Privacy Policy on the processing of personal data

In compliance with the provisions of Regulation (EU) 679/2016 (hereinafter only GDPR) and the applicable Italian rules, Italian Legislative Decree 196/03 as amended by Italian Legislative Decree 101/2018, we wish to inform you that your data will be processed by the company Anci Servizi s.r.l. a socio unico, B.U. CIMAC, as Data Controller (under art. 4 and 24 GDPR).

You may contact the Data Controller at the following email address: info@cimac.it or call 038184722 or 02438291. The Data Controller has appointed its DPO, Atty. Laura Marretta, who may be contacted at the phone number of the Data Controller 02438291 or at the email address privacy@assocalzaturifici.it.

Data is processed in accordance with art, 5 GDPR and the conditions of lawfulness under art. 6 of Reg. (EU) 679/2016 for purposes connected to the relationship with the Data Controller; therefore, its legal basis consists in giving feedback to your requests through the form that is available on the online site in the “contact us” area (legal basis: consent as indicated in art. 4 paragraph 11 GDPR); therefore, the continuation of the relationship with the Data Controller and the sending of data with the Form in the “contact us” area will be intended as a free, specific and informed expression of the data subject who, through a positive action, gives his/her consent to data processing by the Data Controller (in accordance with art. 4 paragraph 11) to respond to the request received. The processing of data provided to the Data Controller may include, inter alia, the management, organisation, use, storage and modification of the data processed as a result of your notification, its consultation, processing and deletion.  Data will be processed in paper form and/or electronically by parties specially authorised to do so. The Data Controller will not request any data of yours falling under special data categories (art. 9 of Reg. (UE) 679/2016). The provision of data is optional; however, in case of failure to provide such data or if they are provided in part, any requests forwarded to the Data Controller may be partially or completely unfulfilled; forwarding requests to the Data Controller implies knowledge and acceptance of this policy. Please also note that in the case of special relationships, events, activities and purposes, the Data Controller reserves the right to provide a further privacy policy and, if necessary, to collect appropriate consent for specific processing operations. The data will be stored for the amount of time necessary to fulfil the purpose the data was collected for. The Data Controller does not make use in any way of automated decision-making processes regarding your personal data, neither does it profile your data.

The Data Controller informs you that you have the rights of access listed under art. 15 of the EU Reg. and are also entitled to:

1. ask the Data Controller to permit you to access your personal data and correct or delete the data, or request limitation of data processing or object to data processing;
2. the right to data portability;
3. revoke your consent at any time without affecting the lawfulness of data processing on the basis of consent given prior to revocation, if processing is based on article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a);
4. the right to lodge a complaint with a supervisory authority.
   
   

To exercise the rights listed above or for more information on the processing of your personal data or for communications on privacy issues, please send an email to the DPO at the following address: privacy@assocalzaturifici.it, specifying your full name, email where you wish to receive an answer and the right you intend to exercise and we will answer within the term indicated in art. 12 GDPR. The Data Controller also informs you that if it intends to further process the personal data of the data subject for a purpose other than that for which they were collected, it will, prior to such further processing, provide the data subject with information regarding such other purpose and any other relevant information, and will collect, in the specific case, any consent needed.

Please note that the sending of emails to the addresses indicated on this website of the Data Controller, for purposes specified case by case, implies the acquisition and subsequent processing of the sender’s email address and any other personal data included in the missive, adopting the methods specified by and for the purposes indicated in the Privacy Policy above. Moreover, by sending emails, the website visitors or users are deemed as having read and accepted said Privacy Policy.