Data subjects: subscribed to the newsletter (customers and potential customers)
The data will be stored at the Data Controller’s site, at the site of the external provider (appointed as data processor) and at the platform used for sending Mail UP commercial information. They will be processed exclusively by duly authorized categories of appointed staff (contact the Data Controller for a list of the categories) and shall be communicated externally only for perform the services necessary for a correct management of the relationship, guaranteeing protection of the data subject’s rights (contact the Data Controller for a list of the external entities). Your data may, moreover, be visualized also by the company that manages the website, but limited to technical access for server web maintenance and management requirements. Your data will not be disclosed. Please not that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, your personal data shall be stored for a period not exceeding the performance of the services provided.
You are entitled to obtain from the data controller the cancellation (right to be forgotten), limitation, modification, portability of data and opposition to the processing of personal data concerning you, as well as, in general, you may exercise all the rights provided for by arts. 15, 16, 17, 18, 19, 20, 21, 22 of the European Regulation 2016/679 by writing to firstname.lastname@example.org.
Data Controller: The Data Controller is COEM S.p.A. – Via Cameazzo 25 – 41042 Fiorano Modenese (Mo) e-mail: email@example.com. In the person of its pro tempore legal representative
UE Regulation 2016/679: Arts. 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the Data Subject
1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning them exist, regardless of their being already recorded, and communication of such data in intelligible form.
2. A data subject shall have the right to be informed
of the source of the personal data;
of the purposes and methods of the processing;
of the logic applied to the processing, if the latter is carried out with the help of electronic means;
of the identification data concerning data controller, data processors and the representative designated as per Section 5(2); and
of the entities or categories of entity to whom or which the personal data may be communicated and who or which may gain knowledge of said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
3. The data subject has the right to obtain:
the updating, rectification or, where interested, the integration of the data;
the erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
certification to the effect that the above operations have been notified, as also related to their contents, to the entities to whom or which the data have been communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
the portability of the data.
4. A data subject shall have the right to object, in whole or in part,
for legitimate reasons, to the processing of personal data concerning them, even if pertinent to the purpose of the collection,
to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.