Am Instruments S.r.l. considers the protection of the personal data of its customers and suppliers of fundamental importance, ensuring that the processing of personal data, carried out by any means, whether automated or manual, takes place in full compliance with the protections and rights recognized by the EU Regulation 2016/679 (hereinafter also "GDPR"), on the protection of individuals with regard to the processing of personal data and on the free movement of such data and by the further applicable rules on the protection of personal data.
The term "personal data" refers to the definition contained in Article 4(1) of the GDPR i.e. "any information relating to an identified or identifiable natural person; an identifiable person is any natural person who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier, or to one or more characteristic features of his or her physical, physiological, genetic, mental, economic, cultural or social identity" (hereinafter also " Personal Data").
Your Personal Data consists of:
- Full name;
- Postal address;
- Membership organization (e.g.: employer company; etc.);
- E-mail address
The GDPR provides that, before processing Personal Data(meaning, by this definition, according to Art. 4(2)), "any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission dissemination or any other form of making available, comparison or interconnection, restriction, erasure or destruction" (hereinafter also the "Processing") it is necessary that the person to whom the Personal Data belong (hereinafter also the "Data Subjects"), is informed about the reasons for which, the latter are required and in what way they will be used.
The purpose of this document is, therefore, to provide you, in a simple and intuitive way, with all the useful and necessary information so that you can give Your Personal Data in a conscious and informed way and, where necessary, request and obtain clarifications and/or corrections about it.
- Who will hold Your Personal Data?
The company that will process Your personal data for the purposes indicated in clauses No. 2 and 3 below and that, therefore, will play the role of data controller Am Instruments S.r.l., based in Limbiate, Via Isonzo, 1/C, EMAIL info@aminstruments.com(hereinafter also the "DataController").
- For what main purposes will Your personal data be processed?
The Controller needs to collect some of Your Personal Data for the following purposes:
- Respond to requests for information and/or offers proposed directly and spontaneously by the Interested Party, including through the contact form on the website https://www.aminstruments.com/(the Website);
- The performance of obligations related to the contracts entered into;
- the contact for any clarifications related to the purposes in (a) and (b) above;
- for the fulfillment of legal obligations, particularly accounting and tax obligations.
The Processing of Your Personal Data will, in addition, be conducted by the Data Controller for the performance of the activity of consulting and telephone assistance to customers resulting from a request for quotation or contact made, including through the website.
The provision of Your data for the above purposes is necessary to enable the provision of the above services.
Your refusal will, therefore, make it impossible for you to avail yourself of the latter services.
- Additional purposes
The Controller, subject to Your express, free and unambiguous consent in accordance with Article 6(1)(a) of the GDPR, may use Your Personal Data for the following and additional purposes:
- To ascertain the level of customer satisfaction with the service rendered;
- To measure the effectiveness and appropriateness of the service provided, including through the Website;
- To send you newsletters with the purpose of keeping you informed about news and activities of the Owner.
The Processing of Your Personal Data for the purposes set forth in points e), f) and g) above is optional and cannot disregard the obtaining of Your consent, which must necessarily comply with the conditions set forth in Article 7 of the GDPR, thus determining the lawfulness of the Processing of Your Personal Data.
The contact methods aimed at the activities indicated in points e), f) and g) above may be both automated (e-mail) and traditional (telephone calls with operator, postal mailings). In any case, and as better specified below in clause No. 7, you may at any time revoke Your consent, even partially, e.g. by consenting only to the traditional contact methods.
- To which entities may Your Personal Data be disclosed?
Your Personal Data may be disclosed to specific entities that are considered recipients of such Personal Data. On this point We would like to point out to You, in fact, that Article 4, point 9) of the GDPR defines as the recipient of a Personal Data"the natural or legal person, public authority, service or other body that receives communication of personal data, whether or not it is a third party" (hereinafter also the "Recipients").
With this in mind, in order to properly carry out all Processing activities necessary to pursue the purposes set forth in this Policy, the following Recipients may be in a position to process Your Personal Data:
- individuals, employees and/or contractors of the Data Controller, who have been entrusted with specific and/or multiple Processing activities on Your Personal Data: such individuals have been given specific instructions regarding the security and proper use of Personal Data(hereinafter also the "Authorized Persons");
- where required by law or to prevent or suppress the commission of a crime, Your Personal Data may be disclosed to public bodies or judicial authorities.
- For how long will Your Personal Data be processed?
Your Personal Data will be processed by the Data Controller for a period not exceeding the purposes for which, the same were collected and subsequently processed.
In any case, you may, at any time, notify us, in one of the ways set forth in this Policy, of your wish to withdraw your consent to any or all of the purposes for which you have been asked. Any withdrawal of consent will, in effect, require the Data Controller to cease the Processing of Your Personal Data for such purposes.
- Is it possible to revoke the consent given and how?
As provided by the GDPR, if You have given consent to the Processing of Your Personal Data for one or more of the purposes for which You have been requested, You may, at any time, revoke it in whole and/or in part without affecting the lawfulness of the Processing based on the consent given before revocation.
The modalities of revocation of consent are very simple and intuitive, You only need to contact the Controller using the contact channels reported to You within clause No. 7 of this Policy.
- What are YOUR rights?
As provided for in Article 15 of the GDPR, You will be able to access Your Personal Data, request its rectification and updating, if incomplete or erroneous, request its deletion if it was collected in violation of a law or regulation, as well as object to the Processingforlegitimate and specific reasons.
In particular, we list below all Your rights that You can exercise, at any time, towards the Controller:
- Right of Access: you will have the right, pursuant to Art. 15(1) GDPR, to obtain from the Controller confirmation as to whether or not any Processing of Your Personal Data is taking place and, if so, to obtain access to such Personal Data and to the following information: (a) the purposes of the Processing; (b)the categories of Personal Data concerned; (c)the Recipients or categories of Recipients to whom Your Personal Data have been or will be disclosed, in particular if Recipients from third countries or international organizations; (d)when possible, the expected period of retention of Personal Data or, if not possible, the criteria used to determine such period; e)the existence of theData Subject 's right to request from the Data Controller the rectification or erasure of Personal Data or the restriction of the Processing of Personal Data concerning him or her or to object to their Processing; f)the right to lodge a complaint with a supervisory authority; g) if the Personal Data are not collected from theData Subject, all available information about their origin; h)the existence of an automated decision-making process, including profiling as referred to in Art. 22(1) and (4) GDPRand, at least in such cases, meaningful information about the logic used, as well as the importance and expected consequences of such Processing for theData Subject. You will be able to find all this information within this Notice, which will always be available to you within the Privacy section of the Website.
- Right of rectification: you may obtain, pursuant to Article 16 GDPR, the rectification of Your Personal Datawhichare inaccurate. Taking into account the purposes of the Processing, you may also obtain the integration of Your Personal Datawhichare incomplete, including by providing a supplementary declaration.
- Right to erasure: you may obtain, pursuant to Art. 17(1) GDPR, the deletion of Your Personal Data without undue delay and the Data Controller will be obliged to delete Your Personal Data if there is even one of the following reasons: (a)the Personal Data is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (b)you have revoked the consent on which the Processing of Your Personal Data is based and there is no other legal basis for the Processing of Your Personal Data ; c)you have objected to the Processing pursuant to Article 21(1) or (2) GDPR and there is no longer any overriding legitimate reason to proceed with the Processing of Your Personal Data; d)Your Personal Data has been processed unlawfully; e)it is necessary to delete Your Personal Data in order to comply with a legal obligation under an EU or domestic law. In some cases, as provided for in Article 17, paragraph 3 GDPR, the Data Controller is entitled not to provide for the erasure ofYourPersonal Data if their Processing is necessary, for example, for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, for the establishment, exercise or defense of a right in court.
- Right to Restriction of Processing: you may obtain the restriction of Processing, pursuant to Art. 18 GDPR, in case one of the following occurs: ( a)you have disputed the accuracy of Your Personal Data(the limitation will last for the period necessary for the Data Controller to verify the accuracy of such Personal Data); (b)the Processing is unlawful but you have objected to the deletion of Your Personal Data by requesting, instead, that its use be limited; c) although the Data Controller no longer needs it for the purposes of the Processing, Your Personal Data is needed for the establishment, exercise or defense of a legal claim; d)you have objected to the Processing pursuant to Art. 21(1) GDPR and you are awaiting verification as to whether the Data Controller 's legitimate reasons prevail over Yours. In the event of a restriction on Processing, Your Personal Data will be processed, except for storage, only with Your consent or for the establishment, exercise or defense of a legal claim or to protect the rights of another natural or legal person or for reasons of substantial public interest. We will inform You, in each case, before such limitation is lifted.
- Right to data portability: you may, at any time, request and receive, pursuant to Article 20(1) GDPR, all of Your Personal Data processed by the Controller in a structured, commonly used and readable format or request its transmission to another data controller without hindrance. In this case, it will be your responsibility to provide us with all the exact details of the new data controller to whom you intend to transfer Your Personal Data by providing us with written authorization.
- Right to object: in accordance with Article 21(2) GDPR and as also reiterated by Recital 70, you may object, at any time, to the Processing of Your Personal Data if it is processed for direct marketing purposes, including profiling insofar as it is related to such direct marketing.
- Right to lodge a complaint with the supervisory authority: without prejudice to Your right to appeal in any other administrative or judicial forum, if You believe that the Processing of Your Personal Data conducted by the Data Controller occurs in violation of the GDPR or and/or applicable legislation, You may lodge a complaint with the competent Data Protection Authority.
To exercise all Your rights as identified above, simply contact the Owner in the following ways:
- by registered letter sent to Am Instruments S.r.l., based in Limbiate, Via Isonzo, 1/C;
- By sending an e-mail to the mailbox: info@aminstruments.com.
- Where will Your Personal Data be processed?
Your Personal Datawill beprocessed by the Data Controllerwithinthe territory of the European Union.
Should it become necessary for technical and/or operational issues to use entities located outside the European Union, we hereby inform you that such entities will be appointed as Data Processors pursuant to and for the purposes of Article 28 GDPR and the transfer of Your Personal Data to such entities, limited to the performance of specific Processing activities, will be regulated in accordance with the provisions of Chapter V of the GDPR and, in particular, all necessary precautions will be taken in order to ensure the fullest protection of Your Personal Data by basing such transfer:
- (a) On appropriateness decisions of third country recipients made by the European Commission;
- (b) on adequate guarantees expressed by the third party recipient under Article 46 GDPR.
