is visiting. At the first access, the user has the possibility to give selective consent to the installation or not of the cookies available based on a Cookie Policy, containing all the relevant information to make an informed decision.

Processing methods

The treatment may consist of the operations of collection, registration, organization, storage, consultation, use, processing, modification, selection, extraction, comparison, interconnection, transmission, communication, cancellation, destruction, blocking and limitation.

The processing will be carried out both with the use of paper supports and with the aid of electronic, IT and telematic tools suitable for guaranteeing the security and confidentiality of the data in accordance with the provisions of art. 32 of the 2016/679 European Regulation.

The information and IT systems of the owner do not use algorithms with profiling characteristics.

Transfer of data outside the EU

Personal data are not transferred to non-European countries. & nbsp; If temporary storage occurs on external servers, the owner ensures that the service provider belongs to a European country or to a country deemed adequate by a decision of the European Commission.You can obtain more information by contacting the Data Controller at the contacts indicated above.

Data retention period

In compliance with the provisions of art. 5, paragraph 1, lett. e) of the GDPR, personal data are stored in a form that allows the identification of the data subject for a period of time not exceeding the achievement of the purposes for which the data are processed or according to the deadlines provided for by the law . The verification of the obsolescence of the data stored in relation to the purposes for which they were collected is carried out periodically, under the supervision of the Data Controller.

In particular:

· When the processing is necessary for the execution of a contract and / or the execution of pre-contractual measures, the data will be processed until the ‘execution of this contract and will be kept for the following 10 years, without prejudice to the hypothesis of legitimate interest of the Data Controller in the event of legal disputes;

· When the processing is necessary to fulfill a legal obligation to which the Data Controller is subject, the data will be kept as long as the law allows it;

· When the processing is necessary for the pursuit of the legitimate interest of the Data Controller, the data will be kept for as long as the law allows.

Personal data will in any case be kept for the fulfillment of obligations (eg tax and accounting) that remain even after the termination of the contract (Article 2220 of the Civil Code); for these purposes, the Data Controller will only keep the data necessary for its pursuit and for the following 10 years, without prejudice to the hypothesis of legitimate interest of the Data Controller in the event of legal cases.

Nature of the provision of data & nbsp;

The provision of the data being processed is optional but the failure, incorrect, even partial, provision of the data in points 1, 2, 3, 4, 5 and 6 by the interested party makes it impossible for the owner to provide and, for the interested party, to use the services and products.

The provision of navigation data, included in point 1, is implicit in the use of communication protocols via the Internet.

Categories of recipients to whom the data may be communicated

Personal data are not disclosed.

The data are processed by internal operators authorized by the Data Controller, pursuant to Article 29 of the European Regulation 679/2016 or Managers specifically appointed pursuant to art. 28 of the same Regulation, in compliance with technical-organizational measures suitable to guarantee the & nbsp; security of the processing and compliance with the current regulatory framework.

Only if expressly necessary and relevant to the aforementioned purposes, the data may be disclosed to:

Freelancers and consultants, within the limits strictly necessary to carry out the tasks entrusted to them, as recipients or managers pursuant to art. 28 GDPR;
External subjects, in order to carry out auxiliary activities such as, for example. third party technical service providers, postal couriers, banks, post offices, hosting providers, IT companies, in the capacity of Recipients or Data Processors.

The updated list of Managers is available at the headquarters of the Data Controller.

Personal data may be disclosed to the Public Administration, Social Security and Assistance Bodies, Public Bodies, Police Forces, Judicial Authorities or other Public and Private Subjects, but exclusively for the purpose of fulfilling the professional assignment conferred and obligations of law, regulation or community legislation.

The data in question will not be disclosed to other parties other than those provided for in this information and the data suitable for revealing the state of health of the person concerned will in no case be disclosed.

Processing of data of particular relevance

If the processing also concerns personal data falling within the category of data of particular relevance pursuant to art. 9 GDPR (i.e. data suitable for revealing racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organizations of a religious, philosophical, political or trade union, as well as personal data suitable for revealing the state of health and sexual life) or “judicial” (ie data suitable for revealing provisions in the field of criminal records, the registry of administrative sanctions depending on the crime and related pending charges o the quality of accused or suspected person) the treatment will be carried out within the limits and in the manner provided for by the European Regulation 2016/679 and by Legislative Decree 196/2003 and for the purposes strictly necessary for the smooth running of the business, operations relating to the fulfillment of professional duties and the fulfillment of contractual obligations and / or laws or regulations.

In this case, the subjects or categories of subjects who may become aware of the sensitive data or to whom the data may be disclosed, in addition to the Legal Representative of the Data Controller, are:

Persons authorized to process the processing (such as employees);
Data processors: (such as consultants, freelancers, software service providers).

How to exercise rights:

The interested party can at any time request and obtain the exercise of their rights, as provided for by the EU Regulation mentioned above, by contacting the owner at the addresses indicated above.

In particular:

The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form. The interested party also has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data.
L ‘interested party has the right to & nbsp; access , ie to obtain more information on the contents of this information, in particular the indication:

of the origin of personal data
of the purposes and methods of treatment;
of the logic applied in case of treatment carried out with the aid of electronic instruments;
of the identification details of the owner and managers;
of the subjects or categories of subjects to whom the personal data may be communicated at the time the service is provided.
The interested party has the right to obtain:
updating, rectification of data;
cancellation or limitation of data processing that occurs in violation by law;
the communication of changes to third parties to whom the previous information had been communicated if such communication does not involve a disproportionate effort on the part of the owner;
The interested party has the right to oppose , in whole or in part, to the processing of data concerning him.
The interested party has the right to lodge a complaint with the supervisory authority (Guarantor).

Cookies are small text files that sites send and record on the user’s computer, to be then re-transmitted to the same sites on the next visit; thanks to cookies, a site remembers the actions and preferences of the user (such as, for example, login data, the chosen language, font size, other display settings, etc.), so that they do not have to be indicate again, when the user returns to visit said site or browse from one page to another. Cookies, therefore, are used to perform computer authentication, session monitoring and storage of information regarding the activities of users who access a site and may also contain a unique identification code that allows you to keep track of the user’s navigation within. of the site itself for statistical or advertising purposes.

While browsing a site, the user may also receive cookies from sites or web servers other than the one they are visiting on their computer or mobile device (so-called “third-party” cookies). Some operations could not be performed without the use of cookies, which in some cases are therefore technically necessary for the site to function itself.

Types of cookies

There are various types of cookies, depending on their characteristics and functions, and these can remain on the user’s computer or mobile device for different periods of time: the cookie that keeps session data, for example, can be automatically deleted when the browser is closed, or it can remain on the user’s device until a set deadline.

According to current legislation in Italy, explicit consent for the use of cookies is not always required and depends on the type to which they belong. In this regard, the following are distinguished:

the “ technical cookies “, ie those used for the sole purpose of carrying out the transmission of a communication over an electronic network, or to the extent strictly necessary to provide a service explicitly requested by the user. In other words, these are cookies that are essential for the operation of the site or necessary to perform activities requested by the user. For this category of cookies no consent is required from the user.
The “ analytical cookies “, used by the site operator to collect information on the number of users and how they visit the site;
the “ profiling cookies “, ie those aimed at creating user profiles and used in order to send advertising messages in line with preferences expressed by the same in the context of surfing the net, a prior consent of the user is required.

For third-party analytical cookies and for first and second-party profiling cookies, the explicit consent of the user is always required.

Among the technical cookies, which do not require express consent for their use, the Italian Guarantor for the protection of personal data, with the Measure for the identification of simplified procedures for the information and the acquisition of consent for the use of cookies of 8 May 2014, also includes anonymized third-party analytical cookies, when used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site.

The cookies used on this site .

This site do not use cookies.

Cookie Policy of the website www.bertoelevators.com