With this document we are to provide you with the necessary information regarding the processing of Personal Data supplied by you, in particular regarding the purposes and methods of processing your Personal Data, as well as the scope of communication and dissemination thereof, to the nature of the data in our possession, their contribution and the retention period.
This document intends to accurately describe the methods of management of the processing of your Personal Data collected during the navigation of the Site or during the use of the services offered. The information is not valid for other Sites that may be consulted via links on the Site of the owner, which is not in any way responsible for the Sites of third parties.
The Data Controller
PPM Industries S.p.A. is the owner of the data collected through this Site, with address Via G. Terzi, S. Agata 23, Brembate di Sopra (BG), Italy, with EEC VAT Reg. No. IT02099620169 (hereinafter “PPM”): PPM establishes at its sole discretion the purposes and methods of treatment as well as the security procedures to be applied to ensure the confidentiality, integrity and availability of data.
Types of Personal Data collected by Q1®
The Data Controller processes Personal Data, identifying and non-sensitive data (in particular, name, surname, email, telephone number – later, “Personal Data” or even “data”) that you have communicated when requesting information, when purchasing of products on the site through the online shop, when requesting the download of the catalogs of Q1® products, or to be able to use the newsletter service offered by the Data Controller.
Procedure and storage of your Personal Data
The processing of your Personal Data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and in compliance with the principles of lawfulness, fairness and transparency and of the other principles indicated in art. 5 GDPR.
Personal Data shall be processed and stored for as long as required by the purpose they have been collected for.
1) Personal Data collected for purposes related to the performance of a contract between Q1® and the user shall be retained until such contract has been fully performed.
2) Personal Data collected for the purposes related to respond to your requests of information, to respond to your request to download the Q1® catalogs and to allow the user to navigate correctly on the Site shall be retained as long as needed to fulfill such purposes.
3) Personal Data collected for the purposes of the Q1®’s legitimate interests shall be retained as long as needed to fulfill such purposes.
4) Q1® may be allowed to retain Personal Data for a longer period whenever the User has given consent to such processing, as long as such consent is not withdrawn. Furthermore, Q1® may be obliged to retain Personal Data for a longer period whenever required to do so for the performance of a legal obligation or upon order of an authority.
Once the retention period expires, Personal Data shall be deleted. Therefore, the right to access, the right to erasure, the right to rectification and the right to data portability cannot be enforced after expiration of the retention period.
Purposes of processing of your Personal Data and legal basis of processing
Personal Data that is voluntarily provided will be processed for the following purposes:
- For navigation and registration on the Site
- For the purchase of products on the Site through the online shop and the related administrative and accounting activities
- To respond to your request of information
- To respond to your request to download the Q1® catalogs
- To fulfill the obligations established by the Law, by a Regulation, by the Community legislation or by an order of the Authority
- To prevent or discover fraudulent activity or malicious activities for the Site
- To exercise the rights of the Data Controller, for example the right to defense in Court
- prior consent for subscription to the newsletter service of Q1® or to send advertising material and/or commercial communications by Q1® by sending e-mail, text messages, mail, contact center
For the purposes referred in points 1 to 7, the processing of Personal Data is necessary to i) allow correct navigation on the Site; ii) for the performance of agreement with the user and/or for any pre-contractual obligations adopted upon request of the same; iii) for compliance with legal obligation to which Data Controller is subject; iv) for the purpose of the legitimate interest pursued by Data Controller like the right to defense in Court and prevent or discover fraudulent activity or malicious activities for the Site
For the purpose referred in point 8, the processing of Personal Data is lawful only if the user has given his consent.
Optional or mandatory provision of Personal Data; need for consent and consequences of non-consent.
Save for as provided by navigation data, the user is free to provide Personal Data.
The disclosure of Personal Data for the purposes referred in points 1 to 7 above is optional but necessary in order to allow the user to benefit from the services provided from time to time by Q1® in order to perfect specific functions. Failure to provide such data may make it impossible to obtain what has been requested or to use the services of the Data Controller.
Consent to process Personal Data for the purpose referred in point 8 – that is for promotional purposes, commercial communication and / or marketing in general by Q1® – is always optional. Failing this, the Data Controller will still be able to provide the services referred to in points 1 to 7 and you will still be able to improve the other functions and use the services provided by the Data Controller. You can therefore decide not to give the consent for the processing of your Personal Data for this purpose or to withdraw at any time and consent for the processing of your Personal Data already provided for the purpose referred in point 8, but the revocation will not affect the lawfulness of the treatment based on consent before revocation. The right to oppose the processing for the purposes referred in point, may be carried out at any time through automated means of contact, and will also extend to the processing of your data for the aforementioned purpose carried out by traditional means. In any case, the possibility remains for the interested party to exercise this right in part, that is, by opposing, for example, to the sending of promotional communications only via automated tools.
Subjects or categories of persons to whom your data may be disclosed
Your Personal Data may be disclosed to third parties only with your express consent, except in cases where disclosure is required by law or for purposes envisaged by law, for which your consent is not required. In such cases, the data may be made available to third parties who will use the data independently and exclusively for such purpose only (e.g., in the case of request made by the police or by the courts or other competent authorities, or to perform obligations arising the contract concluded with you). Your Personal Data shall not be disseminated in any other way.
Parties who may process your Personal Data
For certain activities Q1® has appointed third party companies for processing Personal Data. The companies that conduct such activities have been properly selected and are experienced, capable and trustworthy. They offer sufficient guarantees to the existing rules on treatment of data, including the data security profile.
These third parties will be appointed “Data Processors” for this purpose and will carry out their activities according to the instructions given by Q1® and under its control. Periodically verify that the Data Processors have punctually fulfilled the tasks entrusted to them and that they continue to provide adequate guarantees full compliance with the provisions on the protection of Personal Data. The updated list of the Data Processors can always be requested from the Data Controller. Your Personal Data are then processed by our persons in charge of the individual services.
However, Q1® cannot guarantee to its users that the safety measures taken for the Site, and for the transmission of data and information on the Site, will limit or exclude any risk of unpermitted access or leakage of data from the user’s computer. We advise that your computer is equipped with appropriate software to protect data transmission on the network, both incoming and outgoing (such as an updated antivirus system) and that your Internet service provider has taken appropriate measures in respect of the security of the network data transmission (such as firewalls and spam filters).
Links to other sites
Rights of interested parties
You can exercise your rights according to article 15 to 22 GDPR, in particular the right to access data, to correct or delete data, to request the limitation or to oppose the processing, in addition to the right to data portability.
Interested parties who believe that the processing of personal data referred to them through this website or its services is in violation of the provisions of the GDPR have the right to lodge a complaint with the Supervisory Authority, or to take appropriate judicial offices.
In case of violation of the Personal Data of the interested party, considering the provisions of art. 34 GDPR, the Data Controller will notify the interested party of the violation.
Contacts for exercising the rights of the interested parties
You can exercise your rights at any time by sending a registered letter to PPM Industries S.p.A. with address Via G. Terzi, S. Agata 23, Brembate di Sopra (BG), Italy, or by sending an email to firstname.lastname@example.org
This Site and the Services of the Data Controller are not intended for persons under the age of 16 and the Data Controller does not intentionally collect personal information about minors. In the event that information on minors were unintentionally registered, the Data Controller will delete them in a timely manner, at the request of users.
Social plugins and social networks
Our web pages may contain plug-ins of social networks (e.g. Facebook, LinkedIn, Instagram, etc.). If you access one of our web pages with a similar plug-in, the browser directly connects you to the social network server and the plug-in is displayed on the screen as a result of the connection with the browser. If a user of a social network visits our Site whilst logged on to its social network account, its personal information may be associated to the social network. Even if you use the plug-in, the information will be associated with your social plug-in functions. Additional information on the collection and use of data by social networks in general and on the rights and ways available to protect your privacy in this respect you should refer to the data protection provisions provided by the relevant social network. If you do not want to associate your visit to our web pages with your social network account, you must log off from the social network, before you visit our Site.
Personal Data is collected for the following purposes using the following services: Interaction with external social networks and platforms. These services allow you to interact with social networks, or other external platforms. Interaction and the information acquired is in any case subject to the user’s privacy settings relating to any social network. In the event you have installed a service interaction with social networks, it is possible that, even if the users do not use the service, the same collects traffic data relating to the pages in which it is installed.
Last updated on 20 July 2018