Privacy Notice Regarding the Processing of Personal Data Pursuant to Articles 13–14 of EU Regulation 2016/679

Data Subjects: Website users.

TECNOLAFER SRL, in its capacity as the Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679 (hereinafter the “GDPR”), hereby informs you that the aforementioned regulation provides for the protection of data subjects with regard to the processing of personal data and that such processing will be based on the principles of fairness, lawfulness, transparency, and the protection of your privacy and your rights.

Your personal data will be processed in accordance with the provisions of the aforementioned legislation and the confidentiality obligations set forth therein.

Purpose and legal basis of the processing: specifically, your data will be used for the following purposes related to the performance of measures connected with contractual or pre-contractual obligations:

• Technical and functional access to the Site: no data is retained after the browser is closed;
• Advanced navigation or personalized content management;
• Statistical and analytical purposes related to website traffic and user behavior.

Methods of processing. Your personal data may be processed in the following ways:

• using electronic computers and software systems managed by third parties;
• using computers with software systems that are either managed or programmed directly;
• Temporary processing in anonymous form.

All processing is carried out in accordance with the procedures set forth in Articles 6 and 32 of the GDPR and through the implementation of the appropriate security measures required.

Your data will be processed solely by personnel expressly authorized by the Data Controller and, in particular, by the following categories of authorized personnel:

• Programmers and Analysts.

Disclosure: Your personal data will not be disclosed in any way.

Your personal data may also be transferred, solely for the purposes listed above, to the following countries:

• EU countries;
• United States.

Retention Period. Please note that, in accordance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Article 5 of the GDPR, the retention period for your personal data is:

• retained for a period not exceeding the time necessary to achieve the purposes for which they are collected and processed, for the performance and fulfillment of contractual obligations;
• set for a period not exceeding the duration of the services provided;
• retained for a period not exceeding the time necessary to achieve the purposes for which they are collected and processed, and in compliance with the mandatory time limits prescribed by law.

Cookie management: If you have any questions or concerns about the use of cookies, you can always take steps to prevent them from being set or read, for example by changing the privacy settings in your browser to block certain types of cookies.

Since each browser—and often different versions of the same browser—can vary significantly from one another, if you prefer to manage this yourself through your browser settings, you can find detailed instructions on how to do so in your browser’s help section. For an overview of how to do this in the most common browsers, visit www.cookiepedia.co.uk.

Advertising companies also allow you to opt out of receiving targeted ads, if you wish. This does not prevent cookies from being set, but it stops these companies from using and collecting certain data.

For more information and cancellation options, visit www.youronlinechoices.eu/.

Data Controller: The data controller, as defined by law, is TECNOLAFER SRL (Via Mattei, 15/17, 20010 Casorezzo (MI), VAT No. 10329910961, which can be contacted at the following addresses: email claudia.papetti@tecnolafer.it, phone 02 90381169).

You have the right to request from the data controller the erasure (right to be forgotten), restriction, updating, rectification, and portability of your personal data, as well as the right to object to the processing of such data; furthermore, you may generally exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, and 22 of the GDPR.

EU Regulation 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her are being processed, even if not yet recorded, to receive such data in a comprehensible form, and to lodge a complaint with the supervisory authority.

2. The data subject has the right to obtain information regarding:

1. the origin of the personal data;
2. the purposes and methods of processing;
3. the logic applied in the case of processing carried out with the aid of electronic means;
4. the identification details of the data controller, the data processors, and the designated representative pursuant to Article 5, paragraph 2;
5. the individuals or categories of individuals to whom the personal data may be disclosed or who may become aware of it in their capacity as a designated representative within the country, data processors, or persons in charge of processing.

3. The data subject has the right to obtain:

1. the updating, correction, or, where applicable, supplementation of the data;
2. the erasure, anonymization, or blocking of data processed in violation of the law, including data that no longer needs to be retained for the purposes for which it was collected or subsequently processed;
3. a statement confirming that the processing operations referred to in subparagraphs (a) and (b) have been brought to the attention—including with regard to their content—of those to whom the data have been disclosed or made available, except where this proves impossible or involves a clearly disproportionate effort compared to the right being protected;
4. data portability.

4. The data subject has the right to object, in whole or in part:

1. for legitimate reasons, to the processing of personal data concerning him or her, even if such data is relevant to the purpose for which it was collected;
2. to the processing of personal data concerning him or her for the purposes of sending advertising or direct sales materials, or for conducting market research or commercial communications.