PRIVACY NOTICE (NEWSLETTER)

Privacy notice pursuant to Article 13 of Regulation (EU) 2016/679

Util Industries S.p.A with registered offices at Via Giovanni XXIII, 10 – 14019 Villanova d’Asti AT (Italy) (hereinafter, “Company” or “Data Controller“) is committed to protecting the online privacy of the users of its websites.

Data Controller

Under the terms of Regulation (EU) 2016/679 (“Regulation”) we inform you that your personal data will be processed by Util Industries S.p.A with registered offices at Via Giovanni XXIII, 10 – 14019 Villanova d’Asti AT (Italy) which will act as Data Controller (“Data Controller”).

Purpose of the processing and legal basis

The Data Controller will process your personal data (within the definition of article 4.1 of the Regulation), including your name and surname, address and e-mail for the following purpose: 

• send promotional and marketing communications and newsletters on products and initiatives of the Data Controller, including communications regarding market research, prize contest and events, through automated means (e-mail, push notifications, SMS, MMS). Please note that the Data Controller collects a single consent for the marketing purposes described herein, in accordance with the Decision issued on 4 July 2013 by the Italian Data Protection Authority “Guidelines on promotional activities and the fight against spam”; in any case, you may object  to the processing of your personal data for marketing purposes performed with the means indicated herein, as well as withdraw the consent given, at any time by contacting the Data Controller at the address indicated in this notice , without prejudice to the lawfulness of the processing based on consent given prior to its withdrawal.
  The legal basis for the processing is the provision of consent by the data subject to the processing of personal data for one or more specific purposes (Article 6.1.a). of the Regulation).

Failure to provide such personal data will have no consequences.

Recipients of personal data

Your personal data may be shared with:

• Persons authorized by the Data Controller in compliance with Articles 29 and 32.4 of the Regulation and Article 2-quaterdecies of D.lgs. 196/2003 (for example employees that may process your personal data due to their job tasks, system administrators, etc.);
• Third parties processing personal data on the Data Controller’s behalf while provisioning services to the latter, acting as data processors (for example outsourcers in case of assignment of works, even partial, to external companies; third parties involved in the management of information systems and web platforms; third party contributors that the Data Controller uses to specific technical and / or organizational services – as providers of information technology services, partners and external consultants, companies belonging to the Group; etc)
• Public entities, bodies, or authorities, typically acting as autonomous data controllers under the terms of Article 4 n. 7) of the Regulation, to whom your Personal Data may be disclosed, in accordance with the applicable law or binding orders of those entities, bodies or authorities, or due to contractual and pre-contractual obligations.

“For what concern the possible transfer of personal data to third countries or international organizations, the Data Controller informs that the processing will take place according to one of the means allowed by the current applicable legislation, such as the consent of the data subject, the performance of a contract between the data subject and the controller, or the implementation of pre-contractual measures taken at the data subject’s request, the conclusion or performance of a contract concluded in the interest of the data subject between the controller and another natural or legal person, the adoption of data protection clauses approved by the European Commission, the selection of entities operating in countries considered as safe by the European Commission. More information may be requested by contacting the Data Controller”.

Modes of the processing

In relation to the aforementioned purposes, the processing of personal data takes place by manual, IT and telematic tools with logic strictly related to such purposes and, in any case, with methods that guarantee the security and confidentiality of the data, in addition to compliance with specific law obligations.

Data retention

Your personal data will be stored by the Data Controller for no longer than it is necessary in relation to the purposes for which they are processed, in accordance with the minimization principle (Article 5.1.c) of the Regulation). Particularly, your personal data will be kept until the withdrawal of the consent. 

More information may be requested by contacting the Data Controller.

Rights of the data subject

You, as a data subject, are entitled to request from the Data Controller, at any time, access to your Personal Data, the rectification and erasure of your Personal Data or to request the restriction of the processing of your Personal Data, or to obtain the Personal Data you have provided to the Controller in a structured, commonly used and machine-readable format, in the cases set out in Article 20 of the Regulation.
We also inform you that you have the right, under Article 21 of the Regulation, to object, for legitimate reasons, to the processing of your data, for example, by objecting at any time to direct marketing performed with automated means (SMS, MMS, e-mail, push notifications) and non-automated means (paper mail, phone calls); furthermore, you have the possibility of partially exercise this right, by objecting, for example, to the sole sending of promotional communications performed via automated means.
At any time, under Article 7 of the Regulation, you may withdraw the consent already provided, without prejudice to the lawfulness of the processing carried out prior to the withdrawal of such consent.

In any case, please note that, as a data subject, you are entitled to file a complaint with the competent supervisory authorities for the protection of Personal Data (Article 77 of the Regulation), if you believe that the processing of your Personal Data violates applicable law.