The Data Controller
PPM Industries S.p.A. is the owner of the data collected through this Site, with address Via G. Terzi, S. Agata 23, Brembate di Sopra (BG), Italy, with EEC VAT Reg. No. IT02099620169 (hereinafter “PPM”): PPM establishes at its sole discretion the purposes and methods of treatment as well as the security procedures to be applied to ensure the confidentiality, integrity and availability of data.
Types of Personal Data collected by PPM
Procedure and storage of your data
The processing of your Personal Data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and in compliance with the principles of lawfulness, fairness and transparency and of the other principles indicated in art. 5 GDPR. Personal Data shall be processed and stored for as long as required by the purpose they have been collected for. 1) Personal Data collected for purposes related to the performance of a contract between PPM and the user shall be retained until such contract has been fully performed. 2) Personal Data collected for the purposes related to respond to your requests of information, to respond to your request to download the PPM catalogs and to allow the user to navigate correctly on the Site shall be retained as long as needed to fulfill such purposes. 3) Personal Data collected for the purposes of the PPM’s legitimate interests shall be retained as long as needed to fulfill such purposes. 4) PPM may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, PPM may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority. Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
Purposes of processing of your Personal Data and legal basis of processing
Personal Data that is voluntarily provided will be processed for the following purposes, unless withheld:
- For navigation and registration on the Site
- For the purchase of products on the Site through the online shop and the related administrative and accounting activities
- To respond to your request of information
- To respond to your request to download the PPM catalogs
- To fulfill the obligations established by the Law, by a Regulation, by the Community legislation or by an order of the Authority
- To prevent or discover fraudulent activity or malicious activities for the Site
- To exercise the rights of the Data Controller, for example the right to defense in Court
- prior consent for subscription to the newsletter service of PPM or to send advertising material and/or commercial communications by PPM by sending e-mail, text messages, mail, contact center (specify any other modes)
Optional or mandatory provision of Personal Data
Save for as provided by navigation data, the user is free to provide Personal Data. The disclosure of Personal Data for the purposes referred in points 1 to 7 above is optional but necessary in order to allow the user to benefit from the services provided from time to time by PPM in order to perfect specific functions. Failure to provide such data may make it impossible to obtain what has been requested or to use the services of the Data Controller. Consent to process Personal Data for the purpose referred in point 8 – that is for promotional purposes, commercial communication and / or marketing in general by PPM – is always optional. Failing this, the Data Controller will still be able to provide the services referred to in points 1 to 7 and you will still be able to improve the other functions and use the services provided by the Data Controller. You can therefore decide not to give the consent for the processing of your Personal Data for this purpose or to withdraw at any time and consent for the processing of your Personal Data already provided for the purpose referred in point 8, but the revocation will not affect the lawfulness of the treatment based on consent before revocation. The right to oppose the processing for the purposes referred in point, may be carried out at any time through automated means of contact, and will also extend to the processing of your data for the aforementioned purpose carried out by traditional means. In any case, the possibility remains for the interested party to exercise this right in part, that is, by opposing, for example, to the sending of promotional communications only via automated tools.
Subjects or categories of persons to whom your data may be disclosed
Your Personal Data may be disclosed to third parties only with your express consent, except in cases where disclosure is required by law or for purposes envisaged by law, for which your consent is not required. In such cases, the data may be made available to third parties who will use the data independently and exclusively for such purpose only (e.g., in the case of request made by the police or by the courts or other competent authorities, or to perform obligations arising the contract concluded with you). Your Personal Data shall not be disseminated in any other way.
Parties who may process your Personal Data
For certain activities PPM has appointed third party companies for processing Personal Data. The companies that conduct such activities have been properly selected and are experienced, capable and trustworthy. They offer sufficient guarantees to the existing rules on treatment of data, including the data security profile. These third parties will be appointed “Data Processors” for this purpose and will carry out their activities according to the instructions given by PPM and under its control. Periodically verify that the Data Processors have punctually fulfilled the tasks entrusted to them and that they continue to provide adequate guarantees full compliance with the provisions on the protection of Personal Data. The updated list of the Data Processors can always be requested from the Data Controller. Your Personal Data are then processed by our persons in charge of the individual services.
Links to other sites
Rights of interested parties
You can exercise your rights according to article 15 to 22 GDPR, in particular the right to access data, to correct or delete data, to request the limitation or to oppose the processing, in addition to the right to data portability. Interested parties who believe that the processing of personal data referred to them through this website or its services is in violation of the provisions of the GDPR have the right to lodge a complaint with the Supervisory Authority, or to take appropriate judicial offices. In case of violation of the Personal Data of the interested party, taking into account the provisions of art. 34 GDPR, the Data Controller will notify the interested party of the violation.
Contacts for exercising the rights of the interested parties
You can exercise your rights at any time by sending a registered letter to PPM Industries S.p.A. with address Via G. Terzi, S. Agata 23, Brembate di Sopra (BG), Italy, or by sending an email to firstname.lastname@example.org This Site and the Services of the Data Controller are not intended for persons under the age of 16 and the Data Controller does not intentionally collect personal information about minors. In the event that information on minors were unintentionally registered, the Data Controller will delete them in a timely manner, at the request of users.
Social plugins and social networks
Our web pages may contain plug-ins of social networks (e.g. Facebook, LinkedIn, Instagram, etc.). If you access one of our web pages with a similar plug-in, the browser directly connects you to the social network server and the plug-in is displayed on the screen as a result of the connection with the browser. If a user of a social network visits our Site whilst logged on to its social network account, its personal information may be associated to the social network. Even if you use the plug-in, the information will be associated with your social plug-in functions. Additional information on the collection and use of data by social networks in general and on the rights and ways available to protect your privacy in this respect you should refer to the data protection provisions provided by the relevant social network. If you do not want to associate your visit to our web pages with your social network account, you must log off from the social network, before you visit our Site. Personal Data is collected for the following purposes using the following services: Interaction with external social networks and platforms. These services allow you to interact with social networks, or other external platforms. Interaction and the information acquired is in any case subject to the user’s privacy settings relating to any social network. In the event you have installed a service interaction with social networks, it is possible that, even if the users do not use the service, the same collects traffic data relating to the pages in which it is installed.