(Art. 13 of EU Regulation no.679 of 27 April 2016, on the protection of personal data “GDPR”)
In compliance with requirements imposed by the General Regulation on the protection of personal data, the process Controller hereby provides the data subject with the following information on the processing of personal data carried out.
PROCESS CONTROLLER
Company name: PM Oil&Steel S.p.A.
VAT / Tax Code: IT03520360961 / IT03520360961
CONTACTS FOR EXERCISING RIGHTS
Requests to exercise the rights established by the GDPR or any revocation of consent given may be sent to the Controller at the following contact details:
Address: Via G. Verdi 22 – 41018, San Cesario sul Panaro (MO) – Italia
Contact details: +39 059 936811, referente_privacy@pm-group.eu
CATEGORIES OF DATA SUBJECTS
Potential customers, Potential suppliers, Website visitors
PROCESSING
Here below please find a list of the personal data processing involving the data subject
MANAGEMENT OF RELATIONS WITH THE CUSTOMER AND POTENTIAL CUSTOMER
Purposes requiring consent: Sending marketing papers, sending newsletters to enrolled customers
Types of data processed: PEC (certified e-mail) address, Name, Surname, E-mail address, Phone number, VAT number.
Not providing the data indicated will make it impossible for the Controller to continue with the existing relationship.
Categories of recipients: The data of the type Name and Surname, email address, telephone number, can be notified, for legal obligations or solely reasons functional to executing the agreement, to the following recipient categories:
The responsible in charge of data processing for carrying out communication activities by e-mail or other messaging channels
Optional consent: Consent is always optional. By not giving consent, the owner can’t proceed the purposes whose legal basis is the same consent given by the data subject.
Storage terms for personal data categories:
Category: Common
Storage term: Data processing will be kept for the time necessary to achieve the purposes described in the information notice. The data subject will be stored for a period not exceeding one year from the update of the consent.
RIGHTS OF THE DATA SUBJECT
(Arts. from 15 to 22 and from art. 13 of the GDPR)
Here below please find the rights the data subject may exercise:
Right of access: In accordance with art.15 of the GDPR the data subject has the right to request access to his/her personal data.
Right of rectification: In accordance with art.16 of the GDPR the data subject has the right to ask the controller to rectify his/her personal data.
Right of erasure: In accordance with art. 17 of the GDPR the data subject has the right to ask the controller to erase his/her personal data.
Right of restriction: In accordance with art.18 of the GDPR the data subject has the right to ask the controller to restrict the data concerning him/her.
Right to object: In accordance with art. 21 of the GDPR the data subject has the right to object to processing.
Right of portability: In accordance with art. 20 of the GDPR the data subject has the right to exercise its data portability right.
Additional notes: The data subject may also submit a complaint to the control body (for example the Privacy Authority).
AUTOMATED PROCESS
Is there an automated process? Processing is not based on an automated decision-making process.
PURPOSE CONSENTS
I agree to: Sending commercial communications
I agree to: Sending newsletters to registered users