Aton S.p.a. Società Benefit, with legal head office in 31020 Villorba (TV), Via Alessandro Volta 2, Tax Code and VAT no. 02479320265, e-mail firstname.lastname@example.org, in the person of its legal representative pro tempore (hereinafter referred to as the “Company” or “Holder”), in its capacity as data controller, pursuant to and for the purposes of Regulation (EU) 2016/679 (hereinafter the “Regulation”) and the applicable privacy legislation (“Legislation”), hereby provides you with the necessary information regarding the purposes and methods of processing your personal data, the scope of communication and dissemination of the same as well as the nature of their conferral.
1. Purpose of processing
The data you provide by filling in the form in the “Contacts” section of our website www.aton.eu (hereinafter the “Site”), sent by e-mail, by subscribing to the newsletter or otherwise communicated while browsing our site will be processed by the Company solely for the following purposes:
(a) to provide the information you have requested; for the performance of contractual obligations (such as, for example, those relating to the provision of services and products of the Company); management/administration of the contractual relationship; fulfilment of obligations towards the Financial Administration; fulfilment of all other legal obligations;
b) subject to your specific consent, to send, by e-mail, promotional and advertising material relating to the products, services and activities of the Company or its subsidiaries or parent companies.
2. Nature of the conferment
The provision of data for the purposes referred to in Art. point a) is a contractual obligation and failure to provide such data will make it impossible to provide the information requested or to perform the contract. Please note that pursuant to Art. 6 of the Regulations the consent of the data subject is not required for the processing of data for the purposes of art.1 a). The provision of data for the purposes of art. point b) is optional. You have the right to object at any time to the processing of your personal data for direct marketing purposes, including profiling insofar as it is related to such direct marketing.
You have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing based on consent before withdrawal.
4. Processing methods and data storage time
The processing will be carried out with the aid of computer systems by persons specifically appointed for this purpose in compliance with the security measures prescribed by the Decree. In some cases, the processing may also be carried out in paper form, again by persons specifically appointed for this purpose and always in compliance with current privacy regulations. The personal data processed for the purposes referred to in Article 1 a) will be stored by the Company, in servers located in Italy and/or in Member States of the European Union, for a maximum of ten years, in accordance with the regulations in force regarding the storage of documents. Personal data processed for the purposes referred to in Article 1 b), will be kept for 2 years.
5. Scope of communication and dissemination
The data may be communicated to third parties, even outside Italy but in any case in Member States of the European Union, such as subsidiaries, parent companies, connected or affiliated to the Company, suppliers of products and services of the Company (e.g. suppliers of IT or other services), sales agents, external collaborators, professional consulting firms (e.g. accountants, lawyers, notaries), auditors, banks, credit institutions, insurance companies, financial companies, factoring and debt collection companies, transporters, companies that provide the Company with products and services. (e.g. accountants, lawyers, notaries), auditors, banks, credit institutions, insurance companies, finance companies, factoring and debt collection companies, transporters, companies that provide the Company with marketing and advertising services, trade associations and any other body, natural or legal person, to which the obligation to communicate data is imposed by law. In this case, the Company will take all necessary measures to bind third parties to comply with privacy regulations.
7. Rights of the interested party
In accordance with the provisions of Article 13, paragraph 2 of the Regulation, the Company informs you that you have the right to
(a) request from the data controller access to your personal data and the rectification or erasure thereof or the restriction of processing concerning you or to object to the processing thereof, in addition to the right of data portability;
(b) to lodge a complaint with a supervisory authority.
You may assert the above rights, those set out in Articles 15 et seq. of the Regulation as well as those provided for in the Regulations, by contacting the data controller at the above address.