PRIVACY POLICY AND EXTENDED COOKIE POLICY OF THIS SITE

CONTENT OF THIS PAGE:

This page describes how the site is managed with regard to the processing of personal data of users who consult it.
Pursuant to Regulation (EU) 2016/679 (hereinafter “Regulation”)This page describes the methods of processing personal data of users who consult the website/s/s accessible electronically at/at the following address/s/s corresponding to the homepage of the site of which this page is part.
The information is provided only for the site mentioned above and not for other websites that may be consulted by the user through links.
The information is also inspired by Recommendation n. 2/2001 that the European authorities for the protection of personal data, gathered in the Group established by art. 29 of Directive n. 95/46/EC , adopted on 17 May 2001 to identify certain minimum requirements for the collection of personal data online, and in particular, the manner, timing and nature of the information to be provided by the controllers to users when they link to web pages, irrespective of the purpose of the link.
The Recommendation and a summary description of its purposes are not listed on this site but are traceable on the web via the Garante della Privacy.

THE “DATA CONTROLLER” OF THE PROCESSING

Following the consultation of this site, data relating to identified or identifiable persons may be processed. span,
The “holder” of their processing isPrometeo s.r.l.for the protection of personal data, which is based in Strada degli Schiocchi, 42 – 41124 Modena .

PLACE OF PROCESSING OF DATA

The processing related to the web services of this site takes place at the aforementioned office and is handled only by technical personnel in charge of the processing, or by any persons in charge of occasional maintenance operations.
The data communicated may be communicated or disseminated to third parties (Couriers, Freight Forwarders, Ente Poste) for requirements related to the sending of information material or to manage requests for information and send the commercial or promotional material requested and the related details.
Personal data provided by users who submit requests for information material (generic contact requests, requests for estimates, request for newsletter subscription, answers to questions, specific requests, requests for products or services, etc…) shall be used solely for the purpose of performing the service requested and shall be communicated to third parties only where this is necessary for that purpose.
The data provided are collected and processed by Prometeo s.r.l. in harmony with their purposes connected and instrumental to the Company’s activities as described in the pages of presentation of this site.

The processing related to the web services of this site takes place at the aforementioned office and is handled only by technical staff of the Office in charge of processing. In case of need, the data necessary for the operation of the site can be processed by the staff of the company that takes care of the maintenance of the technological part of the site, Video Studio 1 s.n.c., at the headquarters of the same company.

The web services are provided by Video Studio 1 s.n.c. through servers located in the European community and in particular on Italian soil, in compliance with current directives and regulations on the protection and processing of personal data.

TYPES OF DATA PROCESSED

Navigation data
The computer systems and software procedures responsible for the operation of this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified data subjects, but that by their very nature could, through processing and association with data held by third parties, allow to identify users.
This category of data includes the IP addresses or domain names of the computers used by users connecting to the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numeric code indicating the status of the response given by the server (good end, error, etc.) and other parameters related to the operating system and the computer environment of the user.
This data is used only for the purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing. The data could be used to ascertain liability in case of hypothetical computer crimes against the site: save this eventuality, the data on web contacts do not persist for more than sixty days.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mail to the addresses indicated on this site involves the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the letter.

COOKIES

Definition of Cookies:
Cookies are small data files composed of letters and figures that allow the web server to store on the client (the browser) information to be used during navigation on the site (session cookies) or later, even at a distance of time (persistent cookies). Cookies are stored by the individual browser on the specific device used for navigation (computer, tablet, smartphone) according to the settings of the browser used. Similar technologies (controllable GIFs, web beacons, and local storage forms of HTML5, etc…) can be used to collect information about user behavior and service usage.

Cookie types (the following definitions contain citation from the website of the Data Protection Authority)

a. Technical cookies.

Technical cookies are those used for the sole purpose of “to transmit a communication over an electronic communications network, or to the extent strictly necessary to the provider of an information society service explicitly requested by the subscriber or user to provide that service”. They are not used for other purposes and are normally installed directly by the website owner or operator. They can be divided into navigation or session cookies, which guarantee the normal navigation and use of the website (allowing, for example, to make a purchase or authenticate to access restricted areas); analytics cookies, similar to technical cookies when used directly by the site operator to collect information, in aggregate form, on the number of users and how they visit the site; functionality cookies, that allow the user to navigate according to a series of selected criteria (for example, language, products selected for purchase) in order to improve the service rendered to the same. Prior consent of users is not required for the installation of such cookies.

b. Profiling cookies.

Profiling cookies are aimed at creating user profiles and are used to send advertising messages in line with the preferences expressed by the same in the context of web browsing. Due to the particular invasiveness that such devices may have within the privacy of users, European and Italian legislation provides that the user must be adequately informed about the use of the same and thus express their valid consent.

c. Cookies of third parties.

The so-called “third-parties” cookies are used in the navigation of the site for the profiling of users but have been installed by other sites previously navigated for some time. They are used to customize navigation, to propose advertising messages in line with the preferences expressed in previous web browsing, to compile marketing statistics regarding the tastes and preferences of users of the site.

How to manage enable/disable Cookies:

The management of cookies is entirely entrusted to the browsers; they can be managed in the relevant control panels that change depending on the version, the update, the translation of the browser itself.

Below are some links of the main browsers currently in use useful to manage browser settings against cookies:

Chrome: https://support.google.com/chrome/answer/95647?hl=it

Firefox: https://support.mozilla.org/it/kb/Gestione%20dei%20cookie

Internet Explorer: http://windows.microsoft.com/it-it/internet-explorer/ie10-win8-privacy-statement

Opera: http://help.opera.com/Windows/10.00/it/cookies.html

Safari: http://support.apple.com/kb/HT1677?viewlocale=it_IT

What Cookies this site uses:

This site does NOT use any profiling cookies.

This site does NOT use any third-parties cookies.

This site uses only technical session cookies, analytics cookies and functionality cookies.

In practical analytics cookies are Google Analytics (Google Inc.):
Google Analytics may collect and analyze information about usage behavior anonymously. This information is collected by Google Analytics, which processes it for the purpose of compiling reports on the websites themselves. This site does not use (and does not allow third parties to use) the Google analytics tool to monitor or collect personal identification information. Google does not associate the IP address with any other data held by Google or attempt to link an IP address with a user’s identity. Google may also disclose this information to third parties where required by law or where such third parties process the above information on Google’s behalf.
For further information, please refer to the following link: https:///www.google.it/policies/privacy/partners/
Privacy Policy Google Inc.: http:///www.google.com/intl/it/policies/privacy/
The user can selectively disable the action of Google Analytics by installing on the propriobrowser the opt-out component provided by Google. To disable Google Analytics action, please refer to the following link: https://tools.google.com/dlpage/gaoptout?hl=it.

The cookies used on this site avoid the use of other IT techniques potentially detrimental to the confidentiality of users’ navigation and do not allow the acquisition of personal data identifying the user. Disabling cookies may prevent you from using certain services or accessing certain sections of the site.

OPTIONAL PROVISION OF DATA

Apart from what is specified for navigation data, the user is free to provide the personal data reported in the request forms to Prometeo s.r.l. or otherwise indicated in contacts with the offices to request the sending of information material or other communications.
Failure to provide them may make it impossible to obtain the requested.
For completeness it should be remembered that in some cases (not subject to the ordinary management of this site) the Authority can request news and information pursuant to art 157 of Legislative Decree no. n. 196/2003, for the purpose of controlling the processing of personal data. In these cases the answer is mandatory.

METHOD OF TREATMENT

Personal data are processed both in paper and electronic form and consists in the storage, storage, use, communication and dissemination – as specified in the chapter “PLACE OF DATA PROCESSING” of this document – of the data communicated.
Specific security measures are observed to prevent data loss, unlawful or incorrect use and unauthorized access.

RIGHTS OF DATA SUBJECTS

The subjects to whom the personal data refer have the right at any time to obtain the confirmation of the existence or not of the same data and to know the content and origin, verify their accuracy or request their integration or updating, the rectification or cancellation of the same or the limitation of the treatment that concerns them or to oppose the treatment (art. 15 and ss. of the Regulations).
According to the same article you have the right to request the cancellation, the transformation into anonymous form or the blocking of data processed in violation of the law, as well as to oppose in any case, for legitimate reasons, their processing.
Please note that the deletion of the name from the data file (Prometeo srl) involves the waiver of all services offered by the Company.
Requests should be addressed to Prometeo s.r.l. through:

the contact forms on the site,
the address info@prometeomeccanica.it
or the contact details Tel. 059.351797

Data subjects who believe that the processing of personal data related to them carried out through this site occurs in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided by art. 77 of the same Regulation, or to appeal to the appropriate courts (art. 79 of the Regulation).

ACCESS TO THIS DOCUMENT

This privacy policy and extended cookie information can be consulted automatically by the most recent browsers currently used for different operating systems.
Considering that the state of improvement of the automatic control mechanisms does not currently make them free from errors and malfunctions, this document constitutes the “Privacy Policy and Cookie Policy” of this site that will be subject to updates.

CUSTOMER INFORMATION PURSUANT TO ART. 13 AND 14 OF EU REGULATION N. 679/2016 (GDPR)

The societyPrometeo s.r.l. with headquarters in Strada degli Schiocchi, 42 – 41124 Modena Cod. Fisc.-Part. IVA 03176010365 as Data Controller of personal data pursuant to art. 4 of EU Regulation 2016/679 informs you, pursuant to art. 13 of the Regulation, which will process 1 your personal data manually and/ or with the support of computer tools for the purposes indicated below.

Types of data processed

As a result of the establishment of the contract (including oral) and during the execution of the same, our organization will collect and process your personal data. The data that will be processed are the common c.d. data such as for example: personal data; address of residence, telephone number, e-mail address, the data contained in the identification documents, tax code, P.IVA, code IBAN/ BIC.

Purpose of the processing

The processing of your personal data will be carried out for the following Purposes:

a) management of the payments provided for by law and the contract and the exercise of the related rights;

b) the fulfilment of legal or contractual obligations and the exercise of the relevant rights;

c) tax and accounting and administrative obligations and related communications to the financial administration.

The provision of data for purposes related to the fulfillment of contractual obligations, the exercise of related rights and compliance with legal and tax obligations is mandatory and your consent is not required for the processing of such data.

The refusal, even if only partial, to the transfer will make it impossible to fulfill the contract or to continue in the existing contractual relationship.

Our organization will process your data scrupulously respecting the limits and conditions imposed by the laws in force and the guidelines issued in good time by the competent authorities.

It remains your commitment to notify us promptly, with respect to the data provided and collected, any corrections, additions and/ or updates.

Legal base

Your personal data will be processed for the execution of a contract concluded with you or for the execution of pre-contractual measures taken at your request, for the need to comply with obligations laid down by law or by a regulation or by Community legislation, including those provided for by tax legislation.

The sending of commercial and/ or promotional communications related to products and services similar to those subject to the contractual relationship between the two is based on the legitimate interest of the Data Controller.

Data recipients

Your data may be communicated: to other companies in the group, to subsidiaries or affiliates, to law firms, administrative, tax, employment, companies entrusted by the Data Controller to carry out specific data processing, companies that provide IT services, supervisory bodies, which will operate the processing as External Managers, in compliance with legal or contractual obligations.

Your data may also be disclosed to our staff and employees who are specifically authorised to do so and as part of their duties. The updated list of subjects appointed External Data Processors or expressly authorized for processing may be requested by e-mail to the following address: info@prometeomeccanica.it

Processing of personal data means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, preservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
Your data, where necessary and in compliance with the principle of relevance, may be disclosed to the following categories of subjects, indicated below, who will carry out the processing as Independent Data Controllers:

– banks, credit institutions and insurance

– factoring or debt collection companies;

– Public Administrations and Financial Offices;

– notarial studies;

– persons who have access to them by virtue of provisions of law or secondary or Community legislation;

– a firm of auditors;

The Company may also disclose your personal data to third parties (i) where provided for by EU or Member State legislation; (ii) in the case of legal proceedings; (iii) in response to a request from the police on a legitimate basis; (iv) to protect the rights, privacy, security or property of the Company and, to the extent permitted by law, to investigate, prevent or take measures regarding illegal activities, suspicious fraud.

Times of storage of data

For all the fulfillments provided for by law including those in accounting, administrative and fiscal matters, the data will be stored, in storage, for a period of 10 years from the termination of the contractual relationship. In any case, this is without prejudice to cases where storage for a subsequent period is requested by the competent authorities or in accordance with the applicable legislation. Upon termination of the retention period, the data will be deleted, anonymised or aggregated.

Data transfer

The Data Controller does not transfer personal data to third countries or international organisations.

However, it reserves the right to use services in the cloud; in which case, the service providers will be selected from those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

Rights of the data subject

Pursuant to Articles 13, paragraph 2, and 15 to 21 of the Regulation, we inform you that with regard to the processing of your personal data you may exercise the following rights:

a) Right to obtain access to personal data and the following information:

– confirmation that the processing of your personal data is ongoing or not;

– the purposes of the processing;

– categories of personal data;

– the recipients or categories of recipients to whom the personal data have been or will be disclosed;

– where the data are not collected from the data subject, all available information on their origin;

– the existence of automated decision-making, including profiling;

– a copy of the personal data processed.

b) Right to rectification and integration of personal data;

c) Right to erasure of data («right to be forgotten») if one of the following reasons applies:

1. personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

2. the data subject withdraws consent to the processing of the data and there is no other legal basis for the processing;

3. the data subject opposes the processing and there is no overriding legitimate reason for processing;

4. personal data have been processed unlawfully;

5. personal data must be deleted in order to fulfil a legal obligation under Union or Member State law to which the controller is subject.

If the data controller has made personal data public and is obliged to delete them, he must inform the other data controllers processing personal data of the request to delete any link, copy or reproduction of his data.

d) Right to restriction of processing in case:

1. the data subject contests the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of such personal data;

2. the processing is unlawful and the data subject opposes the deletion of personal data and instead requests that its use be restricted;

3. although the data controller no longer needs it for the purposes of processing, the personal data are necessary for the data subject to establish, exercise or defend a right in court;

4. the data subject has opposed the processing, pending the verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the data subject.

e) Right to lodge a complaint to the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority www.garanteprivacy.it.

f) Right to portability the data subject’s data or the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning him or her provided to a data controller and, where appropriate, to transmit them to another data controller, if the processing is based on consent or a contract and is carried out by automated means. Where technically possible, the data subject shall have the right to obtain the direct transmission of data from one controller to another.

g) Right to object at any time to the processing of personal data, including profiling, in particular where:

1.the processing takes place on the basis of the legitimate interest of the data controller, having explained the reasons for the opposition;

2. Personal data are processed for direct marketing purposes.

h) Right not to be subject to a decision based solely on automated processing, including the profiling, except where the decision: is necessary for the conclusion or performance of a contract between the data subject and a controller, is authorised by Union or Member State law to which the controller is subject or is based on the data subject’s explicit consent.

i) Right to withdraw consent at any time; the data, if not based on another legal basis (including, fulfilment of a legal obligation or execution of a contract) must be deleted by the owner.

The exercise of rights is not subject to any formal constraint and is free of charge.

How to exercise the rights

The interested party may at any time exercise the rights by sending:

– a registered letter to/r a: Prometeo s.r.l. based in Strada degli Schiocchi, 42 – 41124 Modena

– an e-mail to: info@prometeomeccanica.it

Data controller

The Data Controller is: Prometeo s.r.l. with registered office in Strada degli Schiocchi, 42 – 41124 Modena

SUPPLIER AND CONSULTANT INFORMATION PURSUANT TO ART. 13-14 OF EUROPEAN REGULATION 679/2016 (GDPR)

Types of personal data

As a result of the contract (including oral) and during the execution of the same, our organization will collect and process your personal data. The data that will be processed are common c.d. data such as for example: personal data; address of residence, telephone number, e-mail address, the data contained in the identification documents, tax code, VAT, IBAN/BIC code, qualification data and vocational training.

Purpose of the processing

The personal data you provide will be processed for the following purposes;

a) execution of the supply contract, including any pre-contractual phase and fulfilment of its obligations;

b) management of payments required by law and contract;

c) compliance with obligations under Community law or regulation;

d) tax, accounting and administrative compliance;

e) to fulfill your specific requests.

Please note that our organization will process your data scrupulously adhering to the limits and conditions imposed by the laws in force and the guidelines issued in time by the competent authorities.

It remains your commitment to notify us promptly, with respect to the data provided and collected, any corrections, additions and/ or updates.

The provision of data for the above purposes is optional, even a partial refusal to provide data will make it impossible for us to properly manage the contract itself, to comply with legal and tax obligations or to comply with its requests.

Legal base

Your personal data will be processed for the execution of a contract concluded with you or for the execution of pre-contractual measures taken at your request, for the need to comply with legal obligations or by a regulation or by Community legislation, including those provided for by tax legislation.

Data recipients

1 The processing of personal data means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, preservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction. The updated list of subjects appointed External Data Processors or expressly authorized for processing may be requested by e-mail to the following address: info@prometeomeccanica.it

Your data, where necessary and in compliance with the principle of relevance, may be disclosed to the following categories of subjects, indicated below, who will carry out the processing as Independent Data Controllers:

– banks, credit institutions and insurance

– Public Administrations and Financial Offices;

– notarial studies;

– persons who have access to them by virtue of provisions of law or secondary or Community legislation;

– a firm of auditors;

The Company may also disclose your personal data to third parties (i) where provided for by EU or Member State legislation; (ii) in the case of legal proceedings; (iii) in response to a request from the police on a legitimate basis; (iv) to protect the rights, privacy, security or property of the Company and, to the extent permitted by law, to investigate, prevent or take measures regarding illegal activities, suspicious fraud.

Times of storage of data

In accordance with the general principles dictated in accounting and administrative matters and for the needs arising from the management of any dispute, the data will be stored, in storage, for a period of 10 years from the termination of the contractual relationship. In any case, this is without prejudice to cases where storage for a subsequent period is requested by the competent authorities or in accordance with the applicable legislation. Upon termination of the retention period, the data will be deleted, anonymised or aggregated.

Data transfer

The Data Controller does not transfer personal data to third countries or international organisations.

However, it reserves the right to use services in the cloud; in which case, the service providers will be selected from those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

Rights of the data subject

Pursuant to Articles 13, paragraph 2, and 15 to 21 of the Regulation, we inform you that with regard to the processing of your personal data you may exercise the following rights:

a)Right to obtain access to personal data and the following information:

– confirmation that the processing of your personal data is ongoing or not;

– the purposes of the processing;

– categories of personal data;

– the recipients or categories of recipients to whom the personal data have been or will be disclosed;

– where the data are not collected from the data subject, all available information on their origin;

– the existence of automated decision-making, including profiling;

– a copy of the personal data processed.

b) Right to rectification and integration of personal data;

c) Right to erasure data («right to be forgotten») if one of the following reasons exists:

1. personal data are no longer necessary for the purposes for which they were collected or otherwise processed;

2. the data subject withdraws consent to the processing of the data and there is no other legal basis for the processing;

3. the data subject opposes the processing and there is no overriding legitimate reason for processing;

4. personal data have been processed unlawfully;

5. personal data must be deleted in order to fulfil a legal obligation under Union or Member State law to which the controller is subject.

If the data controller has made personal data public and is obliged to delete them, he must inform the other data controllers processing personal data of the request to delete any link, copy or reproduction of his data.

d) Right to restriction of processing in case:

1. the data subject contests the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of such personal data;

2. the processing is unlawful and the data subject opposes the deletion of personal data and instead requests that its use be restricted;

3. although the data controller no longer needs it for the purposes of processing, the personal data are necessary for the data subject to establish, exercise or defend a right in court;

4. the data subject has opposed the processing, pending the verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the data subject.

e) Right to lodge a complaint to the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority www.garanteprivacy.it.

f) Right to portability the data subject’s data or the right to receive, in a structured, commonly used and machine-readable format, the personal data concerning him or her provided to a data controller and, where appropriate, to transmit them to another data controller, if the processing is based on consent or a contract and is carried out by automated means. Where technically possible, the data subject shall have the right to obtain the direct transmission of data from one controller to another.

g) Right to object at any time to the processing of personal data, including profiling, in particular where:

1.the processing takes place on the basis of the legitimate interest of the data controller, having explained the reasons for the opposition;

2. Personal data are processed for direct marketing purposes.

h) Right not to be subject to a decision based solely on automated processing, including the profilingexcept where the decision: is necessary for the conclusion or performance of a contract between the data subject and a controller, is authorised by Union or Member State law to which the controller is subject or is based on the data subject’s explicit consent.

i) Right to withdraw consent at any time; the data, if not based on another legal basis (including, fulfilment of a legal obligation or execution of a contract) must be deleted by the owner. The exercise of rights is not subject to any formal constraint and is free of charge.

How to exercise the rights

The interested party may at any time exercise the rights by sending:

– a recommended a/r a: Prometeo s.r.l. based in Strada degli Schiocchi, 42 – 41124 Modena

– an e-mail to: info@prometeomeccanica.it

Data controller

The data controller is: Prometeo s.r.l. based in Strada degli Schiocchi, 42 – 41124 Modena