Data Controller
M.I.V.V. METAL INDUSTRIA VAL VIBRATA S.P.A., based in the Industrial Zone – 64027 Sant’Omero (TE), email info@mivv.it—hereinafter referred to as “M.I.V.V.” or the “Data Controller”—in its capacity as Data Controller, hereby informs you of the following regarding the processing of your personal data, pursuant to Art. 13 of EU Regulation 2016/679.
Types of data collected and the mandatory or optional nature of their provision
The website https://mivv.com collects personal data concerning you. The personal data collected by this Website, either independently or through third parties, include: first name, surname, date of birth, residential address, telephone number, e-mail address, cookies, usage data, and IP addresses.
Personal data is provided by you voluntarily. However, regarding the purposes described below under (a) and (b), a refusal to provide the required personal data may make it impossible to deliver the services you have requested. Unless otherwise specified, all data requested by this website is necessary for the provision of the services. In cases where this website indicates certain data as optional, you are free to refrain from providing such data without this affecting the availability or operation of the service.
Methods and place of processing
Processing methods
The Data Controller adopts appropriate security measures to prevent unauthorized access to, disclosure, modification, or destruction of your personal data.
Processing is carried out using paper-based, electronic, and/or automated tools, employing organizational methods and logic strictly related to the stated purposes. Data processing will be conducted using tools and/or methods designed to ensure data confidentiality and security, in compliance with the principles set forth in Article 5 of EU Regulation 2016/679.
In addition to the Data Controller, other authorized parties (such as administrative, sales, or marketing staff, system administrators, etc.) or external/internal parties responsible for site maintenance—designated as external Data Processors where necessary pursuant to Article 28 of EU Regulation 2016/679—may have access to the data in certain cases. An up-to-date list of external Data Processors may be requested from the Data Controller at any time.
Place
Your data is processed at the Data Controller’s operating offices and at any other location where the parties involved in the processing are located. Personal data is handled solely by technical personnel or those authorized to process the data.
Purposes of processing
Your personal data is collected to enable the Data Controller to provide services for the following purposes:
a) contacting the user following a request for information (“Speak with MIVV”);
b) accessing online services (e-commerce, online warranty);
c) carrying out activities connected or instrumental to the use of this website (technical cookies);
d) sending promotional material and commercial information (e-mails, newsletters, etc.).
Legal bases for processing
Your personal data are processed:
for the purposes referred to in points a) and b), for the performance of a contract to which you are a party or to take steps at your request prior to entering into a contract (Art. 6(1)(b) of EU Regulation 2016/679);
for the purpose referred to in point c), based on our legitimate interest in ensuring the proper functioning of our website (Art. 6(1)(f) of EU Regulation 2016/679);
for the purpose referred to in point d), based on your consent pursuant to Art. 6(1)(a) of EU Regulation 2016/679.
Retention of personal data
The data are processed and stored for the time required by the purposes for which they were collected.
Therefore:
- Personal data collected for purposes related to the performance of a contract between the Data Controller and the user will be retained until the performance of such contract and/or pre-contractual measures has been completed;
- personal data collected for purposes relating to the legitimate interest of the Data Controller will be retained until such interest is satisfied;
- personal data processed on the basis of your consent may be retained for a longer period, until such consent is withdrawn.
Upon the expiration of the retention period—which, in specific cases, may exceed the timeframe stipulated in Article 2220 of the Civil Code—the personal data will be deleted.
Rights of the data subject
As a data subject, you may exercise the rights established by EU Regulation 2016/679 with regard to the personal data processed by the Data Controller. In particular, you have the right to:
- withdraw consent at any time (Art. 7, paragraph 3 of the GDPR). You may withdraw the consent previously given for the processing of your personal data;
- access their data (Art. 15 GDPR). You have the right to obtain information regarding the data processed by the Data Controller and specific aspects of the processing, and to receive a copy of the processed data;
- verify and request the rectification of your data (Art. 16 GDPR). You may verify the accuracy of your data and request its updating or correction;
- obtain the erasure or removal of data (Art. 17 GDPR). When certain conditions are met, you may request that the Data Controller erase your data;
- obtain the restriction of processing (Art. 18 GDPR). When certain conditions are met, you may request the restriction of the processing of your data;
- receive notification in the event of rectification, erasure, or restriction of processing (Art. 19 GDPR). Where applicable, the data subject must receive notification from the controller informing them of the rectification, erasure, or restriction of processing;
- receive your data or have it transferred to another controller (Art. 20 GDPR). You have the right to receive your data in a structured, commonly used, and machine-readable format and, where technically feasible, to have it transferred without hindrance to another controller. This provision applies when the data is processed by automated means and the processing is based on your consent or on a contract;
- lodge a complaint (Art. 77 GDPR). You may lodge a complaint with the competent personal data protection supervisory authority: www.garanteprivacy.it
Right to object
You may object to the processing of your data when it is based on Article 6(1)(e) or (f), or where personal data are processed for direct marketing purposes; you have the right to object at any time to the processing of personal data concerning you for such purposes, including profiling to the extent that it is related to such direct marketing (Art. 21 GDPR).
To exercise your rights, you may at any time submit a specific request to the Data Controller using the contact details indicated above.