Information on the processing of personal data – Articles 13 and 14 – EU Regulation 679/2016
The aforementioned legal provisions regulate the confidentiality of personal data and impose a number of obligations on those who process information referring to other subjects. Among the fulfilments to be complied with there is that of adequately informing the natural person to whom the data refer (Interested Party) about the use that is made of the relevant data so that the consent to their processing is freely expressed and unequivocal.
ONN WATER SRL protects the privacy of the visitors of its website www.onnwater.com by adopting the most suitable measures for the protection of personal data according to the provisions of the law.
The information concerns only the website www.onnwater.com and not other websites reached by the user through links.
In compliance with the aforementioned provisions, we therefore provide you with the following information:
a) Data Controller
ONN WATER S.R.L.
via Gaetano Donizetti 2
20122 Milan (MI)
email: info@onnwater.com
PEC: onnwater.pec@legalmail.it
b) Purposes and legal basis of processing
USE OF CONTACT FORMS
The information provided to us will be used to respond to your request. The legal basis is found in the performance of a contract to which the Data Subject is a party or the execution of pre-contractual measures at the request of the same (GDPR 679/2016 art. 6 par. 1b).
CHAT USE
It is possible to request information via the CHAT function of Whatsapp.
The legal basis is found in the performance of a contract to which the Data Subject is a party or the execution of pre-contractual measures at the request of the same (GDPR 679/2016 art. 6 par. 1b).
SENDING COMMUNICATIONS VIA CONTACT DETAILS ON THE SITE
The information provided to us by email or telephone will be used to respond to the user’s request.
The legal basis is found in the performance of a contract to which the Data Subject is a party or the execution of pre-contractual measures at the request of the same (GDPR 679/2016 art. 6 par. 1b).
Information provided to us by means of our social channels will be treated in the same way as the communications listed above. By using the social channels, the Data Controller cannot be responsible for any further use of the data by the Company that owns the Platform and which must in any case be stated in the Platform’s information notice.
c) Method of processing
Your personal data will mainly be processed electronically by authorised data processors, who are constantly identified, appropriately instructed and made aware of the constraints imposed by the relevant legislation, with the use of security measures aimed at guaranteeing the confidentiality of the data subject to whom the data relates and preventing undue access by third parties or unauthorised personnel.
d) Period of data retention
Data are retained for the time strictly necessary to fulfil the purpose for which they were collected, including the fulfilment of legal and tax obligations arising, collection/payment operations, the management of any service/product guarantees and other rights. When personal data becomes no longer functional for the purposes for which it was collected, and there are no legal reasons for retaining it, it will be deleted.
Personal data relating to CVs sent to the Controller will be kept for 24 months and, if not updated, will be deleted.
Personal data will also be deleted if the data subject withdraws specific consent.
The duration of data retention may also depend on tax regulations and other national and European laws as well as the need to protect a right of the Data Controller, the Data Subject or a third party.
e) Rights of the Data Subject
The Data Subject is informed that he/she may request from the Controller :
– access to your personal data (Art. 15 EU Regulation 679/2016)
– integration of the data when they have changed (Art. 16 EU Regulation 679/2016)
– rectification of the data (Art. 16 EU Regulation 679/2016)
– erasure or oblivion as appropriate (Art. 17 EU Regulation 679/2016)
– the restriction of processing because e.g. some data are in excess of the purposes to be fulfilled (Art. 18 EU Regulation 679/2016)
– portability in the sense of transferring the data to another data controller without charge or expense to you (Art. 20 EU Regulation 679/2016)
– to object to the processing for legitimate reasons (Art. 21 EU Regulation 679/2016)
– to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation (Art. 7 para. 3 EU Regulation 679/2016)
– lodge a formal complaint with the Garante Privacy following the procedures and directions published on the Authority’s official website at www.garanteprivacy.it (art. 51 EU Regulation 679/2016)
f) Communication of data outside the Data Controller’s structure
Your data will not be disseminated and will not be transferred to third countries.
The data may be processed by Authorised Persons (Employees, Collaborators) and/or External Resources for the purposes of Technical Assistance, IT Assistance, Accounting Consultancy, Marketing Consultancy and to Third Parties acting as Autonomous Holders (forwarding agents, banks, public bodies, electronic payment management companies). The updated list of the subjects who may become aware of your personal data can be requested from the Data Controller.
g) Our website uses cookies. For more information about cookies, please refer to our Cookie Policy.
The exercise of your rights is not subject to any formal constraints and is free of charge.
You may exercise your rights at any time by sending a registered letter with acknowledgement of receipt or a PEC to the Controller’s address.
Personal data shall mean any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more elements that are characteristic of his or her physical, physiological, genetic, mental, economic, cultural or social identity;
Processing of personal data means any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.a
