POLICY REGARDING THE PROCESSING OF PERSONAL DATA

(Art. 13 of EU Regulation no.679 of 27 April 2016, on the protection of personal data “GDPR”)

In compliance with requirements imposed by the General Regulation on the protection of personal data, the process Controller hereby provides the data subject with the following information on the processing of personal data carried out.

PROCESS CONTROLLER

Company name: PM Oil&Steel S.p.A.

VAT / Tax Code: IT03520360961 / IT03520360961

CONTACTS FOR EXERCISING RIGHTS

Requests to exercise the rights established by the GDPR or any revocation of consent given may be sent to the Controller at the following contact details:

Address: Via G. Verdi 22 – 41018, San Cesario sul Panaro (MO) – Italia

Contact details: +39 059 936811, referente_privacy@pm-group.eu

CATEGORIES OF DATA SUBJECTS

Potential customers, Potential suppliers, Website visitors

PROCESSING

Here below please find a list of the personal data processing involving the data subject

MANAGEMENT OF RELATIONS WITH THE CUSTOMER AND POTENTIAL CUSTOMER

Purposes requiring consent: Sending marketing papers, sending newsletters to enrolled customers

Types of data processed: PEC (certified e-mail) address, Name, Surname, E-mail address, Phone number, VAT number.

Not providing the data indicated will make it impossible for the Controller to continue with the existing relationship.

 

Categories of recipients: The data of the type Name and Surname, email address, telephone number, can be notified, for legal obligations or solely reasons functional to executing the agreement, to the following recipient categories:

The responsible in charge of data processing for carrying out communication activities by e-mail or other messaging channels

 

Optional consent: Consent is always optional. By not giving consent, the owner can’t proceed the purposes whose legal basis is the same consent given by the data subject.

 

Storage terms for personal data categories:

Category: Common

Storage term: Data processing will be kept for the time necessary to achieve the purposes described in the information notice. The data subject will be stored for a period not exceeding one year from the update of the consent.

RIGHTS OF THE DATA SUBJECT

(Arts. from 15 to 22 and from art. 13 of the GDPR)

Here below please find the rights the data subject may exercise:

Right of access: In accordance with art.15 of the GDPR the data subject has the right to request access to his/her personal data.

Right of rectification: In accordance with art.16 of the GDPR the data subject has the right to ask the controller to rectify his/her personal data.

Right of erasure: In accordance with art. 17 of the GDPR the data subject has the right to ask the controller to erase his/her personal data.

Right of restriction: In accordance with art.18 of the GDPR the data subject has the right to ask the controller to restrict the data concerning him/her.

Right to object: In accordance with art. 21 of the GDPR the data subject has the right to object to processing.

Right of portability: In accordance with art. 20 of the GDPR the data subject has the right to exercise its data portability right.

Additional notes: The data subject may also submit a complaint to the control body (for example the Privacy Authority).

AUTOMATED PROCESS

Is there an automated process? Processing is not based on an automated decision-making process.

PURPOSE CONSENTS

I agree to: Sending commercial communications

I agree to: Sending newsletters to registered users