Privacy policy
Download document
Data Controller
The Data Controller is GREAD ELETTRONICA SRL, with registered office at Viale G. Caproni no. 13, 38068 – Rovereto (TN), Italy.
You may contact us at any time by writing to privacy@greadelettronica.it.
The Data Controller has not appointed a Data Protection Officer (DPO).
Why this Privacy Notice?
This Privacy Notice, provided pursuant to Articles 13 and 14 of the GDPR, informs you about how we collect, use, share, and store the personal data provided and/or collected through the Website, as described below.
This Notice is issued by GREAD ELETTRONICA SRL in its capacity as Data Controller of personal data.
Purposes related to website navigation
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols.
Such data, which are necessary for the use of web services, are also processed for the following purposes:
- obtaining statistical information on the use of the services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
- monitoring the proper functioning of the services offered.
Types of data processed
- IP addresses or domain names of the computers and terminals used by users;
- URI/URL addresses (Uniform Resource Identifier/Locator) of the requested resources;
- time of the request;
- method used to submit the request to the server;
- size of the file obtained in response;
- numerical code indicating the status of the response provided by the server (successful, error, etc.);
- other parameters related to the user’s operating system and IT environment.
Legal bases for processing
- processing is necessary to comply with a legal obligation to which the Data Controller is subject;
- processing is necessary for the pursuit of the Data Controller’s legitimate interest in ensuring the security and proper functioning of the website.
Retention period
Navigation data are not retained for more than 90 days, unless required for the investigation of criminal offences by judicial authorities.
Purposes related to managing and responding to your requests
We will process the personal data you provide via email and/or by completing forms on the website solely for the purpose of responding to the requests submitted.
Types of data processed – information requests:
- personal data voluntarily provided;
- first name, last name, phone number / email address / company;
- message content.
Types of data processed – job applications (“Work with us” section):
- personal data voluntarily provided;
- first name, last name, phone number, email address;
- date of birth, place of residence/domicile;
- educational qualifications, CV, cover letter;
- message content.
Legal basis for processing
The Data Subject has given consent to the processing of their personal data for one or more specific purposes.
In particular, the Data Subject’s decision to contact us by submitting a request shall be considered a clear affirmative action equivalent to written consent pursuant to Article 4(11) GDPR.
Retention period
Data processed for the purposes described in this section will be retained for the period strictly necessary to respond to the Data Subject’s requests.
The retention period may be extended where necessary to comply with legal obligations or to defend a right before a competent authority.
Processing methods
Personal data will be processed primarily using electronic or automated tools, in accordance with methods and means suitable to ensure data security and confidentiality, in compliance with the GDPR.
In particular, all appropriate technical, IT, organisational, logistical, and procedural security measures will be adopted to ensure an adequate level of data protection, allowing access only to authorised personnel.
The information collected and the processing methods will be relevant and not excessive in relation to the services provided. Data will also be managed and protected in environments with controlled access.
Who do we share personal data with?
Without prejudice to disclosures required by law or contractual obligations, personal data may be shared exclusively for the purposes set out in this Privacy Notice, by way of example, with:
- legal or natural persons acting as Data Processors, performing outsourced activities (e.g. website management and maintenance), formally appointed pursuant to Article 28 GDPR;
- employees and/or collaborators (including system administrators) authorised to process personal data under the direct authority of the Data Controller;
- employees and/or collaborators of Data Processors (including system administrators), authorised under the direct authority of the external Data Processors;
- public and/or private entities, natural and/or legal persons, where disclosure is necessary or functional to the proper operation of the website or to comply with legal obligations.
Personal data will not be disseminated, except in anonymous and aggregated form for statistical or research purposes.
Identity and contact details of Data Processors
The complete and updated list of Data Processors is available upon request by contacting privacy@greadelettronica.it.
Transfer of data to third countries
We will not transfer your personal data to countries outside the European Economic Area (EEA), which includes EU Member States as well as Norway, Liechtenstein, and Iceland.
Should such a transfer become necessary to pursue the purposes described in this Privacy Notice, the Organisation guarantees that any transfer outside the EEA will take place in compliance with GDPR requirements and with full protection of data subjects’ rights and freedoms.
Where no adequacy decision has been adopted by the European Commission for the recipient third country, data transfers will be carried out using appropriate safeguards pursuant to Articles 46 et seq. of the GDPR, including Standard Contractual Clauses approved by the European Commission, and following an assessment of the legislation of the destination country.
Your rights and how to contact us
As a Data Subject, you may exercise the rights set out in Articles 15 et seq. of the GDPR, including the right to:
- obtain confirmation as to whether or not personal data concerning you are being processed and access such data and related information;
- request rectification of inaccurate personal data and completion of incomplete data;
- request erasure or restriction of processing, where applicable under the GDPR;
- request data portability in accordance with the GDPR and applicable national legislation.
Requests may be submitted to privacy@greadelettronica.it.
Right to lodge a complaint
If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the competent Supervisory Authority pursuant to Article 77 GDPR, or to seek judicial remedy pursuant to Article 79 GDPR.
Amendments
GREAD ELETTRONICA SRL reserves the right to amend this Privacy Notice at any time, providing appropriate notice to Data Subjects and ensuring an equivalent level of personal data protection.
To review any updates, you are encouraged to consult this Privacy Notice regularly or contact us at privacy@greadelettronica.it.