Information on data processing

(EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016)

The data controller  is MAC srl, in the person of the legal representative pt, with legal and operational headquarters in Manocalzati at via Toppole, 3, pec e-mail:  macsrl@arubapec.it .

  1. Identity of the treatment

The collection and processing of data is carried out by MAC SRL for services connected to the web services of this site and takes place at the aforementioned company headquarters and is only handled by technical personnel in charge of processing.

In case of need, the data connected to the newsletter service can be processed by the personnel of the company that takes care of the maintenance of the technological part of the site (responsible for the treatment pursuant to article 28 of EU Regulation 2016/679), at the headquarters of the same company .

Navigation data

The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, where required.

Data provided voluntarily by the user

The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.

Cookies

As is customary on all websites, this site also uses cookies, small text files that allow you to store information on visitor preferences, to improve site functionality, to simplify navigation by automating procedures (eg. Login, site language) and for the analysis of the use of the site.

Session cookies are   essential to be able to distinguish between connected users, and are useful to prevent a requested functionality from being provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site.

Session cookies do not contain personal data and last only for the current session, i.e. until the browser is closed.

All better highlighted in the privacy policy/Cookie available on the website:  www.macsolution.it .

  1. Processing methods

The data will be processed – by the persons in charge of the processing – with manual, computerized and telematic tools within the scope and according to the purposes specified above and, in any case, always respecting the security and confidentiality of the same, also in compliance with the law and with the provisions of the Guarantor for the protection of personal data.

In particular, it is guaranteed to keep and control the personal data being processed, also in relation to the knowledge acquired on the basis of the technical process, the nature of the data and the specific characteristics of the processing, in order to minimize, through the adoption of suitable security measures, the risks of destruction or loss, even accidental, of the data themselves, of unauthorized access to the treatment or not permitted or not compliant with the purposes of the collection.

  1. Responsible for corporate data processing

The person in charge of data processing for information systems is identified in the person of Mr. Pellegrino D’Amore; corporate connectivity manager is identified in the person of Mr. Alfredo Giordano; responsible for software data processing and web development is identified in the person of Mr. Giampaolo Sacco; the company HELP DESK data processing manager is identified in the person of Mr. Gianluca Camerlengo; the data processing manager in the tenders section is identified in the person of Mr. Louis Sellitto.

The designated managers are the contact point for interested parties who wish to receive information on the processing of their data and/or for the Supervisory Authority; they can be contacted at the e-mail-pec address: macsrl@arubapec.it.

  1. Persons in charge of the treatment

The persons in charge are the natural persons who, under the direct authority of the data owner or of the subjects appointed by him, carry out the processing of personal data.

MAC guarantees that it has appointed its appointees in writing and that it takes care to provide the aforementioned subjects with written and detailed instructions regarding the methods of treatment, in compliance with the provisions of the law.

In the event of changes in the attributions of the individual appointees, the latter will be communicated in writing.

  1. duty of supervision and control

MAC guarantees to carry out training activities for its personnel involved in the processing operations, on the basis of their respective duties, diversifying the level of detail and the operating instructions on the basis of the types of data processed by the persons in charge in the course of their activity.

Therefore, by virtue of this deed, it is guaranteed to supervise the work of its persons in charge of the Treatment.

  1. Purpose and legal basis of data processing

The data collected and processed will be used exclusively for the purposes: COMMERCIAL.

The processing of personal data – including any sensitive data (“particular categories of data”) and relating to criminal convictions or crimes (“judicial”) for which your consent is required to be expressed at the bottom of this information – collected, takes place for the management purposes identified above.

All data collected is therefore processed exclusively for obligations connected to the activity of the Data Controller, whose legal bases can be found at the time of signing a contract with the MAC

In the absence of a written deed, the data processing will be carried out with the explicit consent of the interested party and considered as a condition of lawfulness pursuant to and for the purposes of art. 6 of the EU Regulation.

  1. Nature of data provision

The provision of personal data and the consequent processing by the Data Controller, for the aforementioned purposes, are necessary for the establishment, continuation and correct management of the relationship between the Data Controller and the Data Subject or must be understood as mandatory on the basis of law, regulation or community legislation; any refusal to provide the requested personal data may cause the impossibility, in whole or in part, to perfect and manage the existing or evolving relationship.

The provision of personal data and the consequent processing by the Data Controller for the purposes referred to in point 6), is optional and failure to provide it, even partial, will not entail any consequences.

  1. Right of access and data portability

The law concerning the data “provided” by the interested party is limited only to personal data in the broad sense or it also extends to personal data generated ( observed ) by the activities of the interested party (e.g. location data, search history, navigation).

The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form.

However, the data generated by the owner on the basis of the analysis of the data provided or collected by the interested party ( inferred and derived data , e.g. the  credit score ) are not included, nor obviously the data obtained from third parties.

The right to data portability does not imply any obligation to keep the data beyond the period established by the regulations for the sole purpose of guaranteeing the exercise of portability.

The interested party has the right to receive, free of charge, the  data in a structured and readable form by a data processor  (therefore absolutely not in paper format), in a commonly used format (” structured format, commonly used and readable by an automatic device ” ).

In compliance with article 20, the interested party has the right to  transmit personal data from one holder to another  ” without obstacles “.

The data must be provided ” without unjustified delay and, in any case, at the latest within one month of receipt of the request ” (art. 12.3 GDPR).

Data portability will be guaranteed only if the  data processing  is based on  consent  or on contractual necessity, and in any case  only if the processing is based on electronic processing  (not on paper therefore), in all other cases it does not apply.

  1. Categories of subjects to whom the data may be communicated:

The processing of personal data will be carried out by subjects expressly and specifically designated as specially trained persons in charge; these subjects will process the data in accordance with the instructions received from the Data Controller, according to the operational profiles assigned to them in relation to the functions performed.

The data may also be processed by third parties (outsourcers), which we use for the provision of services connected to the purposes pursued, which our organization evaluates from time to time, to ensure greater protection, if we appoint as external managers of the treatments from these places in place.

In all cases, these subjects will process the data in accordance with the instructions received from the Data Controller, according to operational profiles attributed to them in relation to the functions performed, limited to what is necessary and instrumental for the execution of specific operations in the context of the services requested and exclusively for the achievement of the purposes indicated in this statement.

The data  will not be subject to disclosure.

  1. . Data retention period

The data collected will be kept for a period of time not exceeding that necessary for the purposes for which they were collected, to fulfill contractual or pre-contractual, legal and/or regulatory obligations (subject to the prescription and legal terms, in respect of the rights and in compliance with the consequent obligations).

In particular, the criteria used to determine the retention period are established by specific laws that regulate the activity of the Data Controller or by specific provisions of the Guarantor for the protection of personal data that have regulated the treatment activity and the purposes pursued by the Data Controller; finally, it should be noted that your personal data may also be kept for as long as permitted by Italian law.

  1. Modification and withdrawal of consent to data processing

The interested party has the right to:

  • obtain the cancellation or transformation into anonymous form or blocking of data processed in violation of the law;
  • obtain the updating, rectification and integration of data;
  • obtain the attestation that these operations have been brought to the attention of those to whom the data are communicated;
  • oppose for legitimate reasons the processing of data or any automated decision-making process (including profiling);
  • obtain the limitation of the treatment or the portability to another holder.

To this end, it will be necessary to send the request, by specific communication by e-mail addressed to  macsrl@arubapec.it  (specifying “Privacy” in the subject) or by registered letter with return receipt to MAC srl, via Toppole, n. 3 – Manocalzati (AV).

  1. Complaint to the Authorities

If the interested party notices possible violations in the processing of data, he has the right to lodge a complaint with the competent authorities.

  1. minors

When communicating personal data, you must ensure that you are at least 16 years old, pursuant to art. 8. On this point, it should be noted that the aforementioned article does not refer to any online data processing, nor any information society service to which minors can access.

The rule applies only to services that are the object of a direct offer, and in the context of which data processing is legitimate only if based on the informed consent of the interested party.

Consent

Having read the information, I consent to the processing of my personal data for the achievement of the aforementioned purposes.