NEWSLETTER
information provided pursuant to art. 13, GDPR
Data controller’s identity and contacts
SMZ Italia srl – Via Brandizzo 184, 10088 Volpiano (TO – Italy), P.I. 07528190075, phone number +39 011.99.53.534, e-mail SMZ@SMZITALIA.COM (hereinafter: “SMZ” o “Controller”).
Source of data and purposes of processing
Personal data are provided directly by the data subject (“user”). They are processed for the following purposes:
- to send the user the newsletter subscribed, about business and commercial information, offers and promotions
- to carry out statistics on the users.
Means of processing
- Personal data are processed by the Controller mainly with electronic means and are stored in iis filing systems. Preventative secure measures are applied to prevent data from loss, destruction, alteration (whether by accident or not), unlawful or unauthorised access.
- The newsletter will be sent to the e-mail address provided by the user.
Legal basis of processing
- For the purposes referred to in point 1, “Source of data and purposes of processing”, the legal basis is art. 6, par. 1, letter b), GDPR, since data processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract.
- For the purposes referred to in point 2, “Source of data and purposes of processing”, the legal basis is the legitimate interest (art. 6, par. 1, letter f), GDPR) of SMZ to know the consistency of the users interested in its business activity.
Criteria of data collection
Identity data and e-mail address are mandatory: without such data we cannot send the newsletter required. Other data may be omitted, and the request shall be anyway fulfilled. Data are collected pursuant to art. 25, GDPR – Data protection by design and by default – which requires to implement appropriate technical and organisational measures for ensuring that, by design and by default, only personal data which are necessary for each specific purpose of the processing are processed.
Processors, persons authorised for data processing, other data controllers
- Data will be processed by the persons authorised for the processing and acting under the authority of the Controller and in charge of administration, commercial activities, customer care, information systems and security measures.
- Data will be processed also by processors in charge of the services connected to the activities referred to in point 2, “Source of data and purposes of processing.
- Data may be communicated to entities and judiciary (autonomous data controller), if required by national and EU laws and regulations.
Communication and dissemination of data
- Data are not communicated to other companies, bodies or organisations for their marketing and profiling purposes.
- Data may be communicated to supervisory authorities and judiciary or public bodies for their institutional tasks on their request or to assert, exercise, defend a right in judiciary by SMZ or by a third party.
- Data are not disseminated.
Period of data storage
- For the purposes referred to in point 1, “Source of data and purposes of processing”, data will be stored until the user is registered to the newsletter.
- For the purposes referred to in point 2, “Source of data and purposes of processing”, data will be stored until they are transformed into anonymous data. Once transformed into statistical data, they will no longer be subject to GDPR requirements.
Where data are processed and data transfer to third Countries
Data processing and storage will be carried out on the Controller’s server and /or of companies in charge of processing and designated as processors, located in EU territory. No transfer to third Countries is intended so far. If need be, data will be transferred to third Country pursuant to applicable law provisions (arts. 45, 46, 47 e 49, GDPR).
Data subjects’ rights
Pursuant to articles 15-22, GDPR, writing to the data controller at the postal address of the Controller or by e-mail smz@smzitalia.com, you may request the list of data processors and exercise your right of access, rectification, right to be forgotten, restriction of processing, data portability, and you can object to the processing of your data on legitimate grounds or for promotional business contacts (also through the link displayed in each newsletter sent).
How to lodge a complaint with the supervisory authority
The data subject has the right to lodge a complaint with the supervisory authority (Garante per la Protezione dei Dati Personali – Piazza Venezia 11, 00187 Roma (RM – Italy) – www.garanteprivacy.it, e-mail: protocollo@pec.gpdp.it, format https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524&zx=e0yn0riezmmw) to exercise and defend the right of data protection.
