Marchetti | Website privacy policy

Information provided pursuant to Reg.EU 2016/679 (GDPR), Art. 12, 13, 14 and to Italian D.Lgs.196/2003 (modified by D.lgs. 101/18)

The Data Subjects are informed of the following general profiles, valid for all areas of treatment:

• all the data of the subjects with whom we interface are treated in a lawful, correct and transparent manner, in compliance with the general principles set out in Art.5 of the GDPR;
• specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access, pursuant to Article 32 of the GDPR.

The Data Controller is Marchetti Autogru Spa (in the person of its pro-tempore legal representative) who can be contacted for any request regarding privacy or to exercise the rights listed below, at the addresses on the site itself.
It should also be noted that it is possible to contact the Data Protection Officer by writing to: dpo@gallidataservice.com
It is possible to contact the Data Controller or the DPO to exercise the rights referred to in Articles 15-22 of the GDPR:

• the right to request the presence and access to personal data (Art.15 "Right of access")
• the right to obtain the correction / integration of incorrect or incomplete data (Art.16 "Right of rectification")
• the right to obtain, if there are justified reasons, the cancellation of data (Art.17 "Right to cancel")
• the right to obtain the processing limitation (Art.18 "Right to limitation")
• the right to receive data in a structured format (Art.20 "Right to portability)
• the right to oppose the processing and automated decision-making processes, including profiling (Art.21, 22)
• the right to revoke a previously granted consent
• right to present, in case of non-reply, a complaint to the Data Protection Authority.

Navigation Data

The information systems and software procedures relied upon to operate this web site acquire personal data as part of their standard functioning; the transmission of such data is an inherent feature of Internet communication protocols. Such information is not collected in order to relate it to identified data subjects, however it might allow user identification after being processed and matched with data held by third parties. This data category includes IP addresses and/or the domain names of the computers used by any user connecting with this web site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of such requests, the method used for submitting a given request to the server, returned file size, a numerical code relating to server response status (successfully performed, error, etc.), and other parameters related to the user's operating system and computer environment.

Cookies

Cosa sono i cookies
Cookies are brief fragments of texts (letters and/or numbers) that allow the web server to memorize on the client browser information to be reused in the course of the same visit to the site (session cookies) or subsequently, also after days (persistent cookies). The cookies are memories, according to the user’s preferences, by the single browser on the specific device used (computer, tablet, smartphone). Similar technologies like for example, web beacons, transparent GIFs and all the types of local storage introduced with HTML5, can be used to gather information on the user’s behavior and the use of the services. After this circular letter we shall refer to the cookies and all the similar technologies by using only the term “cookie.”

“Resolution” of static IPs belonging to legal entities

Some cookies can decipher the static IP and connect it to the legal entities who have browsed the site; In any case, these are data of a legal person and never of a natural person.

This site uses only technical cookies

Correlations with portals and social networks

On the pages of the site there may be buttons, widgets, plug-ins, links, Social Network cookies to facilitate interaction with social platforms and sharing content. We point out, by way of non-exhaustive example: linkedin and youtube, etc. (which however use technologies and tools that reduce the identifying power of cookies, such as anonymisation or hashing/encryption systems). Please note that the processing of data entered by the user on the various social channels takes place according to the rules and privacy settings of the social network itself, accepted by the user upon registration.

1.3 Data provided voluntarily by the user

The optional, explicit and voluntary sending of messages to contact addresses, private messages sent by users to institutional profiles/pages on social media (where this possibility is provided), as well as the compilation and forwarding of any forms/modules present , involve the acquisition of the sender's contact data, necessary to respond, as well as all personal data included in the communications. The sender therefore remains personally responsible for the accuracy of the data provided, as well as their relevance and non-excess with respect to the requests in question. The owner will process such data in order to provide feedback to requests received and will keep them for as long as necessary to process the request.

2.1 Object of the processing

The company processes the personal data of potential customers/suppliers (legal entities) acquired through the KOMPASS platform for commercial purposes.
The company processes personal identification data of customers / suppliers (for example, name, surname, company name, personal/fiscal data, address, telephone, e-mail, bank and payment details) and of their operational contacts (name, surname and data contact details) acquired and used in the provision of the services provided.
At the Customer's request, the vehicle can be equipped with a black box which, through a third-party technological supplier, makes the vehicle's usage data available via its portal (e.g. geolocation, on/off, operational and technical information, etc.) . These data are available to the Customer, available to Marchetti Autogru Spa and available to the portal supplier. In this case, Marchetti Autogru Spa will communicate the Customer's contact details to the portal provider; Marchetti Autogru may also have access to the Customer's data contained in the portal. For these treatments, Marchetti Autogru qualifies as an external manager and is appointed by the Customer pursuant to art. 28 GDPR by means of a specific act.
It is understood that the privacy relationships between the technology supplier and the Customer, as well as between the Customer and its employees, will be regulated between the parties independently of the will of Marchetti Autogru Spa

2.2 Purpose and legal basis of the processing

The data acquired through the KOMPASS platform are used, subject to the granting of consent (art. 6, letter a) GDPR), to send advertising material.
Data connected to customers and suppliers (including documents proving Regularity of Contributions and Wages) are processed for:

• conclude contractual/professional relationships and provide the related services;
• fulfill the pre-contractual, contractual and fiscal obligations deriving from existing relationships, as well as manage the necessary communications connected to them;
• legitimate interest of data controller
• fulfill the obligations established by law, by a regulation, by community legislation or by an order from the Authority;
• exercise a legitimate interest as well as a right of the Data Controller (for example: the right of defense in court, the protection of credit positions; ordinary internal operational, management and accounting needs).

Failure to provide the aforementioned data will make it impossible to establish the relationship with the Data Controller. The aforementioned purposes represent, pursuant to Article 6, paragraphs b,c,f, suitable legal bases for the lawfulness of the processing. If it is intended to carry out processing for different purposes (e.g. marketing communications, photo/video content production, etc.), specific consent will be requested from the interested parties.

2.3 Processing methods and storage time

The processing of personal data is carried out by means of the operations indicated in the Art. 4 no. 2) GDPR and precisely: collection, recording, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data is processed both on paper and electronically. The Data Controller will process personal data for the time necessary to fulfill the purposes for which they were collected and related legal obligations (usually coinciding with the relationship with the interested party, without prejudice to the extension in reference to the obligations of conservation of administrative documentation and of business correspondence).

2.4 Scope of processing

The data is processed by internal subjects duly authorized and trained pursuant to Article 29 of the GDPR. It is also possible to request the scope of communication of personal data, obtaining precise information on any external parties who operate as independent data controllers or data controllers (e.g. consultants, technicians, banking institutions, transporters, etc.). The data may be communicated to any controlled/connected companies in various capacities. The data are not subject to dissemination or transfer outside the EU (they may be subject to transfer outside the EU only in compliance with the conditions set out in Chapter V of the GDPR, aimed at ensuring that the level of protection of the interested parties is not compromised "Art.45 Transfer on the basis of an adequacy decision, Art.46 Transfer subject to adequate guarantees, Art.47 Binding corporate rules, Art.49 Specific exceptions"). The data is not subject to automated processes that produce significant consequences for the interested party.

It should be noted that this information may be subject to periodic review, also in relation to the relevant legislation and jurisprudence. In any case, the interested party is invited to periodically consult the present policy..