Policy on the processing of personal data pursuant to art. 13 of EU Regulation 679/2016 and art. 13 Legislative Decree no. 196/2003

METEOR PISTON S.R.L. , in its capacity as Holder of the process (also referred to hereinafter as: “Holder”) in accordance with EU Regulation 679/2016 (referred to hereinafter as: “GDPR”) and with Legislative Decree 196/2003 (hereinafter the “Privacy Code”) – Invites you, before communicating any personal data to the Holder, to read this Privacy Policy carefully, as it contains important information on the protection of your personal data.

This Privacy Policy:

• is intended as rendered for the website http://www.meteorpiston.com/ (hereinafter: “Website”)

• is an integral part of the Website and the services we offer,

• is rendered pursuant to art. 13 of the GDPR and of the Privacy Code to those who interact with the web services of the Website or who contact Meteor Piston s.r.l. by telephone, post, fax or e-mail.

 

The processing of your personal data will be based on principles of correctness, lawfulness, transparency, limitation of purposes and storage, minimisation and accuracy, integrity and confidentiality, along with the principle of accountability pursuant to art. 5 of the GDPR.

Your personal data will therefore be processed in accordance with the legislative provisions of the GDPR and the obligations of confidentiality provided for therein, as well as those of the Privacy Code still in force today.

 

By processing of personal data we mean any operation or combination of operations carried out with or without the aid of automated processes and applied to personal data or combinations of personal data, such as collection, recording, organisation, structuring, storage, adaptation or amendment, extraction, consultation, use, communication by transmission, dissemination or any other form of availability, comparison or interconnection, limitation, cancellation or destruction, as defined in article. 4.2 of the GDPR.

 

We inform you that the personal data subject to processing may consist - also depending on your decisions as to how to use the services - of any information regarding your person suited to identifying it or making it identifiable, including textual information, photographic or video images and any other information provided, depending on the type of services requested.

1. DATA CONTROLLER: WHO WE ARE AND WHAT WE DO

The data controller is Meteor Piston s.r.l., headquartered in Via Monte Amiata 9/11 – Baranzate (Mi) , VAT N. 00695750158

2. THE DATA WE PROCESS

We inform you that the personal data subject to processing may be constituted - also according to your decisions as to how to use the services - of an identifier such as your name, an identification number, location data, an online identifier, cookies or one or more elements characteristic of your physical, physiological, genetic, mental, economic, cultural or social identity, suited to identifying the person or making them identifiable, depending on the type of services required (hereinafter only "personal data").

 

The personal data processed through the Website is:

 

a. Browser data

The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data the transmission of which is implicit in Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature it could, through processing and association with data held by third parties, allow the identification of users. This category of data includes IP addresses or domain names of the computers used by users who connect to the Website, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the user's operating system and computer environment. This data is used for the sole purpose of obtaining any anonymous statistical information on the use of the Website to check its correct operation and identify anomalies and/or abuses, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Website or third parties.

 

b. Data supplied voluntarily by you

Unless reference is made to specific information, this Privacy Policy is also intended as rendered for the processing of data voluntarily provided by you through the Website. To this end, we invite you not to include in the forms contained within the Website and not to communicate information that may fall within the particular categories of personal data referred to in article 9 of the GDPR (e.g. data on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, life/sexual orientation as well as genetic data, biometric data or data concerning your health).

 

3. FOR WHAT REASON, WE PROCESS YOUR DATA - PURPOSE OF PROCESSING

Your personal data will be processed, with your consent where necessary, for the following purposes, where applicable:

3.1. to allow the browsing of the Website and the supply of the services of Meteor Piston  s.r.l. through the Website;

3.2. to meet specific requests, including telephone requests, addressed to Meteor Piston  s.r.l.;

3.3. to fulfil any obligations established by the legislation in force, community legislation and laws, or meet demands posed by the authorities;

3.4. to exercise the rights of the Controller ;

Specific security measures are observed to prevent the loss of data, illicit or improper use and unauthorised access.

4. LEGAL BASIS AND OBLIGATORY OR OPTIONAL NATURE OF PROCESSING

The legal basis for processing personal data for the purposes set out in sections 3.1 and 3.2 is art. 6 (1) (b) of the GDPR ([...] processing is necessary for the execution of a contract of which the data subject is a party or for the execution of pre-contractual measures taken at the request of the same), as the processing is necessary to provide the services. Although it is not mandatory to provide personal data for these purposes, failure to provide them may entail the impossibility to provide the services required.

The legal basis for the purpose referred to in section 3.3 is art. 6 (1) (c) of the GDPR ([...] processing is necessary to fulfil a legal obligation to which the controller is subject). Once the personal data have been provided, the processing is necessary to fulfil legal obligations to which Meteor Piston s.r.l. it is subject.

The legal basis for the purpose referred to in section 3.4 is art. 6 (1) (f) of the GDPR (...processing is necessary for the pursuit of the legitimate interests of the Controller or of third parties, provided that the interests or the fundamental rights or freedoms of the Data Subject do not prevail ..) in order to ascertain, exercise or defend a right in court.

 

5. PERSONAL DATA RECIPIENTS

Your personal data may be shared, for the purposes set out in section 3 of this Information, with:

5.1. subjects that typically act as data processors, namely: i) individuals, companies or professional firms that provide assistance and advice to Meteor Piston s.r.l., in accounting, administrative, legal, tax and financial matters or other business consultancy; (collectively “Recipients”).

5.2. Subjects, bodies or authorities to whom it is mandatory to communicate your personal data in accordance with the provisions of law or orders of the authorities;

5.3. persons authorized by Meteor Piston s.r.l. for the processing of personal data necessary to carry out activities strictly related to service provision, which are committed to confidentiality or have an appropriate legal obligation of confidentiality and that guarantee the processing of data in accordance with the GDPR.

 

The complete and updated list of the Persons in Charge is kept at the headquarters of the Data Controller, located in Via Monte Amiata 9/11 – Baranzate (Mi) and can be delivered by sending a written request to the Data Controller at the addresses indicated in the "Contact" section of this information.

6. PERSONAL DATA STORAGE

Personal data processed for the purposes set out in section 3.1-3.2-3.3-3.4 will be stored for the time strictly necessary to achieve said purposes and, as processing is performed in view of service provision, as long as provided and allowed by the Italian laws to protect the interests and right to defence of Meteor Piston s.r.l., considering the prescription terms established by the applicable legislation.

Further information regarding the data retention period and the criteria used to determine this period might be requested by sending a written request to the Data Controller at the addresses indicated in the "Contact" section of this information. This shall be without prejudice to the possibility for Meteor Piston s.r.l. to retain your personal data for the period of time as provided and allowed by the Italian laws to protect its own interests and right to defence, considering the prescription terms established by the applicable legislation.

7. RIGHTS OF DATA SUBJECT

In your capacity as a Data Subject pursuant to article 15 and ss. of the GDPR and of art. 7 of the Privacy Code, you have the right to:

i. obtain confirmation of the existence or not of personal data concerning you, even if not registered yet, and their communication in an intelligible form;

ii. obtain information on: a) the source of personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the controller, the persons in charge and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and article 3, paragraph 1, of the GDPR; e) the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, persons in charge or agents;

iii. obtain: a a) updating, adjustment or, when interested, inclusion of data; b)  cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose storage is unnecessary for the purposes for which data were collected or subsequently processed; c)  certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom data have been communicated or disseminated, except in the case where this obligation proves impossible or involves the use of means manifestly disproportionate to the protected right;

iv. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data, concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems, without the intervention of an operator by e-mail, direct marketing purposes through automated methods extends to the traditional ones and that in any case remains save the possibility for the data subject to exercise the right of opposition even partially. Therefore, the data subject can decide to receive only communications using traditional methods or only automated communications or none of the two types of communication.

v. Where applicable, they also have the rights referred to in Articles 16 - 22 of the GDPR (Right to rectification, right to be forgotten, right to limitation of treatment, right to the portability of data, right to oppose,  right to oppose to automated processing including profiling).

 

Requests should be sent in writing to the Data Controller at the addresses indicated in the "Contact" section of this information.

 

In any case, you are always entitled to lodge a complaint with the competent supervisory authority (Data Protection Officer), pursuant to art. 77 of the GDPR, if you believe that the processing of your data is contrary to the law in force.

8. MODIFICATIONS

METEOR PISTON s.r.l. reserves the right to modify or simply update the content of this information, in part or completely, also due to changes in the applicable legislation. Meteor Piston s.r.l. will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the Site. Therefore, Meteor Piston s.r.l. invites you to visit this section regularly in order to be aware of the latest modifications on this Information and be updated about the kind of data collected by Meteor Piston s.r.l. and how they are used.

9. CONTACTS

To exercise the above rights or for any other request you can write to Meteor Piston s.r.l., headquartered in Via Monte Amiata 9/11 – Baranzate (Mi) , VAT N. 00695750158 , email info@meteorpiston.com

The Data Controller



CABER S.R.L. , in its capacity as Holder of the process (also referred to hereinafter as: “Holder”) in accordance with EU Regulation 679/2016 (referred to hereinafter as: “GDPR”) and with Legislative Decree 196/2003 (hereinafter the “Privacy Code”) – Invites you, before communicating any personal data to the Holder, to read this Privacy Policy carefully, as it contains important information on the protection of your personal data.

 

This Privacy Policy:

• is intended as rendered for the website http://www.caberpistonrings.com/ (hereinafter: “Website”)

• is an integral part of the Website and the services we offer,

• is rendered pursuant to art. 13 of the GDPR and of the Privacy Code to those who interact with the web services of the Website or who contact Caber s.r.l. by telephone, post, fax or e-mail.

 

The processing of your personal data will be based on principles of correctness, lawfulness, transparency, limitation of purposes and storage, minimisation and accuracy, integrity and confidentiality, along with the principle of accountability pursuant to art. 5 of the GDPR.

Your personal data will therefore be processed in accordance with the legislative provisions of the GDPR and the obligations of confidentiality provided for therein, as well as those of the Privacy Code still in force today.

 

By processing of personal data we mean any operation or combination of operations carried out with or without the aid of automated processes and applied to personal data or combinations of personal data, such as collection, recording, organisation, structuring, storage, adaptation or amendment, extraction, consultation, use, communication by transmission, dissemination or any other form of availability, comparison or interconnection, limitation, cancellation or destruction, as defined in article. 4.2 of the GDPR.

 

We inform you that the personal data subject to processing may consist - also depending on your decisions as to how to use the services - of any information regarding your person suited to identifying it or making it identifiable, including textual information, photographic or video images and any other information provided, depending on the type of services requested.

1. DATA CONTROLLER: WHO WE ARE AND WHAT WE DO

The data controller is Caber s.r.l., headquartered in Via Albenga n.127, Cascine Vica-Rivoli, VAT N. 00456700012.

2. THE DATA WE PROCESS

We inform you that the personal data subject to processing may be constituted - also according to your decisions as to how to use the services - of an identifier such as your name, an identification number, location data, an online identifier, cookies or one or more elements characteristic of your physical, physiological, genetic, mental, economic, cultural or social identity, suited to identifying the person or making them identifiable, depending on the type of services required (hereinafter only "personal data").

 

The personal data processed through the Website is:

 

a. Browser data

The computer systems and software procedures used to operate the Website acquire, during their normal operation, some personal data the transmission of which is implicit in Internet communication protocols. This information is not collected to be associated with identified data subjects, but by its very nature it could, through processing and association with data held by third parties, allow the identification of users. This category of data includes IP addresses or domain names of the computers used by users who connect to the Website, URI (Uniform Resource Identifier) addresses of the resources requested, the time of the request, the method used to submit the request to the server, the size of the file obtained in reply, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters regarding the user's operating system and computer environment. This data is used for the sole purpose of obtaining any anonymous statistical information on the use of the Website to check its correct operation and identify anomalies and/or abuses, and is deleted immediately after processing. The data could be used to ascertain responsibility in the event of hypothetical computer crimes against the Website or third parties.

 

b. Data supplied voluntarily by you

Unless reference is made to specific information, this Privacy Policy is also intended as rendered for the processing of data voluntarily provided by you through the Website. To this end, we invite you not to include in the forms contained within the Website and not to communicate information that may fall within the particular categories of personal data referred to in article 9 of the GDPR (e.g. data on racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, life/sexual orientation as well as genetic data, biometric data or data concerning your health).

 

3. FOR WHAT REASON, WE PROCESS YOUR DATA - PURPOSE OF PROCESSING

Your personal data will be processed, with your consent where necessary, for the following purposes, where applicable:

3.1. to allow the browsing of the Website and the supply of the services of Caber s.r.l. through the Website;

3.2. to meet specific requests, including telephone requests, addressed to Caber s.r.l.;

3.3. to fulfil any obligations established by the legislation in force, community legislation and laws, or meet demands posed by the authorities;

3.4. to exercise the rights of the Controller ;

Specific security measures are observed to prevent the loss of data, illicit or improper use and unauthorised access.

4. LEGAL BASIS AND OBLIGATORY OR OPTIONAL NATURE OF PROCESSING

The legal basis for processing personal data for the purposes set out in sections 3.1 and 3.2 is art. 6 (1) (b) of the GDPR ([...] processing is necessary for the execution of a contract of which the data subject is a party or for the execution of pre-contractual measures taken at the request of the same), as the processing is necessary to provide the services. Although it is not mandatory to provide personal data for these purposes, failure to provide them may entail the impossibility to provide the services required.

The legal basis for the purpose referred to in section 3.3 is art. 6 (1) (c) of the GDPR ([...] processing is necessary to fulfil a legal obligation to which the controller is subject). Once the personal data have been provided, the processing is necessary to fulfil legal obligations to which Caber s.r.l. it is subject.

The legal basis for the purpose referred to in section 3.4 is art. 6 (1) (f) of the GDPR (...processing is necessary for the pursuit of the legitimate interests of the Controller or of third parties, provided that the interests or the fundamental rights or freedoms of the Data Subject do not prevail ..) in order to ascertain, exercise or defend a right in court.

 

5. PERSONAL DATA RECIPIENTS

Your personal data may be shared, for the purposes set out in section 3 of this Information, with:

5.1. subjects that typically act as data processors, namely: i) individuals, companies or professional firms that provide assistance and advice to Caber s.r.l., in accounting, administrative, legal, tax and financial matters or other business consultancy; (collectively “Recipients”).

5.2. Subjects, bodies or authorities to whom it is mandatory to communicate your personal data in accordance with the provisions of law or orders of the authorities;

5.3. persons authorized by Caber s.r.l. for the processing of personal data necessary to carry out activities strictly related to service provision, which are committed to confidentiality or have an appropriate legal obligation of confidentiality and that guarantee the processing of data in accordance with the GDPR.

 

The complete and updated list of the Persons in Charge is kept at the headquarters of the Data Controller, located in Cascine Vica-Rivoli and can be delivered by sending a written request to the Data Controller at the addresses indicated in the "Contact" section of this information.

6. PERSONAL DATA STORAGE

Personal data processed for the purposes set out in section 3.1-3.2-3.3-3.4 will be stored for the time strictly necessary to achieve said purposes and, as processing is performed in view of service provision, as long as provided and allowed by the Italian laws to protect the interests and right to defence of Caber s.r.l., considering the prescription terms established by the applicable legislation.

Further information regarding the data retention period and the criteria used to determine this period might be requested by sending a written request to the Data Controller at the addresses indicated in the "Contact" section of this information. This shall be without prejudice to the possibility for Caber s.r.l. to retain your personal data for the period of time as provided and allowed by the Italian laws to protect its own interests and right to defence, considering the prescription terms established by the applicable legislation.

7. RIGHTS OF DATA SUBJECT

In your capacity as a Data Subject pursuant to article 15 and ss. of the GDPR and of art. 7 of the Privacy Code, you have the right to:

i. obtain confirmation of the existence or not of personal data concerning you, even if not registered yet, and their communication in an intelligible form;

ii. obtain information on: a) the source of personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the controller, the persons in charge and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and article 3, paragraph 1, of the GDPR; e) the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, persons in charge or agents;

iii. obtain: a a) updating, adjustment or, when interested, inclusion of data; b)  cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose storage is unnecessary for the purposes for which data were collected or subsequently processed; c)  certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom data have been communicated or disseminated, except in the case where this obligation proves impossible or involves the use of means manifestly disproportionate to the protected right;

iv. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data, concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems, without the intervention of an operator by e-mail, direct marketing purposes through automated methods extends to the traditional ones and that in any case remains save the possibility for the data subject to exercise the right of opposition even partially. Therefore, the data subject can decide to receive only communications using traditional methods or only automated communications or none of the two types of communication.

v. Where applicable, they also have the rights referred to in Articles 16 - 22 of the GDPR (Right to rectification, right to be forgotten, right to limitation of treatment, right to the portability of data, right to oppose,  right to oppose to automated processing including profiling).

 

Requests should be sent in writing to the Data Controller at the addresses indicated in the "Contact" section of this information.

 

In any case, you are always entitled to lodge a complaint with the competent supervisory authority (Data Protection Officer), pursuant to art. 77 of the GDPR, if you believe that the processing of your data is contrary to the law in force.

8. MODIFICATIONS

Caber s.r.l. reserves the right to modify or simply update the content of this information, in part or completely, also due to changes in the applicable legislation. Caber s.r.l. will inform you of these changes as soon as they are introduced and they will be binding as soon as they are published on the Site. Therefore, Caber s.r.l. invites you to visit this section regularly in order to be aware of the latest modifications on this Information and be updated about the kind of data collected by Caber s.r.l. and how they are used.

9. CONTACTS

To exercise the above rights or for any other request you can write to Data Controller: CABER S.R.L., Via Albenga n.127, Cascine Vica-Rivoli, VAT N. 00456700012, email info@caberpistonrings.com

 

The Data Controller