PURPOSE AND METHODS OF DATA PROCESSING, AND TYPES OF DATA PROCESSED 1. This data will be used only to meet its intended purpose, that is to respond to users’ requests submitted through the Web Site. In particular, data may be processed for the following purposes: a) to provide a service, or respond to one or more requests; to this end, it may be necessary to disclose data to third parties; b) to comply with obligations stipulated under relevant laws; c) for operational management and internal purposes relating to the services and/or products offered by IMA.
In cases where explicit and voluntary consent has been provided, data will also be processed for: a) marketing and/ or promotional purposes and users may receive advertising material (in both printed and electronic form) in relation to the services and/ or products offered by IMA and/ or subsidiaries/ associated companies, b) marketing and/ or promotional purposes and users may receive advertising material (in both printed and electronic form) in relation to the services and/ or products offered by third parties; c) sending newsletters.
Data related to job applications (with regard to both speculative applications and job offers, and including any sensitive data) are directly provided by each data subjects when he or she fills the on line form, as well as in any subsequent interviews aimed at recruiting. The aforementioned data is processed for the following purposes: a) to seek, evaluate, select, and contact interested parties in working with IMA and/or with the IMA group; b) to inform the job candidate about events and/or initiatives and/or conferences related to her or his request.
These activities can be carried out by IMA and/or by its group, including its subsidiaries.
Data will be managed lawfully, and used only for the aforementioned purposes. It will be processed using suitable means to guarantee its security and confidentiality, using the most appropriate means (hard copy or electronic) to store, manage and transmit the data. This data will be retained for the period stipulated under the relevant law.
3. NATURE OF DATA PROVISION AND CONSEQUENCES OF A REFUSAL 1.Consent to the processing of personal data for the purposes of Article 1, paragraph 1, section a), b) and c) is required only for the purposes specified herein. The User will be informed of the consequences of a refusal depending on the circumstances of each individual case, without prejudice to what is stipulated in this policy. A refusal in providing such consent may prevent the User to access and use the Web site services, such as documents and brochures download. 2. Consent to the processing of personal data for the purposes of Article 1, paragraphs 2 and 3, is optional. Failure to provide data has no prejudicial consequences for the User, but he or she will not receive any information (paragraph 2), or will not be entitled to apply to IMA or to its group of companies (paragraph 3).
DATA CONTROLLER AND OTHER INFORMATION 1. Through use of the Web Site, users’ data may be collected and processed for identification purposes. The “controller” of this data is IMA – Industria Macchine Automatiche S.p.A., VAT n. IT00500931209, with registered office in Ozzano dell’Emilia (BO), Via Emilia n. 428-442, P.E:C.: email@example.com (“IMA”). IMA is the parent company of the IMA Group; any information provided by the User may be transmitted to IMA’s subsidiaries in compliance with the law in force.
The list of the corporate group can be consulted by contacting the data controller at the above mentioned addresses as well as by viewing the relevant section on the Web Site. These companies may be established outside the European Union; IMA guarantees that the privacy policies of the aforementioned companies comply with the applicable national and European regulations, as well as those set by the Privacy Shield.
The processing of the data provided by the User, or otherwise lawfully acquired in providing products and services, may also be carried out by third-parties who have been granted the right to access such personal data by national or European laws.
The User’s information will not be disclosed to third parties. Only in exceptional cases and for the sake of protecting health and safety, the data be communicated to the producer or distributor of a product/service purchased by the User if, after the sale of the product, a Product or Service defect would be acknowledged and a safety recall campaign is needed. IMA puts in place and will make every reasonable effort to provide only safe products and services
5. CATEGORIES OF PROCESSED DATA/ SPECIFIC PROCESSINGS
Different types of personal data may be processed and treated differently, depending on the services rendered. The specific treatment for each type of data can be found in this article. Each person concerned is invited to read carefully article 6 (Rights of Data Subjects).
4.1 Navigation data
The information systems and software procedures used to the operation of this web site acquire personal data as part of their standard functioning. Such information is not collected in order to relate it to identifiable data subjects, however, it may allow User identification after being processed and matched with data held by third parties.
This data category includes the: IP addresses or names of computer domains used by visitors who access the website; URI (Uniform Resource Identifier) addresses of the requested resources; time of request; method used to submit the request to the server; size of the file obtained in response; numerical code indicating the status of the response from the server and other details relating to the operating system and the information environment of Users. This data is used only to obtain anonymous statistical information about the website and to check its correct functioning, and is deleted immediately after processing. This data may also be used to ascertain responsibility in the case of possible computer crimes against the website. Excepting this, data on web contacts is not stored for more than seven days. As for cookies, please refer to paragraph 5.3.
4.2.1 Data supplied voluntarily by the User (messages)
The voluntary and explicit sending of communications by means of contact forms supplied by the site or by e-mail emails to the contact addresses on this website will entail the subsequent acquisition of the sender’s data, including his e-mail address, and the consent to receive replies to his request.
The personal data provided herein are used solely for the purpose of responding to the submitted requests and are disclosed to third parties only if this is necessary for that purpose. The data will be stored for the times prescribed by law.
4.2.2 Data supplied voluntarily by the User (advertising materials and/or quotes)
Users can voluntarily provide personal information to IMA in order to receive print or electronic advertising material, by whatever name it may be known, including but not limited to quotes. Each message includes a notice that its recipient can object, on request and without formalities, to such processing of personal data. Data subject can request Data Controller to erase or anonymize his/her personal information.
DATA SUBJECTS’ RIGHTS
Data subjects may exercise all the rights set forth by article 7 of the legislative decree n. 196/2003 by making a request to IMA without formalities.
Requests can be made by:
– mail: IMA – Industria Macchine Automatiche S.p.A., Via Emilia n. 428-442, Ozzano dell’Emilia (BO), Italy.
Article 7, legislative decree no. 196/2003 (Right to Access Personal Data and Other Rights)
A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
A data subject shall have the right to be informed:
a) of the source of the personal data;
b) of the purposes and methods of the processing;
c) of the logic applied to the processing, if the latter is carried out with the help of electronic means;
d) of the identification data concerning data controller, data processors and the representative designated as per Article 5, paragraph 2;
e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative in the State’s territory, data processors or persons in charge of the processing.
A data subject shall have the right to obtain
a) updating, rectification or, where interested therein, integration of the data;
b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
A data subject shall have the right to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.