PRIVACY POLICY AS OF ARTICLES 13 and 14 REG. EU 679/2016 FOR VISITORS / GUESTS
| DATA CONTROLLER Guarantees the security, confidentiality and protection of the personal data in its possession and which it processes. |
ROBUR S.P.A. – VAT Reg. No. 00373210160 Via Parigi 4/6 – 24040 Verdellino – Zingonia (BG) privacy@robur.it / roburspa@pec.it +39 035.888.111 |
TYPE OF DATA
The personal data you provide will be processed in accordance with applicable privacy laws and regulations. Therefore, the Company undertakes to process them according to principles of correctness, lawfulness and transparency for the purposes indicated below, gathering them to the extent necessary and accurately for their processing, allowing their use only to authorised and trained personnel and for the purpose of guaranteeing the necessary confidentiality of the data provided.
PURPOSE OF THE PROCESSING
Personal data collected on entry may be identifying and non-sensitive personal data (e.g. name, surname, signature) and may be processed for the following purposes:
- to allow you to enter the company’s premises after receiving a badge;
- to pursue a legitimate interest of the Controller, specifically to: protect the company’s premises and assets, prevent and suppress illegal acts;
- to fulfil legal obligations such as: compliance with the obligations set forth by laws, regulations or EU legislation or imposed by the authority concerning safety on company premises;
- to safeguard the vital interests of the data subject, in particular to guarantee his/her safety and security on the company's premises.
LEGAL BASIS AND PROVISION OF DATA
The legal basis is:
- performance of pre-contractual measures adopted by the Data Controller at the request of the Data Subject, pursuant to Article 6, sub-paragraph 1, point b of the GDPR;
- safeguard of the vital interests of the data subject or of another natural person pursuant to Article 6 point d of the GDPR.
The provision of your personal data is compulsory and failure to provide them will be reason to refuse entry to the company.
METHODS OF PROCESSING
The personal data may be processed in digital or paper form and, in a non-automated way, by means of the following operations: collection, registration, organisation, storage, consultation, processing, communication by transmission or any other form of making available, restriction, deletion and destruction of Personal Data.
Processing is carried out in compliance with the security and confidentiality rules established by law. The Data Controller implements all the technical and security measures set forth by law.
RECIPIENTS OF THE DATA & PERSONS AUTHORISED TO PROCESS THEM
Your personal data are not subject to disclosure.
Processing is performed exclusively by the data controller and/or people authorised to process the data, such as, for example, receptionists and safety officers.
DATA STORAGE
The Data Controller will process your Personal Data only for the time necessary to fulfil the above purposes and, in any case, for no longer than 1 year after your access to the company's premises.
DATA TRANSFER TO COUNTRIES OUTSIDE THE EU
Personal Data are not transferred to countries in the European Union or to third countries outside it.
Any transfer of the Data Subject’s data outside the European Union may only take place under the conditions and with the guarantees provided for by the Privacy Law and, in particular, in accordance with articles 44 - 49 of the GDPR.
RIGHTS OF THE DATA SUBJECT
The data subject has the right (in accordance with the provisions of Articles 15 et seq. of Reg. (EU) 679/2016) to request from the Data Controller access to personal data concerning him/her, their rectification, deletion, portability, objection to processing as well as the integration of incomplete personal data and the restriction of processing. Furthermore, where applicable, you may revoke your consent at any time. These rights may be exercised at any time with the Controller by sending a request in writing to privacy@robur.it. Moreover, you have the right to lodge a complaint with the Italian Data Protection Authority, as well as use the other means of protection provided by applicable law.
UPDATES AND AMENDMENTS
The privacy policy is a tool provided for by the Regulation in order to apply the principle of transparency and facilitate the management of the data processed. In the event of changes to the processing methods and/or national or European legislation, the privacy policy may be reviewed and supplemented; in the event of major changes, notice will be given on the company’s website www.robur.com and the policy will be redistributed.