INFORMATION TO DATA SUBJECT
This information is provided in accordance with article 13 of the Legislative Decree n° 196 of June 2003, the “Italian Personal Data Protection Code” (hereinafter “Privacy Code”) for the website available at the address: http://www.mumac.it/ website (hereinafter “the Website”) owned by Gruppo Cimbali S.p.A. – VAT ID/tax ID no. and registration no. in the Milan Registry of Businesses: 0905210015, with offices in Binasco (MI), Alessandro Manzoni street, n° 17, 20082, tax ID no. and VAT ID no. 09052100154 (hereinafter “Cimbali”).
- Controllers and Processors
The data controller is Cimbali.
The data processor is Roberto Chiodini.
You can obtain an updated list of the data processors by sending a request to the email address firstname.lastname@example.org.
The data subject is any user who accesses to the Website.
- Purposes of Processing
The user’s personal data shall be processed for the following purposes:
- a) so that the user can properly use the Website;
- b) so that communications can be sent to the user, both in hard copy and digital or automated form;
- c) for profiling purposes.
- Procedure and tools for processing
The user’s data shall be processed through an automated procedure with IT and online tools using data processing and organization logics linked to the above-mentioned purposes, and in any case, so as to guarantee the security and the confidentiality of both data and communications. The data may also be processed with paper tools.
The IT systems set up for the running of the Website may acquire some data during the running itself, whose processing is a characterizing element of the Internet communication protocols. When gathered, these data may be used for the sole purpose of checking the Website operation parameters and of gathering statistical information.
For example, the data that fall under this category are: IP addresses of devices used by the users, the number of times that a website was entered, the number of pages viewed and the relative viewing data, the URL address that the browser was in before viewing the page, the type of navigation browser, and the operating system used.
Navigation data and environmental variables
The IT systems and procedures set up for the running of the Website automatically acquire some personal data in relation to the user’s navigation, including environmental variables, as part of their normal running.
Cookie and pixel tracking
Cookies are small text files that a given website puts into the user’s device through the browser, in order to process certain information regarding the navigation activities on the Internet. Pixel tracking offers an analogous function: small code parts issued by some systems and with the purpose of tracing some data relative to the user’s navigation session. For easy consultation, in this information we will refer to this and other hidden markers simply as “cookies”.
The Website uses technical cookies for the sole purpose of transmitting data communication on the Website itself, also to provide a function or a service explicitly requested by the user. The expiration times may be up to 365 days.
The Website uses statistical cookies created by Cimbali itself or provided by third parties. In the latter case, proper tools have been adopted in order to lower the identifiability, also by masking major parts of the IP addresses processed this way. The use of such third-party statistical cookies is also subject to contractual restraints that bind the third party to use them exclusively for the provision of the service, keep them separately, and not to “enrich them” or “cross them” with other information that the third parties may have.
For what concerns Google Analytics cookies, the information about the use of the Website by the users, that may be obtained from the cookies, shall be sent by the user’s browser to Google Inc., with offices in 1600 Amphitheater Parkway, Mountain View, CA 94043, United States, and stored in the servers of the company itself.
Please read Google’s privacy rules available at the following address: http://www.google.com/intl/it/privacy/privacy-policy.html.
The privacy information on Google Analytics’ Services is available at the following address: http://www.google.com/intl/en/analytics/privacyoverview.html.
The Website uses profiling cookies provided by third parties. These cookies make possible for the user to receive personalized services. In this manner, localization data can be gathered from the users’ terminals and Wi-Fi access points, IP addresses, MAC addresses, and data relative to the speed of connection.
Deleting and deactivating cookies
Since cookies are normal text files you can access them by using word processing programs.
In any event, you can set up your browser in order to keep it from processing cookies. Just to give an example, below are listed the ways you can deactivate and delete the cookies from the main web browsers:
Delete/deactivate cookies with Firefox:
Delete/deactivate cookies with Explorer:
Delete/deactivate cookies with Chrome:
As an alternative, you can deactivate just the Google Analytics cookies, by using the opt-out additional component provided by Google for the main browsers.
Data voluntarily provided by the user
The data freely and voluntarily provided by the user by sending an email to the addresses indicated on the Website, may be acquired for the purposes indicated from time to time.
Specifically, besides the email address needed in order to answer to the sender, other personal data, contained in the relative communication, shall be processed.
Data gathered in such manner shall be kept and processed exclusively for the purposes of keeping correspondence and shall not be used for other purposes.
Those data, freely and voluntarily provided by the user with the registration form, are acquired for the purposes under letter b) point 2.
Data thus gathered shall be kept and processed exclusively for the purposes listed above.
- Mandatory or facultative nature of data provision
Regarding the purposes under letter a) of point 2), without prejudice of what specified above about the navigation data and technical cookies, the provision of all other personal data requested by the users of the Website is facultative and entirely up to the user.
If the user does not provide personal data for these purposes, it shall not entail any consequences for the user.
Regarding the processing of personal data under letter b) of point 2) the user’s consent is facultative; however, if consent is not provided, it won’t be possible to send him sales or promotional communications.
Regarding the processing of personal data under letter c) of point 2) the user’s consent is facultative; however, if the consent is not provided it won’t be possible to provide personalized services.
- Scope of communication
For the above-mentioned purposes, employees designated by charged as persons in charge of the processing.
Data may be communicated inside and outside the European Union.
The users’ personal data shall not be divulged.
- Relevant Party’s Rights
As set forth in art. 7, Legislative Decree 196/03, in the capacity of data subject, the user shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
A data subject shall have the right to be informed:
- of the source of the personal data;
- of the purposes and methods of the processing;
- of the logic applied to the processing, if the latter is carried out with the help of electronic means;
- of the identification data concerning data controller, data processors and the representative designated as per Section 5(2) of the Privacy Code;
- of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
A data subject shall have the following rights:
- to obtain updating, rectification or, where interested therein, integration of the data;
- to obtain erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
- to obtain certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
A data subject shall have the right to object, in whole or in part:
- on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
- to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
In this case, it is specified how the right of the relevant party to oppose processing of his or her personal data for the above-mentioned purposes may be exercised even just in part, as set forth in art. 7, paragraph 4 lett. b), of the Privacy Code, for example, by opposing just the sending of promotional communications with digital and/or automated tools or with paper tools.
Petitions in accordance with art. 7 of Legislative Decree 196/03 may be sent directly to Cimbali to the email address email@example.com. Alternatively, you can exercise your rights by sending a communication with registered mail with return receipt to Cimbali, to the address Via Manzoni 17, 20082 Binasco (MI).
This privacy information may be changed over time; you can get the information above by sending a request to the address http://firstname.lastname@example.org.
Users are therefore asked to consult this page periodically.
Milan, 27 September 2017