Information on the processing of personal data pursuant to art. 13 of the Regulation (EU) n. 2016/679
Pursuant to art. 13 of the Regulation (EU) n. 2016/679, also called the General Data Protection Regulation (hereafter “GDPR”), METHODOS SPA informs you that your personal data (hereafter “Data”) will be processed in compliance with the provisions of GDPR and of any legislation applicable with reference to the processing of personal data in accordance with the following information.
- Data controller responsible for data protection.
The Data Controller is METHODOS SPA, with registered office in Via Mellerio, 3 Milan (hereafter the “Owner”). The Data Protection Officer is ECOCONSULT SRL, Via Goldoni 1, Milan
- Categories of Data.
The Data processed by the Owner includes: navigation data, data provided voluntarily by users / visitors to the site, and cookies.
- Navigation data
The computer systems and the software procedures used to operate this site acquire, during normal operation, some personal data that is then implicitly transmitted in the use of Internet communication protocols. Such information, by their nature could, through associations and processing of data held by third parties, allow the identification of users / visitors (e.g. IP address, domain names of computers used by users / visitors who connect to the site). This data is used only for statistical information (and is therefore anonymous) and to check the correct functioning of the site. No data deriving from the web service will be communicated or disseminated.
- Data provided voluntarily by users / visitors
As specified for navigation data, users / visitors are free to provide their personal data through the contact forms. The data provided may be used for communication activities by Methodos and may be deleted or modified following an explicit request by the user. Failure to include such personal data in the contact forms will solely affect the inability of Methodos to establish contact with the user in question.
- Purpose and legal basis of the processing; legitimate interest.
The European Data Protection Regulation confirms that all processing of data must be grounded in a suitable legal basis. The lawful bases of processing are consent, fulfillment of contractual obligations, vital interests of the person concerned or third parties, legal obligations to which the owner is subject, public interest or exercise of public authority, prevailing legitimate interest of the owner or third parties to whom the data has been communicated.
By completing this information form and specifically through the communication of your e-mail address, you authorize, with your prior expressed consent, the processing of your data for each of the following purposes:
- Contact by email by the owner or by authorized persons
- Sending information material regarding the Owner concerning publications, events, research of the company, corporate governance and the new board of directors.
The authorizations for the aforementioned purposes are optional, but failure to provide them will result in the failure to release the requested information.
Data will also be processed for the fulfillment of administrative purposes and legal obligations, pursuant to art. 6, paragraph 1, letter a), b) and c) of GDPR as well as for the pursuit of the legitimate interests of the owner, as per art. 6, paragraph 1, letter f of GDPR.
In any case, the processing of your data will be carried out on the basis that the legitimate interest of the owner takes place in compliance with the provisions of art. 6, paragraph 1, letter f of GDPR.
- Methods of processing.
Your data is collected and registered in a lawful and correct manner for the above purposes in accordance with the provisions of GDPR regarding security measures and in any case in such a way as to guarantee the security and confidentiality of the Data.
The European Data Protection Regulation includes the obligation to inform interested parties in the event that data processing is carried out using automated procedures. If such processing is carried out, the company must also provide significant information on the logic used, as well as the importance and expected consequences of this processing for the interested party.
The company does not process data through automated decision-making processes.
- Recipients or categories of recipients.
The Data may be made accessible, brought to the attention of or communicated to the following subjects, who will be appointed by the Data Controller, depending on the case, as responsible – the full list is available at the owner’s office – or in charge of:
- organizations of the group of which the Holder is a member, employees and / or collaborators of any title of the Owner;
- public or private entities, natural or legal persons, of which the Data Controller uses for the performance of activities instrumental to the achievement of the aforementioned purpose or to which the Data Controller is obliged to communicate the Data pursuant to legal or contractual obligations.
In any case, the Data will not be disclosed.
- Transfer of data abroad.
The European Data Protection Regulation includes the obligation to inform interested parties in the case of transfer of data concerning them to Third Countries (not belonging to the EU or the European Economic Area: Norway, Iceland, Liechtenstein) or International Organizations.
The company, as Data Controller, informs data subjects that it does not transfer data to third countries.
- Retention period.
The data collected by the Company, for the purposes previously indicated, will be kept for the time necessary to carry out the operations for which they are acquired. The retention period will be determined on the basis of the assessment of the individual transaction and will take place, however, in compliance with the principles of necessity, purpose, relevance and non-excess sanctioned pursuant to the regulation.
- Access rights, cancellation, limitation and portability.
We inform, finally, that the articles 11-20 of the regulations confer on the interested parties the exercise of specific rights. The rights granted to the interested parties pursuant to art. 7 of the Privacy Code remain unchanged; with the regulation, additional rights are added to them, such as the right to obtain from the holder confirmation of the existence or otherwise of their personal data and that such data be made available in an intelligible form; to know the origin of the data as well as the logic and the purposes on which the processing is based; to obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law as well as updating, correction or, if interested, integration of data; to oppose, for legitimate reasons, the processing itself.
European Regulations also recognize the right of the interested party to file a complaint with the supervisory authority, the right to withdraw consent at any time and the right to data portability.
To exercise these rights, you can contact the company directly at our registered office in Milan, Via G. Mellerio 3, by post or by fax, to the num. 0248193369.