version n.4 dated 13-05-2021

With this document (“Information”) the Data Controller, as defined below, wishes to inform you on the purposes and methods of processing your personal data and on the rights granted to you by Regulation (EU) 2016/679 relating to the protection of natural persons, with regard to the processing of personal data and their free movement (“GDPR”). This Information may be integrated by the Data Controller where any additional services requested by you should involve further processing.

HOLDER OF THE TREATMENT  HOLDER OF THE TREATMENT

3D SPARE PARTS

Email: 3dricambi@gmail.it

TYPES OF DATA PROCESSED

The processing activities carried out are aimed at acquiring the following personal data:

• Cookies: Profiling cookies.
• Behavioral data: Browsing log.
• Common data: Personal data, professional Curriculum vitae.
• Economic data: income, tax, banking, insurance.
• Judicial data: Judicial, Pending charges.

PURPOSE OF THE TREATMENT AND CONDITION WHICH MAKES THE TREATMENT LEGAL

1. Disputes and litigation

Personal data will be processed by the Data Controller to resolve disputes and disputes that could exceptionally arise in the execution of the contract; it is possible in this treatment that it is necessary to archive personal data digitally and/or in a traditional way (paper). Condition Lawfulness of Treatment: Legitimate Interest – Art. 6, c.1, let. f. GDPR

1. Disputes and litigation

Personal data will be processed by the Data Controller to resolve disputes and disputes that could exceptionally arise in the execution of the contract; it is possible in this treatment that it is necessary to archive personal data digitally and/or in a traditional way (paper). Condition Lawfulness of Processing: Legitimate Interest – Art. 6, c.1, let. f. GDPR

Purpose of the treatment:

• The owner’s interest in processing the data to resolve any disputes related to the execution of the contract is legitimate

Nature of the provision: Mandatory – Failure to provide the data will prevent the Data Controller from carrying out the activity requested by you, as it cannot pursue a legitimate interest.

Personal data retention period: Your personal data will be processed for this purpose for the time necessary for the fulfillment of the legal obligations established by current legislation. In this regard, your personal data may be kept for up to 10 years starting from the termination of the contract or, if later, from a binding decision issued by a competent authority (for example, a court ruling), without prejudice to any conservation obligations relating to particular categories of data, for longer periods of time, prescribed by the legal system.

Methods of Treatment: The method of treatment is exclusively manual

2. Commercial informant 

Condition Lawfulness Treatment:

Purpose of the treatment:

         Purpose of processing: Commercial transmission to customers and/or potential customers.

         Nature of the contribution: IT tools

3. CUSTOMERS – Execution of the Contract

The processing of personal data is necessary for the acquisition of information necessary for the conclusion and execution of the contract stipulated with the Data Controller relating to the acquisition of Commercial Information and Database Management. Condition Lawfulness of Processing: Execution of Contract – Art. 6, c.1, let. b. GDPR

Purpose of the treatment:

• Execution and management of the contract stipulated with the Data Controller.
• Acquisition of information preliminary to the conclusion of contracts.
• Communications transmitted and/or received to/from customers connected to the execution and/or stipulation of the contract, carried out through various means of communication such as telephone, email (electronic mail), instant messaging (whatsapp), paper mail.

Nature of provision: Mandatory – Failure to provide data will make it impossible for the Data Controller to execute the contract.

Personal data retention period: Personal data, used for the execution of the contract, will be processed for the time necessary to manage the existing relationship with the Data Controller. The information collected for the evaluation of the conclusion of the contract, in case of non-completion, will be deleted within 6 months.

Processing methods: The processing is mainly performed with IT tools.

4. CUSTOMERS – Compliance with the law

The processing of personal data is necessary for the fulfillment of obligations established by laws, regulations and/or community regulations, by supervisory/control bodies or by other legitimate authorities. Condition Lawfulness of Processing: Legal Obligation – Art. 6, c.1, let. c. GDPR

Purpose of the treatment:

• Conservation of accounting and administrative documents in paper form.
• Conservation of accounting and administrative documents in digital form.
• Digital storage of invoices issued/received (electronic invoicing).

Nature of provision: Mandatory – Failure to provide data will make it impossible for the Data Controller to execute the contract.

Personal data retention period: Personal data will be processed for this purpose for the time necessary for the fulfillment of the legal obligations established by current legislation. In this regard, personal data will be kept for 10 years starting from the termination of the contract or, if later, from a binding decision issued by a competent authority, without prejudice to any conservation obligations relating to particular categories of data, for longer periods of time, prescribed by the legal system.

Processing methods: The processing is mainly performed with IT tools.

5. CUSTOMERS – Marketing

Transmission of commercial offers promoted by the Data Controller. Condition Lawfulness of Processing: Consent – ​​Art. 6, c.1, let. to. GDPR 

Purpose of the treatment:

• Transmission of commercial newsletters to the e-mail addresses of customers and/or potential customers.
• Transmission of instant messages using tools such as SMS, Whatsapp, Telegram.
• Transmission of instant messages using tools such as SMS, Whatsapp, Telegram.

Nature of provision: Optional – Failure to provide data will make it impossible for the interested party to receive messages relating to promotions offered by the Data Controller

Personal data retention period: The deleted data will be deleted immediately following the termination of the contract or revocation of consent. The data relating to prospects, for which the contract will not be finalized, will be canceled within 24 months of registration.

Processing methods: The processing is mainly performed with IT tools.

6. SITE – Navigation data

Obtain anonymous statistical information on use, check the correct functioning of the site, ascertain responsibility in the event of hypothetical computer crimes against the Owner. Condition Lawfulness of Processing: Legitimate Interest – Art. 6, c.1, let. f. GDPR 

Purpose of the treatment:

• Data analysis to perform the evolution and maintenance of the website.
• Ascertainment of responsibility in the event of potential computer crimes against the site and/or the Data Subjects.
• Statistical analysis, anonymous, on the use of the site.

Nature of provision: Mandatory – Failure to provide data will make it impossible for the company to provide the web service provided.

Personal data retention period: The data is kept for 30 days.

Methods of Treatment: The treatment is performed with IT tools. 

7. CUSTOMERS – Marketing for similar products

Transmission of newsletters concerning similar products already purchased by customers. Condition Lawfulness Treatment: Soft Spam – Article 130 paragraph 4 

Purpose of the treatment:

• Transmission of commercial proposals relating to similar products already purchased/requested by customers.

Nature of provision: Optional – Failure to provide data will make it impossible for the interested party to receive newsletters relating to promotions offered by the Data Controller

Personal data retention period: The deleted data will be canceled immediately following the termination of the contract or opposition to the treatment.

Processing methods: The processing is mainly performed with IT tools.

8. SITE – Requests from the Site

Requests made by interested parties through the website of the Data Controller. Condition Lawfulness of Processing: Execution of Contract – Art. 6, c.1, let. b. GDPR

Purpose of the treatment:

• Sending requests via web platform tools.

Nature of provision: Optional – Failure to provide data will make it impossible for the Data Controller to respond to requests from the interested party.

Personal data retention period: Processing of the request.

Methods of Treatment: The treatment is performed with IT tools. 

9. SITE – Use of the Service and Reserved Area

Use of the services offered through the reserved area of ​​the Owner’s website. Condition Lawfulness of Processing: Execution of Contract – Art. 6, c.1, let. b. GDPR 

Purpose of the treatment:

• Registration within the reserved area.
• Use of the service provided by accessing the reserved area of ​​the site.

Nature of provision: Optional – Failure to provide data will make it impossible for the Data Controller to provide services through the reserved area of ​​the site.

Personal data retention period: User cancellation.

Methods of Treatment: The treatment is performed with IT tools. 

10. RIGHTS OF THE INTERESTED PARTY – COMPLAINT TO THE SUPERVISORY AUTHORITY

In relation to the treatments described in this Information, as an interested party you may, under the conditions set out in the GDPR, exercise the rights set out in articles 15 to 22 of the GDPR and, in particular, the following rights:

• right of access – article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning you are being processed and, in this case, obtain access to your personal data;
• right of rectification – article 16 GDPR: right to obtain, without unjustified delay, the rectification of inaccurate personal data concerning you and/or the integration of incomplete personal data;
• right to cancellation (right to be forgotten) – article 17 GDPR: right to obtain, without unjustified delay, the cancellation of personal data concerning you. The right to erasure does not apply to the extent that the processing is necessary for compliance with a legal obligation or for the performance of a task performed in the public interest or for the establishment, exercise or defense of legal claims. in court.
• right to limitation of treatment – article 18 GDPR: right to obtain limitation of treatment, when: a) the interested party disputes the accuracy of personal data; b) the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited; c) personal data are necessary for the data subject to ascertain, exercise or defend a right in court; d) the interested party has opposed the processing pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
• right to data portability – article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to the Data Controller and the right to transmit them to another data controller without impediments, if the treatment is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly from this holder to another holder if this is technically feasible;
• right to object – article 21 GDPR: right to object, at any time, to the processing of personal data concerning you based on the condition of legitimacy of legitimate interest, including profiling, unless there are legitimate reasons for the Data Controller to continue the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court.
• right not to be subjected to an automated decision-making process – article 22 GDPR: the interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which affects significantly similar on your person, unless this is necessary for the conclusion or execution of a contract or you have given your consent. In any case, an automated decision-making process cannot concern your personal data and you can at any time obtain human intervention from the data controller, express your opinion and contest the decision.
• right to lodge a complaint with the Guarantor Authority for the protection of personal data: http://www.garanteprivacy.it ;
• revoke the consent given on every occasion and with the same ease with which it was provided without prejudice to the lawfulness of the treatment based on the consent given before the revocation.

The above rights may be exercised, against the Data Controller, by contacting the references indicated in point 1 above.

The exercise of your rights as an interested party is free in accordance with article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Data Controller could charge you a reasonable fee, in light of the administrative costs incurred to manage your request, or deny the satisfaction of your request.

Finally, we inform you that the Data Controller may request further information necessary to confirm the identity of the interested party.