DATA PROCESSING NOTICE

Dear Sir/Madam

This information is provided pursuant to Articles 13 and 20 of Regulation (EU) 2016/679 (hereinafter “GDPR”) in order to inform you, in accordance with the principle of transparency, of the manner in which your data will be processed in performance of the contractual relationship established with the Data Controller, or of a negotiation in progress concerning the supply of products and/or services offered by the same Data Controller.

1. Data Controller, Data Processor and Data Protection Manager
The Data Controller is MATEC INDUSTRIES S.R.L. with registered office in Corso Venezia 36 CAP 20121 – Milan (MI) in the person of its L.r.p.t. (hereinafter “Matec“).

We also wish to inform you that Matec has appointed a Data Protection Manager (DPO) in the person of Mr Gianluca Craia who can be reached at the following e-mail address: dpo@matecindustries.com

2. Purposes of data processing
We inform you that you will be required to provide and process your personal data for two specific purposes:

  1. Management of the pre-contractual and/or contractual relationship between you and Matec, having as object the supply of services and/or products by Matec in your favour, in case you operate as a client, or by you in favour of Matec, in case you operate as a supplier.
  2. Activities of marketing and promotion of Matec’s products and services (“Marketing and Promotion“), carried out by sending commercial information and in particular by:
    – Sending newsletters relating to Matec products and services
    – Demonstrations of the functionality of Matec products and services
    – Sending commercial information about Matec products and services
    – Telephone contacts

The processing of personal data requested by the interested party, both in the pre-contractual phase and in the phase of signing the contract, will be processed for purposes strictly connected and instrumental to the management of the per-contractual and/or contractual relationship, as well as the fulfilment of legal or regulatory obligations.

3. Categories of personal data that may be requested from you
You will be asked for information such as name, surname, e-mail and internal telephone number of the company contact person. If you operate as a professional or sole proprietor, your tax code and VAT number will also be considered personal data.

4. Nature of the data transfer
We would like to point out that with regard to the purpose stated in point 2. No. 1), the provision of your personal data is obligatory in order to be able to execute the contract concluded with you or in the course of negotiation (e.g. if the elements of a business offer are being discussed).
In the event that you decide not to provide the requested personal data, we would like to point out that Matec may not be able to fulfil the contract or conclude it if it is being negotiated.
On the contrary, with regard to the purpose described in No. 2, and therefore for Marketing and Promotion activities, the processing is not compulsory, therefore in the absence of your consent, this activity will not be carried out without any consequence.

5. Legal basis of the processing and request for consent
The legal basis of the processing depends on the relevant purpose.
With regard to the purpose stated in No. 1, the basis is the necessity of the processing for the execution of a contract and/or pre-contractual measures requested by you.
Because of the above, you will not be asked for any consent to the processing of your personal data.
With regard to purpose No. 2, however, the basis for the processing is your freely given consent.
In this sense, after reading this information notice, for purpose No. 2 you will be able to consent or not to the proposed processing in a separate section.
We remind you that if you do not give your consent to the processing of your personal data, this will mean that Matec will not be able to contact you to carry out Marketing and Promotion activities.

6. Recipients and possible categories of recipients of personal data
The data are processed by the Data Controller’s organisation by authorised and appointed persons.
The data may be communicated to external data processors who have entered into specific agreements, conventions or protocols of understanding with the Controller.
The data may be communicated to the following categories of recipients

  • Accountants,
  • Lawyers,
  • Inland Revenue Agency
  • Corporate bodies such as the Board of Statutory Auditors and Auditing Firms;
  • Other Suppliers and/or sub-suppliers

7. Processing methods and storage time

Processing will be carried out automatically and/or manually, in compliance with the security measures set out in Art. 32 of the GDPR, by specially appointed persons, in compliance with the provisions of Art. 29 GDPR.
Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Art. 5 GDPR, the storage period of your personal data is established

– in a period equal to ten years following the duration of the contract for data processed in relation to the purpose of managing the contractual relationship or in relation to pre-contractual measures requested by you.

– in a period equal to [12 months] for data processed in relation to the purpose of marketing and promotion of Matec products and services

8.Promotion and marketing
We would also like to inform you that if you give your consent to the processing of your data for the purposes of No. 2, i.e. marketing and promotion activities of Matec’s products and services, your personal data will be processed for the sole purpose of receiving information regarding the various types of products offered by Matec.
This processing includes traditional and non-traditional marketing activities, commercial information, the sending of advertising material or the carrying out of market research, direct sales activities or commercial communications, services and other activities of the Controller.
The necessary data collected for the performance of the above-mentioned activities will be processed for a period of 12 months.

9. Transfer of personal data abroad
Matec may transfer and/or communicate your personal data to

– one of the companies belonging to the Matec Group, even if located outside the European Union if this is necessary by virtue of the execution of contracts concluded with you or in the process of being concluded. This transfer of data may consequently involve the processing of your data outside the European Economic Area (EEA).

– one of its Customers and/or Suppliers even if they are located outside the European Union.
The Data Controller assures you as of now that should it become necessary to transfer the data for the purposes set out in Art. 3), to countries outside the EU, this may only take place to third countries in respect of which there is an adequacy decision of the European Commission (Art. 45 GDPR) or to third countries that guarantee an adequate level of protection of personal data, otherwise the transfer may only take place at the request of the data subject, based on Art. 49 of the GDPR.

10. Rights of the data subject
At any time, pursuant to Articles 15-22 of the GDPR, you may exercise your right to:

  1. request confirmation of the existence or otherwise of your personal data;
  2. obtain information about the purposes of the processing, the categories of personal data, recipients or categories of recipients to whom the personal data have been or will be disclosed and, when possible, the storage period
  3. obtain the rectification and erasure of data
  4. obtain the restriction of processing;
  5. obtain the portability of the data, i.e. receive them Matec, in a structured, commonly used and machine-readable format, and transmit them to another data controller without hindrance
  6. object to the processing and also in the case of processing for direct marketing purposes;
  7. withdraw consent to the processing of the data provided
  8. object to automated decision-making relating to natural persons, including profiling
  9. lodge a complaint with the Privacy Guarantor or other competent supervisory authority.

Please be informed that since the data processing is based on Art. 6(1)(a) or Art. 9(2)(a), EU Reg. 2016/679 You have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent before the revocation.
You may exercise your rights by written request sent to Matec Industries Srl, to the postal address of the registered office or to the email address privacy@matecitalia.com