pursuant to art. 13 of European Regulation No. 679 of 2016 and art. 13 of Legislative Decree No. 196 of 30 June 2003
Cutlite Penta S.r.l., a company belonging to the El.En. S.p.a. group is committed to protecting the privacy and confidentiality of personal data and ensures them the necessary protection from any event that might put them at risk of a breach.
Pursuant to article 13 of Legislative Decree No. 196 of 30 June 2003 (“Privacy Code”), Art. 13 of European Regulation No. 679 of 2016 (“Privacy Regulation”), Cutlite Penta S.r.l. intends to inform all users and/or visitors to www.cutlitepenta.com (respectively the “Users” or “Data Subject” and the “Site”), on the use of personal data, log files and cookies collected over the Site itself.
The term personal data refers to the definition contained in article 4, paragraph 1) of the Privacy Regulation, i.e. “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” (“Personal Data”).
The Personal Data processing controller is Cutlite Penta S.r.l., with registered office at Via Baldanzese, No. 17 – 50041 Calenzano (FI) – Italy, TAX and VAT No. 04418930485, tel. 055 8826822, fax 055 8873864 (herein after referred to as the “Data Controller”).
The updated list of designated Data Processors can be provided on request by the interested parties and/or Users.
Like all websites, our site also uses log files in which information is stored that is collected in an automated manner during users visit. In fact, the information systems and software procedures which perform the functions of the website automatically acquire, during their operation, some information, the transmission of which is implicit in the use of internet communication protocols.
The following information is collected:
This information is processed in an automated manner and collected exclusively in aggregate form for the purpose of verifying correct operation of the website.
No personal users’ data is acquired by the site.
The use of session cookies (which are not permanently stored on the users’ computer and disappear when the browser is closed) is strictly limited to the transmission of the identification data for the session (consisting in a random numbers generated by the server) which are necessary for the safe and effective exploration of the site.
The session cookies used on this site in order to avoid the use of other computer technologies which would be potentially harmful for the privacy of the user’s navigation and do not allow the acquisition of the users’ personal data.
Visiting this site, users can also receive cookies that are sent by different web sites (hereinafter referred to as “third parties”). The use of third party cookies, both temporary and permanent, by the site is anonymous and solely for the purpose of allowing the owner of the site to make use of web analysis services provided by others. These cookies make it possible to anonymously collect and record information on the site pages that have been visited but do not permit the identification of the visitor and are in no way connected with other information. These data are used exclusively to trace and examine the use of the sites by the users, compile statistics on the basis of the information that has been collected anonymously and through the use of data in aggregate form. However, some cookies will track Users’s IP address to provide us with information about which companies are accessing our Site.
Specifically, users of the Site should know that the analysis services that issues the cookies that we use are:
Visitor Queue: Visitor Queue is a B2B lead generation software that identifies corporate users according to the IP Address they enter the website. The IP addresses are used to track which companies are accessing our Site. This cookies is not used to identify individuals using the Site.
By accessing the Site and going beyond the introductory banner containing the short privacy notice, the Users consent to the use of the technical cookies specified in this document.
Individual cookies may be freely selected/deselected using this system, but this may also be done by using one’s web browser (selecting the settings menu, clicking on internet options, opening up the privacy tab and selecting the desired level for blocking cookies).
The following categories of Personal Data could be collected through the use of the Site:
In certain circumstances we may also collect:
The Personal Data of the Data Subject is processed exclusively for the following purposes:
The legal basis of the processing is the consent freely given.
The Data Subjects have the right to revoke the consent given at any time and without any particular formality: in any commercial communication there will be a section that will allow to easily revoke the consent given.
The Data Subjects can also revoke the consent given by sending a simple communication to the addresses referred in art. 11 below.
Apart from what is specified for cookies and browsing data, the Data Subjects are free to provide Personal Data contained in the forms on the Site or in any case indicated on the occasion of contacts with the Data Controller to request the sending of informative material or other communications or to access specific services. The absence of this data may make impossible to fulfil the request.
Pursuant to art. 5 of the Privacy Regulation, the personal data will be:
The Data Controller, in accordance with the principles of legality, purpose limitation and data minimisation, pursuant to art. 5 of Privacy Regulation, stores and processes personal data for the time strictly necessary to fulfil the purposes identified above and until the Data Subjects parties to revoke the consent given.
For the purpose of determining the appropriate retention period, the Data Controller shall consider the quantity, nature and sensitivity of the Personal Data, the purposes for which they are processed and if the same purposes can be achieved by means of other instruments.
In particular, for the purposes of marketing, personal data may be kept for a period of 24 months from 25 may 2018, unless renewal thereof (expect the opposition to receive further communications). The Data Controller shall, every two years from the data of publication of this notice, to request the renewal of consent.
The Data Controller shall consider the periods for which he might need to retain the Personal Data in order to fulfil legal obligations (e.g. administrative tasks) or to examine Users’ requests, complaints and defend its rights where necessary.
The processing and retention of digital material, such as pictures or video, will be performed until the data subjects communicate the withdrawal of consent to data processing.
Personal data may be brought to the attention of:
Pursuant to art. 6 of the Privacy Regulation, without the express consent of the Data Subjects the Data Controller can disclose the personal data to the supervisory bodies, judicial authorities and all other persons to whom that kind of communication is required by law and to the accomplishment of the purposes of art. 3. These subjects will process personal data as autonomous Data Controllers.
Personal data will not be disclosed, sold or exchanged with any third party without the express consent of the Data Subjects.
The management and conservation of personal data will happen on server (located within the European Union) of the Data Controller and/or of third parties appointed as data processors.
Pursuant to articles 15-22 of the Privacy Regulation, the Data Subject is entitled:
For the purposes of this article, the Data Subject is entitled to request the cancellation, transformation into an anonymous form or blocking of data processed in violation of the law and, in any case, to abject, for legitimate reason, to their processing.
Cutlite Penta S.r.l. could transfer personal data to other companies of the El.En. Group or to third parties located in other countries, even outside the European Union, which does not offer the same level of protection of personal data. The European Commission puts the countries deemed “adequate”, namely those that preparing an adequate protection, in a separate list, which can be viewed at: https://www.garanteprivacy.it/home/provvedimenti-normativa/normativa/normativa-comunitaria-e-intenazionale/trasferimento-dei-dati-verso-paesi-terzi#1.
Transfers of personal data outside the European Union and to countries not belonging to the above list will be carried out exclusively under specific agreements between Cutlite Penta S.r.l. and the companies involved, through the use of tools accepted by the European Commission.
If you request information about your data the Data Controller shall respond promptly – unless this proves impossible or involves a manifestly disproportionate effort compared with the right to be protected – and in any case no later than 30 days from the request. The Data Controller will justify any inability to meet the request, or delay in doing so.
Last amendment 12 July 2018