In accordance with and for the effects of Article 13 of the EU Regulation of April 27, 2016, No. 2016/679 (General Data Protection Regulation, GDPR) regarding the protection of individuals with regard to the processing of personal data and on the free movement of such data.
Pursuant to Article 13 of Regulation (EU) 2016/679 and Legislative Decree No. 196/2013, we wish to provide you with the following information.
- Identification details of the Data Controller
The Data Controller is IRBM S.p.A. (hereinafter also referred to as “IRBM”) with a registered office in Pomezia (RM) – via Pontina km 30.600.
- Contact details of the Data Controller
The Data Controller can be contacted at the e-mail address privacy@irbm.com.
- Legal Basis and Purpose of Processing
The legal basis justifying the processing of data is represented by the explicit consent of the data subject.
The identifying and contact data provided by you (for example, name, surname, mail address, telephone) will be processed exclusively for the following purposes:
- Sending newsletters;
- Sending information regarding new initiatives and/or projects initiated by the Data Controller.
Should the need arise to collect and process data for purposes other than those specified above, the Controller will provide prior notice and request the relevant consent.
The data subject has the right to object at any time to the processing of their data for this purpose by clicking on the “unsubscribe” button or by sending an e-mail to privacy@irbm.com. The provision of data is optional, however, the refusal to respond may result in the inability of the Controller to fulfill requests for sending newsletters and/or information regarding initiatives and projects of the Controller.
- Processing Methods
The processing is based on the principles of fairness, lawfulness, and transparency, relevance, and not excess, as well as security and protection through appropriate technical and organizational measures.
The processing of data is carried out using tools and procedures suitable to ensure security and confidentiality and can be carried out both through paper supports and with the aid of computerized means.
We also specify that in processing such data, we strictly adhere to the limits and conditions imposed by current regulations as well as the conditions imposed by the Data Protection Authority regarding the processing of personal data. In fact, the processing is carried out in such a way as to ensure the security and confidentiality of the data, through the adoption of measures provided for by Article 32 of the Regulation in order to preserve the integrity of the processed data and prevent unauthorized access by third parties.
- Place of Processing
The data received will be stored in databases and automated and/or paper archives of IRBM at its offices and/or in databases and automated archives at data centers of professionals and/or companies appointed as external data Processors and for the purposes indicated in the present Privacy Policy.
- Data Retention Period
The data will be kept until the data subject requests opposition to the sending of the newsletter and/or information regarding initiatives and projects of the Controller or until the service is discontinued by the Controller.
- Scope of Communication and Disclosure of Data
The personal data provided will not be “disclosed,” meaning they will not be made known to indeterminate subjects but may be communicated to authorized third parties – committed to confidentiality or appointed as data processors pursuant to Article 28 of Regulation (EU) 2016/679 – such as companies operating in the IT and IT support sector and hosting companies, where necessary for the purposes of this notice. The complete and updated list of data processors is available upon request. The data may be communicated to the competent authorities, according to the law’s terms. The data collected and processed may be communicated within Italy and transferred abroad inside and outside the EU exclusively for the purposes indicated in this notice. If the processing of personal data requires a transfer outside the European Economic Area, the Controller informs that the processing will take place in accordance with one of the methods permitted by the Regulation, such as the data subject’s consent, the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programs for the free movement of data (e.g., EU-USA Privacy Shield) or operating in countries considered safe by the European Commission.
- Data Subject Rights
We remind you that you can always contact the Data Controller identified above to exercise your rights as provided by the European Regulation and in particular, we inform you that you can exercise the right (i) to access your Personal Data (and know their origin, the purposes and objectives of the processing, the data of the subjects to whom they are communicated, the period of data retention, or the criteria useful for determining it), (ii) to request rectification, (iii) deletion (“right to be forgotten“), if no longer necessary, incomplete, incorrect, or collected in violation of the law, (iv) to request that the processing be limited to part of the information concerning you; (v) to the extent technically possible, to receive in a structured format or to transmit to you or to third parties indicated by you the information concerning you (so-called “portability” of information concerning you and those voluntarily provided by you); (vi) as well as to revoke your consent at any time, where this constitutes the basis of the processing.
However, the withdrawal of consent does not affect the lawfulness of the processing based on the consent given before its revocation.
The aforementioned rights can be exercised by a written request addressed informally to the Data Controller at the following addresses:
– IRBM S.p.A., Via Pontina km 30.600 – 00071 Pomezia (RM);
– email: privacy@irbm.com
IRBM also reminds how the data subject can in any case address and lodge a complaint with the supervisory authority (Data Protection Authority – http://www.garanteprivacy.it/) in the ways provided by the European Regulation.