ARBOS GROUP S.p.A. with registered office in via Canale Svoto 3, Migliarina di Carpi, Modena, Tax Code and VAT no. 00171300361, in its role as Data Controller (“Data Controller” or “Arbos”), hereby informs you as follows regarding the processing of your personal data, pursuant to the legislation in force regarding personal data processing and, in particular, pursuant to Article 13 of EU Regulation no. 2016/679 (General Data Protection Regulation “GDPR”).
newsletters and commercial communications/ market research and customer satisfaction / e-shop
1. Data subject to processing
1.1. Arbos can process personal data for the purposes indicated in this note. The term "personal data" refers herein to any piece of information regarding a natural person who is or could be identified (“data subject”), such as, for example, their name, identification number, data regarding their location, online identifier, one or more elements that characterise their physical, physiological, genetic, psychic, economic, cultural or social identity.
1.2. The software procedures which ensure that this website works properly can, during their routine use, acquire certain personal data implicitly sent when a user uses the Internet communication protocols. This information is not collected for the purpose of associating it with identified data subjects. However, by its very nature, it could enable the users to be identified, when it is processed and associated with data held by third parties. Usually this type of data includes IP addresses or domain names of the computers used by the users who connect to the website. These data are only used for the purpose of checking that the website works properly and are deleted immediately after the processing. This data could be used to ascertain the liable party/ies in case of any potential cyber crimes committed to the detriment of the website.
2. Purposes of the processing
2.1. Your personal data are collected and processed:
- for sending newsletters and commercial communications about Arbos products and/or services or those of other companies in the same group as Arbos (“Arbos Group”);
- for carrying out market research or identifying the customer satisfaction level regarding the quality of the products and/or services supplied and on the business performed by Arbos, if the customer is already an Arbos customer;
- in case a curriculum vitae is sent, for recruitment purposes only.
2.2. Conferring your personal data and authorising the processing of the same by the Data Controller for the above-mentioned purposes is optional and subject to your consent. The only consequence of you failing to confer your personal data will be that the Data Controller will not be able to send you newsletters and commercial communications and/or carry out market research.
2.3. Your personal data could also be collected and processed to enable Arbos to process your purchase(s) of products in the Arbos e-shop.
2.4. Conferring your personal data and authorising the processing of the same by the Data Controller for the above-mentioned purpose is mandatory and failure to do so will make it impossible for the Data Controller to execute the contract.
3. Processing methods
3.1. Your personal data will be processed by collecting, recording, organising, keeping, consulting, developing, amending, selecting, extracting, comparing, using, linking, blocking, communicating, cancelling and destroying the data. Your personal data will be processed in both paper form as well as using electronic and/or automated means.
3.2. The Data Controller will process the personal data for the time necessary to fulfil the purposes stated above and, in any case, until you revoke your consent or request that your data be deleted.
4. Categories of data recipients
4.1. All the data collected and processed can be communicated, only for the purposes specified above, to:
- employees and collaborators of the Data Controller or of the other companies of the Arbos Group, in Italy and abroad;
- other companies of the Arbos Group;
- parties that perform activities for the management and filing of the documentation relative to the relationships held with the customers of Arbos;
- parties that provide services for the management of the IT system of Arbos;
- parties that perform activities of control, revision and certification of the activities performed by Arbos;
- judicial authorities and bodies;
- third party companies or other parties that perform activities in outsourcing on behalf of the Data Controller;
5. Transfer of data abroad
5.1. The personal data are stored on servers located in the EU.
5.2. The personal data subject to processing can be transferred abroad to locations inside and/or outside the EU (in particular in the People's Republic of China), always in line with the rights and guarantees envisaged by the law in force. Should the personal data subject to processing not be transferred outside the EU based on an adequacy decision made by the European Commission, other suitable guarantees will be implemented, such as the so-called model contractual clauses.
6. Rights of the Data Subject
6.1. The Data Subject is entitled to access their data and specifically to obtain from the Data Controller confirmation of whether any personal data regarding the same are being processed. They are also entitled to gain access to the personal data and to the following information: purposes of the processing, categories of the personal data, categories of the recipients to whom the personal data have been or will be communicated, when possible, the storage period. Upon request, the Data Controller will provide the data subject with a copy of the personal data subject to processing.
6.2. Additionally, the data subject is entitled to: have the Data Controller correct inaccurate personal data that concern them without unjustified delay and integrate any incomplete personal data; have the Data Controller delete the personal data where, for example, these have been processed unlawfully; have the Data Controller restrict the processing; obtain the portability of the data to another Data Controller. The Data Subject is also entitled to object to the processing of the personal data (at any time, if the purpose of the processing is direct marketing or profiling) and to raise claims to the supervisory authority.
7. Methods of exercising the rights
The above-mentioned rights can be exercised by sending a written communication to Arbos, by email to the address firstname.lastname@example.org, or by sending a registered letter with return receipt of delivery, to Arbos at the address: Canale Svoto 3 - 41012, Migliarina di Carpi, Modena, or by phoning the number: 0522640111.
8. Data Controller
8.1. The Data Controller is ARBOS GROUP S.p.A. with registered office in via Canale Svoto 3 - 41012, Migliarina di Carpi, Modena, Tax Code and VAT no.00171300361, email address email@example.com, telephone 0522640111.
8.2. Information regarding the data supervisors and the persons in charge of the processing can be requested from the Data Controller.