PRIVACY NOTICE FOR WEBSITE DATA
updated to EU Reg 2016/679
(European Regulation on the protection of personal data)
1. Introduction
MIN ENGINEERING SRL takes user privacy seriously and is committed to respecting it. This privacy policy ("Privacy Policy") describes the personal data processing activities carried out by Min Engineering S.r.l. through the website minengineering.it (Site) and the commitments undertaken in this regard by the Company. Min Engineering may process the user's personal data when they visit the Site and use the services and features on the Site. In the sections of the Site where the user's personal data is collected, a specific information notice is usually published pursuant to art. 13 /15 of EU Reg. 2016/679.
Where required by EU Reg. 2016/679, the user's consent will be requested before processing their personal data. If the user provides third-party personal data, they must ensure that the communication of the data to Min Engineering S.r.l. and the subsequent processing for the purposes specified in the applicable privacy information is in accordance with EU Reg. 2016/679 and the applicable legislation.
2. Identification details of the data controller, data processor, and Privacy Officer
The Data Controller is MIN ENGINEERING SRL, located at VIA BOCCHETTO nr 6, 20123 MILANO (MI)
3. Types of data processed
Visiting and browsing the Site generally do not involve the collection and processing of the user's personal data except for navigation data and cookies as specified below. In addition to the so-called "navigation data" (see below), personal data voluntarily provided by the user when interacting with the Site's features or requesting to use the services offered on the Site may also be processed. In compliance with the Privacy Code, MIN ENGINEERING SRL may also collect the user's personal data from third parties in the course of its activities.
4. Cookies and navigation data
The Site uses "cookies." By using the Site, the user consents to the use of cookies in accordance with this Privacy Policy. Cookies are small files stored on the user's computer hard drive. There are two main categories of cookies: technical cookies and profiling cookies.
Technical cookies are necessary for the proper functioning of a website and to allow the user to navigate; without them, the user may not be able to view pages correctly or use certain services.
Profiling cookies are designed to create user profiles to send advertising messages in line with the preferences shown by the user during navigation.
Cookies can also be classified as:
_ "session" cookies, which are immediately deleted when the navigation browser is closed;
_ "persistent" cookies, which remain in the browser for a specified period. They are used, for example, to recognize the device connecting to a site, facilitating user authentication operations;
_ "own" cookies, generated and managed directly by the website manager the user is browsing;
_ "third-party" cookies, generated and managed by parties other than the website manager the user is browsing.
5. Cookies used on the site
The Site uses the following types of cookies:
a. Own session and persistent cookies, necessary to allow navigation on the Site, for internal security, and system administration purposes;
b. Third-party session and persistent cookies, necessary to allow the user to use multimedia elements on the Site, such as images and videos;
c. Third-party persistent cookies, used by the Site to send statistical information to the Google Analytics system, through which MIN ENGINEERING SRL can perform statistical analysis of access/visits to the Site. The cookies used pursue purely statistical purposes and collect information in aggregate form. Through a pair of cookies, one persistent and one session (which expires when the browser is closed), Google Analytics also saves a log with the start and end times of the visit to the Site. You can prevent Google from detecting data via cookies and the subsequent processing of data by downloading and installing the browser plugin from the following address: http://tools.google.com/dlpage/gaoptout?hl=it
d. Third-party persistent cookies, used by the Site to include buttons from certain social networks (Facebook, Twitter, and Google+). By selecting one of these buttons, the user can publish the contents of the web page they are visiting on their personal page of the relevant social network.
The Site may contain links to other sites (so-called third-party sites). MIN ENGINEERING does not access or control cookies, web beacons, and other user tracking technologies that may be used by third-party sites accessed from the Site; MIN ENGINEERING does not control the content and materials published or obtained through third-party sites, nor the methods for processing the user's personal data, and expressly disclaims any responsibility for such eventualities. The user is required to verify the privacy policies of third-party sites accessed through the Site and to inform themselves about the conditions applicable to the processing of their personal data. This Privacy Policy applies only to the Site as defined above.
6. How to disable cookies in browsers
If you wish, you can manage cookies directly through your browser settings. However, deleting cookies from your browser may remove preferences you have set for the MIN ENGINEERING site, so it would be advisable to visit this page periodically to review your preferences.
For more information and support, you can also visit the specific help page of the web browser you are using:
Internet Explorer;
Firefox;
Safari;
Chrome;
Opera
7. Retention of personal data
Personal data is stored and processed through computer systems owned by MIN ENGINEERING and managed by third-party technical service providers; for more details, please refer to the section "Scope of accessibility of personal data" below. Data is processed exclusively by personnel specifically authorized, including personnel assigned to carry out extraordinary maintenance operations. Personal data will be kept for the duration of the contract and after the end of the contract to fulfill the legal obligation of MIN ENGINEERING, including claims for any complaints, in accordance with applicable law, and then will be deleted or anonymized.
If we consent to the processing of our products and services for direct marketing purposes after the contract expires, we will process the data until the consent is withdrawn.
8. Purposes and methods of data processing
MIN ENGINEERING may process the user's common and sensitive personal data for the following purposes: user use of services and features on the Site, managing user requests and reports, sending newsletters, managing applications received through the Site, etc.
Furthermore, with the user's additional and specific optional consent, MIN ENGINEERING may process personal data for marketing purposes, i.e., to send promotional material and/or commercial communications relating to the Company's services, to the contact details provided, through traditional and/or automated contact methods (such as, mail, operator phone calls, etc.) as well as automated (such as, internet communications, fax, email, sms, applications for mobile devices such as smartphones and tablets - so-called APPS -, social network accounts - e.g., via Facebook or Twitter -, automatic operator phone calls, etc.).
Personal data is processed both in paper and electronic form and entered into the company information system in full compliance with EU Reg 2016/679, including security and confidentiality profiles and inspired by the principles of fairness and lawfulness of processing. In accordance with EU Reg 2016/679, data is stored and retained for the time necessary to achieve the purposes for which it is processed and, in any case, for as long as you decide to be registered on our website.
9. Security and quality of personal data
MIN ENGINEERING is committed to protecting the user's personal data security and complies with the security provisions of applicable regulations to prevent data loss, unlawful or incorrect use of data, and unauthorized access, with particular reference to the Technical Regulations on minimum security measures. Furthermore, the information systems and software programs used by MIN ENGINEERING are configured to minimize the use of personal and identification data; such data is processed only to achieve the specific purposes pursued from time to time. MIN ENGINEERING uses multiple advanced security technologies and procedures to help protect users' personal data; for example, personal data is stored on secure servers located in protected and controlled access locations. The user can help MIN ENGINEERING keep their personal data up-to-date and accurate by communicating any changes to their address, qualifications, contact information, etc.
10. Scope of communication and access to data
The user's personal data may be disclosed to:
- all parties to whom the right to access such data is recognized by legislative measures;
- our collaborators, employees, within the scope of their duties;
- all those natural and/or legal, public and/or private persons when the communication is necessary or functional to the performance of our activity in the ways and for the purposes described above;
11. Nature of providing personal data
The provision of certain personal data by the user is mandatory to allow the Company to manage communications, requests received from the user, or to recontact the user to follow up on their request. These types of data are marked with an asterisk [*], and in such cases, the provision is mandatory to allow the Company to follow up on the request, which, in the absence of such data, cannot be fulfilled. Conversely, the collection of other data not marked with an asterisk is optional: failure to provide it will not have any consequence for the user.
The provision of personal data by the user for marketing purposes, as specified in the section "Purposes and methods of data processing," is optional, and refusal to provide it will have no consequence. Consent given for marketing purposes is intended to include sending communications through both automated and traditional contact methods as exemplified above.
12. Rights of the data subject
12.1 Art. 15 (right of access), 16 (right to rectification) of EU Reg. 2016/679
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them are being processed and, if so, access to the personal data and the following information:
a. the purposes of the processing;
b. the categories of personal
data concerned;
c. the recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly recipients in third countries or international organizations;
d. the period for which the personal data will be stored or, if not possible, the criteria used to determine that period;
e. the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing personal data concerning the data subject or to object to such processing;
f. the right to lodge a complaint with a supervisory authority;
h. the existence of automated decision-making, including profiling, and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject.
12.2 Right under Article 17 of EU Reg. 2016/679 - Right to erasure ("right to be forgotten")
The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay and the data controller has the obligation to erase personal data without undue delay where one of the following grounds applies:
a. the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject withdraws consent on which the processing is based according to Article 6(1)(a) or Article 9(2)(a), and where there is no other legal ground for the processing;
c. the data subject objects to the processing pursuant to Article 21(1) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21(2);
d. the personal data have been unlawfully processed;
e. the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the controller is subject;
f. the personal data have been collected concerning the offer of information society services referred to in Article 8(1) of EU Reg. 2016/679.
12.3 Right under Article 18 - Right to restriction of processing
The data subject has the right to obtain from the data controller restriction of processing where one of the following applies:
a. the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b. the processing is unlawful, and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c. the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise, or defense of legal claims;
d. the data subject has objected to processing pursuant to Article 21(1) pending the verification whether the legitimate grounds of the controller override those of the data subject.
12.4 Right under Article 20 - Right to data portability
The data subject has the right to receive the personal data concerning them, which they have provided to a controller, in a structured, commonly used, and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
13. Withdrawal of consent to data processing
The data subject has the right to withdraw consent to the processing of their personal data by sending a registered letter with return receipt to the following address: MIN ENGINEERING SRL VIA. BOCCHETTO nr 6, 20123 MILANO (MI) accompanied by a photocopy of their identity document, with the following text: <<withdrawal of consent to the processing of all my personal data>> or via pec to minengineering@pec.it. At the end of this operation, your personal data will be removed from the archives as soon as possible.
If you wish to obtain more information on the processing of your personal data or to exercise the rights mentioned in the previous point, you can send a registered letter with return receipt to the following address: MIN ENGINEERING SRL VIA. BOCCHETTO nr 6, 20123 MILANO (MI) accompanied by a photocopy of your identity document, with the following text: <<withdrawal of consent to the processing of all my personal data>> or via pec to minengineering@pec.it. Before we can provide, or change any information, it may be necessary to verify your identity and answer some questions. A response will be provided as soon as possible.