Information report for the parties concerned according to the article No. 13 of the 2016/679 EU Regulation. Rules relating to the protection of natural persons with regard to the processing of personal data. GDPR – (General Data Protection Regulation – EU Regulation 679/2016). Privacy Code Legislative Decree 196/2003 (amended by the 101/2018 Legislative Decree).

The company RETTIFICATRICI GHIRINGHELLI SPA wishes to inform the parties concerned, who are involved in the treatment, that the personal data transmitted or related to the interested party, is treated by the undersigned Company by fully observing the current regulations concerning the data treatment and the confidentiality obligations, which have always inspired us. As 'Personal data treatment', we mean any operation or set of operations carried out even without the support of electronic means, related to gathering, recording, organizing, preserving, consulting, elaborating, modifying, selecting, extracting, comparing, using, interconnecting, blocking, communicating, spreading, cancelling and destroying data, even if not recorded in a data bank.

According to the art. 13 of the GDPR (EU Regulation 679/2016) concerning the personal data which we treat after establishing mutual contractual and working relations, we release the information here below.

Owner of the treatment

The 'owner of the treatment', to all law intents and purposes, is RETTIFICATRICI GHIRINGHELLI SPA headquartered in Luino (VA) 21016– via Asmara 19 – which can be reached at the e-mail address info@ghiringhelli.it

Treatment purposes

The personal data of natural persons – directly provided by the interested parties, or by companies who have commercial or contractual relationships with the undersigned Company, is treated according to the main activity of the company (manufacturing of centerless grinding machines with numerical control) and the consequent fiscal and legal obligation fulfilments; this treatment will last for the whole period of the commercial / contractual relation and also later on, for legal obligation fulfilment and for administrative and fiscal purposes.

The personal data that the involved party provides through the 'Contacts' page of the website www.ghiringhelli.it is acquired and mainly processed:

• For sending replies to requests from the interested parties;
• For sending brochures to the email address indicated;
• For processing statistical reports.

In relation to any and subsequent contractual commitment, the data of the interested party provided in the way described above or subsequently provided, may be processed for contractual needs and for the consequent fulfilment of legal and fiscal obligations, as well as for automated profiling activities; such treatment will last for the whole period of the commercial / contractual relationship and even after for the fulfilment of legal obligations and for administrative and fiscal purposes. In addition, if you visit our website the system can acquire technical browsing data related to the IP address, identification codes of the devices managed by the user to utilize the pages or the services, data referred to the browser features and to the time of access, and other anonymized browsing data. Within the scope of the purposes for which personal data is collected, the company RETTIFICATRICI GHIRINGHELLI SPA carries out the treatment of the aforementioned data according to the principles of correctness, lawfulness, transparency and protection of the privacy of the rights of the interested party.

Nature of the provision

Personal data is always collected at the interested party.

The provision of the aforementioned data, necessary for the purposes described above, is compulsory for fulfilling the contractual and commercial obligations; the refusal to give these data could cause the partial or the non-fulfilment of the company’s services.

Processing methods

The data processing takes place according to the principles of correctness, lawfulness and transparency by means of instruments and procedures suitable to guarantee the safety and the confidentiality, and could be carried out both through paper and electronic means. The treatment is carried out by adopting appropriate safety measures able to reduce the risk – to the minimum level - of unauthorized access to the data by a third party, of its destruction and/or deterioration, and to grant confidentiality according to the art. 32 of the GDPR.

Personal data storage

The Personal Data will be kept only for the necessary time for the purposes for which it is collected, thus respecting the principle of minimization referred to in article 5, subsection 1, letter c) of the GDPR, as well as the legal obligations to which the Owner is required. More information on storage and processing time is available at the Owner’s.

Data communication

The personal data will in no way be diffused, while it can be communicated by us:

• to the opportunely nominated people in charge of its treatment inside the company;
• to associations connected to the Company;
• to subjects who need to have access to such data for auxiliary tasks connected to the relationship between our Company and the interested party, within the strictly necessary limits to carry out the auxiliary tasks it has been entrusted with, as for example: banks, administrative consultancy offices (public accountant)

Special categories of personal data

When sending curricula, according to art. 9 and 10 of the GDPR 2016/679, the concerned party could voluntarily communicate to the undersigned Company some data qualified as “personal data special categories” (that is those data revealing ethnical or racial origin, political opinions, philosophical or religious beliefs, or the union membership…genetic, biometric data allowing a physical person to be univocally identified, data related to the health, the sexual life or the sexual orientation of a person). Such data category can be treated by the undersigned Company only with the concerned party written agreement.

Rights of the interested party

The party involved in the treatment can, at any time, exercise his / her rights according to the articles 15-22 of the GDPR:

1. Receive the confirmation if there is a personal data treatment taking place and if so, get access to the personal data and to all the information according to art. 15 of the GDPR;
2. Receive the correction of wrong personal data without unjustified delay. In consideration of the treatment purposes, the interested party has the right to get the integration of the incomplete personal data, even by supplying a supplementary declaration.
3. Get personal data cancellation without unjustified delay;
4. Get treatment limitation when one of the hypotheses - according to art. 18 of the GDPR - occurs;
5. Receive in a structured, commonly used, readable format by an automatic device, the personal data of the involved party supplied by the undersigned Company;
6. Oppose at any moment for reasons connected to the particular situation of the interested party, to the personal data treatment according to art. 6, paragraph 1, letter e) or f) of the GDPR. In this case the company will stop furtherly treating the personal data, except for the existence of legally binding legitimate reasons to proceed with the treatment, which prevail on the interests, on the rights and on the freedom of the interested party, or for the assessment, exercise or defense of a right in Court;
7. Not be submitted to a decision only based on automated processing, thus producing juridical effects concerning the interested party. This right is not applicable in the cases regulated by art. 22, paragraph 2 of the GDPR;
8. Address to the supervisory Authority for claiming, if you think the data of the interested party was unlawfully processed.