Privacy Policy

 

1. DATA CONTROLLER

 

The Data Controller is Mozzanica & Mozzanica S.r.l. (with registered office in Osnago (LC) Via Martiri della Liberazione, 12) (hereinafter "Mozzanica" or "we"), which is responsible to you for the legitimate and correct processing of your Data.

 

2. THE PERSONAL DATA WE PROCESS

 

The Data that will be processed by us includes, but is not limited to:

1. The data requested when subscribing to our newsletter (i.e. e-mail address);
2. the data requested in the "Contacts" section of our institutional website (Name, Surname, Company, telephone and e-mail address) and any personal data contained in the message you want to send us.

 

3. PURPOSE AND LEGAL BASIS OF DATA PROCESSING

 

1. Your Data will be processed to respond to your message and to respond to any requests you have received by filling out the form in the "Contacts" of our institutional website (the "Website”).

The legal basis for the processing of your Data for the above purpose is the need to implement pre-contractual measures pursuant to Article 6.1 letter b) of the GDPR, as well as our legitimate interest in responding to messages received via the Website (pursuant to Art. 6.1. lit. f) GDPR) on which we believe that no fundamental right, interest or freedom of yours prevails.

2. Your Data will be processed to allow us to carry out advertising or direct sales activities or to carry out market research or commercial communication, with automated tools (email, sms, mms).

The legal basis for the processing of Data for the above purpose is your consent, pursuant to the provisions of Article 6.1 letter a) of the GDPR.

3. Your Data may be communications to communication agencies/companies that organize events for the performance of commercial information activities and for the sending of commercial communications and newsletters as well as invitations to events in the fire-fighting sector.

The legal basis for the processing of Data for the above purpose is your consent, pursuant to the provisions of Article 6.1 letter a) of the GDPR.

 

4. DATA RECIPIENTS – DATA TRANSFER TO THIRD COUNTRIES / INTERNATIONAL ORGANIZATIONS

 

1. SCOPE OF CIRCULATION OF PERSONAL DATA

As part of the processing of Data for the purposes referred to in point 3 above, your Personal Data may be communicated or otherwise made accessible to third parties belonging to the following categories:

• IT consultants and IT management/maintenance service providers of corporate information systems and management software including system administrators;
• email service providers;
• companies that deal with the mass sending of promotional emails/newsletters;
• communication agencies and companies that organize events in the firefighting sector.

Where necessary, we will appoint our external third party Data Processors pursuant to art. 28 of the GDPR.

Upon request addressed to us using the contact details indicated in point 7 below, we will indicate who are the third parties to whom your Data have been communicated.

Within our company organization, your Data will be communicated and processed by the employees of the Sales departments. All the aforementioned subjects will be duly authorized and instructed by us to process them, pursuant to art. 29 of the GDPR. Your Data may also be accessed by the IT consultant, the President and the shareholders of Mozzanica.

 

2. TRANSFER OF PERSONAL DATA ABROAD

As part of the purposes set out in point 3(b), your Data may be communicated to e3 Software LLC, a company based in the United States that provides e-mail marketing services/periodic sending of newsletters. In this case, we inform you that any transfer of Data will be carried out in accordance with the standard contractual clauses approved by the European Commission (in particular, the standard contractual clauses contained in "Set II" of the Annex to the EU Commission Decision no. 2004/915/EC, available at the      following       link:            http://www.garanteprivacy.it/home/provvedimenti- normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati- verso-paesi-terzi) or, failing that, in accordance with Art. 49.1 letter b) or c) of the GDPR, as necessary for the performance of the employment contract between us or for the performance of a contract with our customers, it being understood that the transfer of your Data will be limited to the Data strictly necessary for the pursuit of the aforementioned purposes.

 

5. DATA RETENTION PERIOD

 

Data processed for the purposes set out in points 3(a) and 3(b) will be retained for five (5) years from its registration in our systems.

In the event that a dispute arises, your Personal Data will be processed for as long as is necessary in relation to said dispute.

In general, after the retention periods indicated above, the Personal Data will be deleted.

 

6. MANDATORY OR OPTIONAL NATURE OF THE PROVISION OF DATA – CONSEQUENCES OF ANY REFUSAL

 

The provision of Data for the purposes referred to in point 3(a) above is a necessary requirement to get in touch with you and/or respond to your message; consequently, in case of your refusal, we will not be able to verify your message and respond to your requests.

The provision of Data for the purposes referred to in points 3(b) and 3(c) is optional and you may always object to the processing of the same for marketing purposes or revoke your consent to the communication of your data to third parties for marketing purposes, without prejudice to the lawfulness of the processing of your Data based on consent and carried out before the withdrawal.

 

 

7. RIGHTS OF THE DATA SUBJECT

 

Pursuant to Articles 13(2)(b), (c) and (d), 15, 16, 17, 18, 19, 20 and 21 of the GDPR, we hereby inform you that:

1. You have the right to request access to your Personal Data together with information on the purpose of the processing, the category of Data processed, the subjects or categories of subjects to whom they have been or will be disclosed (with an indication of whether these subjects are located in third countries or are international organizations), where possible the period of retention of the Data or the criteria used to determine such period, the existence of your rights to rectification and/or erasure of Personal Data, restriction of processing and objection to processing, your right to lodge a complaint with a supervisory authority, the origin of the Data, the existence and logic applied in the case of automated decision- making. If you exercise this right and unless otherwise indicated by you, you will receive a copy in electronic format of your Data that is being processed.
2. You also have the right to obtain:

• the correction of your Data, if they are inaccurate or incomplete;
• the deletion of your Data, if one of the conditions set out in Article 17 of the GDPR exists (for example: your Data are no longer necessary in relation to the purposes for which they were collected, you decide to withdraw your consent to the processing – where this represents the legal basis – and there is no other legal basis for the processing itself, You object to the processing and no other legitimate interest of the Data Controller prevails, your Data are unlawfully processed);
• The limitation of the processing of Data concerning you 1) for the time necessary for Mozzanica to ascertain the accuracy of your Data (in the event that you have contested it), or 2) if the processing of the Data is unlawful and you request, instead of the deletion of your Data, the limitation of the related processing, or 3) when Mozzanica no longer needs your Data but the same are necessary for you to ascertain, exercise or defend a right in court, or, finally, 4) for the time necessary to assess the possible prevalence of the legitimate reasons of the Data Controller over yours, if you have objected to the processing of your Data pursuant to point c below;
• Your Data in a structured, commonly used and machine-readable format, also for the purpose of transmitting them to another controller, if the processing is based on consent or on a contract and is carried out by automated means (so- called right to data portability). If you are interested, you can ask Mozzanica to transmit your Data directly to the other controller, if this is technically feasible.

3. You also have the right to object to the processing of your Data, if such processing is carried out pursuant to Article 6.1 letter e) (i.e. to comply with a legal obligation to which the Data Controller is subject) or letter f) (i.e. to pursue a legitimate interest of the Data Controller) of the GDPR, unless there are compelling legitimate reasons of the Data Controller to proceed with the processing, pursuant to art. 21 of the GDPR.
4. You also have the right to revoke at any time the consent given for the purposes described in points 3(b) and 3(c) above, without prejudice to the lawfulness of the processing of your Data based on consent and carried out before the withdrawal.
5. If you are not satisfied with the processing of your Data carried out by Us, you may lodge a complaint with the Data Protection Authority, following the procedures and indications published on the official website of this authority (www.garanteprivacy.it).
6. Any rectification or deletion of your Data or restriction of processing carried out at your request – unless this proves impossible or involves a disproportionate effort – will be communicated by Us to each of the recipients to whom your Personal Data may have been transmitted in accordance with this policy.