Information pursuant to Art. 13 of the Regulation (EU) 2016/679 on the protection of Personal Data (GDPR) and request for consent for the processing of Personal Data
IMA S.p.A. (hereinafter “IMA” or the “Company” or “Data Controller”), having its seat in Ozzano dell’Emilia (BO) IT, Via Emilia n. 428-442, on its own behalf and/or as the holding company of the Ima Group, which incorporates subsidiaries as defined in Article 2359 of the Italian civil code, in its vest of the Data Controller of your Personal Data spontaneously communicated (hereinafter “Personal Data”) is providing you with the present notice pursuant to Art. 13 of the GDPR. The updated list of the companies belonging to the IMA Group here available on: https://ima.it/ima-group/companies/ (hereinafter “IMA Group companies”)
Your Personal Data will be processed:
(i) without your consent (section 6, letters b) c) and f) GDPR), for the following purposes:
(ii) with your consent (Art. 7, GDPR), which can be subsequently revoked at any time, for the following purposes:
For the purposes under Art. 2 letters d) and e) (ii) above, the collection of your Personal Data is made on voluntary basis; consequently, you may decide not to provide us with any express consent, or to waive it in any moment. The lack of any express consent to process such data may cause the impossibility for IMA and the IMA Group companies to perform the above-mentioned activities.
Within the purposes of processes mentioned under Art. 2 above, we shall exclusively process those Personal Data concerning:
At any time you can verify that your Personal Data processed for the purposes set forth in the present notice are correct and, if violated, you can ask their update through the following e-mail address: firstname.lastname@example.org or by mail to our Company headquarter.
The processing of your Personal Data is carried out by means of the operations indicated in Art. 4, no. 2), GDPR and more precisely: collection, registration, organization, structuring, updating, preservation, adaptation or modification, extraction and analysis, consultation, use, communication by transmission, comparison, interconnection, limitation, cancellation or destruction.
IMA guarantees the logical and physical security of the data and, in general, the confidentiality of the processed Personal Data, putting in place all the necessary technical and organizational measures to prevent the loss of Personal Data, illicit use or, in any case, incorrect of the same, as well as unauthorized access by third parties.
The processing by IMA of your Personal Data will be based on correctness principles, lawfulness, transparency and protection of your privacy and your rights, in accordance with the principles expressed by the GDPR and the Privacy Code (Legislative Decree n. 196/2003).
Personal Data may be processed by paper-based instruments, computerized and telematics tools and it will include – in compliance with the limits and conditions laid down by the privacy legislation – all the operations or set of operations necessary for the processing at issue. The processing of Personal Data will be carried out in compliance with confidentiality and security rules provided by for European laws, by law, regulations and domestic provisions.
The Personal Data you will submit us for the purposes mentioned under Art. 2 above, could be transferred to:
Personal Data will not be disclosed or transferred to third parties.
It is understood that, in the event of any extraordinary corporate transactions (e.g. transfer or lease of a company, merger, etc.) concerning the Data Controller, Personal Data could be transferred to third party (buyers/beneficiaries or successors in title to the Data Controller).
The complex business structure of IMA implies, necessarily, a cross-border circulation of data that under the law is seen as transfer of data abroad, even outside the territory of the European Union.
Your data, if transferred to countries outside the European Union, will always be processed in accordance with the principles set out in Art. 45 and 46 of the GDPR regarding the existence of an adequacy decision by the European Commission.
Personal Data are processed and stored on servers located in the Company headquarter.
The transfer to non EU-countries shall always be performed in compliance with the provisions of Art. 45 and 46 GDPR, by providing adequate guarantees and subject to an adequacy decision adopted by the European Commission.
Your Personal Data will not be subject to dissemination.
Your Personal Data will be stored for the period of time strictly necessary for the pursuit of the purposes of the data processing indicated in Art. 2 above and, specifically:
With reference to your Personal Data you can exercise, at any time, the rights pursuant the GDPR as indicated below:
You may exercise your above listed rights by means of a request to be sent by e-mail to email@example.com or by mail to the Company headquarter.