INFORMATION NOTICE REGARDING THE PROCESSING OF USERS’ PERSONAL DATA
IN ACCORDANCE WITH EU REGULATION 2016/679 (“GDPR”) – NEWSLETTERS
Hexagon S.p.A., via Giorgio e Guido Paglia n. 1/D, 24122 Bergamo
Fiscal Code. e VAT n. 04058560162
|DATA PROCESSING PURPOSES||LEGAL BASIS FOR PROCESSING DATA||DATA RETENTION PERIOD|
|Send information by e-mail (Newsletters) to parties requesting this by inserting their e-mail address in the relevant data form.||Execution of the contract involving the data subject.||Data collected (email address) will be retained until newsletter recipients unsubscribe from the service. After this date, the data will be destroyed or made anonymous compatibly with technical erasure and backup procedures.|
|Marketing purposes (sending business/promotional communication) on Company products/services;
Customer satisfaction surveys, market research and statistical analyses.
|Consent of Customer legal representative (which is optional and can be withdrawn at any time).||Until withdrawal of consent|
In accordance with article 13, clause 2, letter e) of the GDPR, please note that providing an e-mail address is necessary for the service requested, therefore a refusal to provide this information means it will not be possible to send newsletters.
UNSUBSCRIBTION FROM THE SERVICE
To stop receiving the “newsletter” click the “unsubscribe” link at the bottom of your newsletter, and sign or log in with your account and click the “unsubscribe” button.
Data may be communicated to external parties operating as data controllers, for example supervisory bodies and authorities and public or private parties in general authorised to request data.
Data may be processed on behalf of the data controller by external parties appointed as data processors carrying out specific activities for the controller. Such subjects belong to the following categories:
a. Companies offering e-mail sending services, management and maintenance of electronic platform;
b. Companies offering instrumental services for the processing purposes referred to in this information notice (media agencies: IT suppliers, carriers, software house and system integrators, customer care companies, consultants…);
c. Companies offering support to carry out market researches.
PARTIES AUTHORISED TO PROCESS DATA
The data may be processed by employees in company departments who are responsible for carrying out the activities outlined above and have been authorised to process the data and received suitable operating instructions.
PERSONAL DATA TRANSFERS OUTSIDE THE EU
Data will not be transferred outside of the European Union.
DATA SUBJECTS’ RIGHTS – COMPLAINT TO THE SUPERVISORY BODY
By contacting the Office HEXAGON S.p.A. via Giorgio e Guido Paglia n. 1/D 24122 Bergamo, or via e-mail sent to firstname.lastname@example.org data subjects can ask the controller for access to personal data, or the correction or deletion of personal data, and also have the right to restrict processing of the data in the cases set out in article 18 of the GDPR.
Furthermore, in the case where processing is based on consent or a contract and carried out with automated tools, data subjects have the right to receive the personal data in a structured, commonly used and machine-readable format, and to transmit the data to another data controller without obstruction.
Data subjects have the right to withdraw consent at any time in relation to data processed for marketing purposes, and object to data being processed for these purposes. Data subjects have the possibility of stating a preference for being contacted for the aforementioned purposes through conventional methods
Data subjects have the right to lodge a complaint to the competent Supervisory Authority in the member state where they are resident or where they work, or the member state where the alleged breach took place.
Data Controller periodically checks its privacy and security policy and, if necessary, reviews it in relation to the regulatory, organisational or technological changes. In case of change of policies, the new version will be published on this page of the site.
Privacy notice Hexagon S.p.A. version 1.0 year 2018
 What is the right of restriction?
It is the temporary processing of data which consists of data conservation only, in the following cases:
a) The data subject contests the accuracy of his/her personal data, for the time necessary for the controller to verify the accuracy;
b) The processing is unlawful because the data subject is against his/her data erasure and requests the restriction of their use;
c) The data controller no longer needs the personal data but data subject needs his/her data for court proceedings purposes;
d) The data subject objects to the processing pursuant to art. 21.1 pending the verification whether the legitimate grounds of the controller override his/her legitimate grounds.