Login

Website privacy policy Soc. Nuvap S.p.A (EU Regulation No.679/2016)

The Privacy Policy of this site: http://www.nuvap.com

Why this notice

This page describes how to manage the site in relation to the processing of personal data of visitors and customers who consult it. This is an information that is also provided pursuant to art. 13 of the EU Regulation n. 679/2016 to those who interact with the web services of Nuvap S.p.A accessible electronically from the address: http://www.nuvap.com
corresponding to the homepage of the official website of Nuvap S.p.A
The information is provided only for the Nuvap S.p.A and not for other websites that may be consulted by the user through links.

The “holder” of the treatment:

Following consultation of this site, data relating to identified or identifiable persons may be processed. The “Holder” of their processing is Nuvap S.p.A, which has its registred office in Milan, Via del Vecchio Politecnico 7, -20121 Milan.

Data processing place:

The processing operations connected to the web services of this site take place at the aforementioned headquarters in Cascina (PI) and are only handled by Nuvap S.p.A technical staff, or by persons in charge of occasional maintenance operations designated by Nuvap S.p.A

Types of data processed:

  • Navigation data
    The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters relating to the operating system and the user’s computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing.
  • Data provided voluntarily by the user
    The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.

COOKIES:

No personal data of users is acquired by the site in this regard. This site uses technical cookies, that is navigation or session cookies and strictly necessary for the operation of the site or to allow the user to take advantage of the contents and services requested by them. Analytics cookies, which allow you to understand how the site is used by users. With these cookies we do not collect information about the user’s identity or any personal data. The information is treated in aggregate and anonymous form. Functionality cookies, that is cookies that allow the user to browse according to a series of selected criteria (for example, the language, the products selected for purchase) in order to improve the service rendered. Third-party cookies, that is cookies of sites or web servers other than this, used for the purposes of these third parties. For further information on the processing of personal data, see the appropriate Privacy Policy. We do not use cookies to transmit information of a personal nature, nor are used c.d. persistent cookies of any kind, or systems for tracking users. The cookies session are not used (which are not stored permanently on the user’s computer and disappear when the browser is closed).

Processing Methods:

Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.

Rights of the interested:

The subjects to whom the personal data refer have the right at any time to obtain
confirmation of the existence or otherwise of the same data and to know its content and origin,
verify its accuracy or request its integration, limitation or updating, cancellation,
opposition to their treatment or correction in accordance with EU Regulation no. 679/2016. 679/2016.

Information in accordance with Art. 13 of EU Regulation 679/2016

Dear customer,
we inform you that the Legislative Decree 196/2003 “Data protection Law” and subsequent amendments and the EU Regulation 679/2016 provide for the protection of persons and other subjects in the processing of their personal data. NUVAP S.p.A (Vat number 02137180507), with head office in Milano, via del Vecchio Politecnico, 7 – 20121 Milano (hereinafter referred to as “Data controller”), as data controller, inform you that, pursuant art. 13 of EU Regulation 679/2016 (hereinafter referred to as “GDPR”), data will be processed in the manner and for the following purposes:

Object of Data Processing

The Data Controller processes personal data, identifying oneself (for example, name, surname, company name, address, telephone number, e-mail address, bank and payment details) – hereinafter, “personal data” or “data”, communicated at the conclusion of contracts.

Purpose of data processing

Your personal data are processed:

A) without your express consent (Article 6 letter b), c), d), e), f) for the following Service Purposes:

  • Processing is necessary for the performance of a contract or in pre-contract negotiations;
  • Processing is necessary to fulfill a legal obligation to which the data controller is subject;
  • Processing is necessary for the protection of vital interests of the data subject or other person.
  • Processing is necessary for the performance of a task carried out in the public interest or in the exercise of an official authority.
  • Processing is necessary for the purposes of the legitimate interests pursued by the data controller and third parties, provided that the interests or fundamental rights and freedoms of the data subject are not overriding, in particular if the data subject is a minor.

B) Only with your prior specific and distinct consent pursuant to art. EU Regulation 679/16, for the following Marketing Purposes:

  • Send you by e-mail, post and / or sms and / or telephone newsletters, commercial communications and / or advertising material on products or services offered by the Data Controller and customers satisfaction surveys;
  • Send you by e-mail, post and / or sms and / or telephone commercial and / or promotional communications from third parties (for example, business partners, insurance companies, etc.).

We inform you that if you are already our customers, we will be able to send you commercial communications regarding services and products similar to those you have already used, unless expressed dissent.

Processing methods

The processing of your personal data will be carried out through the operations listed in art. n. 2) GDPR and precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are processed in both paper and electronic and / or automated form. The Data Controller will process your personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for service purposes and for no more than 3 years from the collection of data for marketing purposes.

Access to data

Your data may be made accessible for the purposes referred to in art. 2.A) and 2.B):

  • To employees and collaborators of the Data Controller or companies of NUVAP S.p.A, in their capacity of authorized or designated subjects for the processing of personal data and / or system administrators;
  • To third parties companies or other subjects (such as banks, professional firms, consultants, insurance companies, etc.) who carry out outsourcing activities on behalf of the Data Controller, in their capacity of external data processors.

Data communication

Without any obligation of a prior consent art. 6 lett. b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2.A). Without prejudice to communication or diffusion for legal reasons, your personal data may be communicated in Italy and / or abroad to:

  • Professionals and consultants, consulting companies, factoring companies, banks, credit recovery agencies, credit insurance companies, commercial information companies, transport companies;
  • Public and private agencies, also following inspections or audits, such as: Financial Administration, Tax Police, Judicial Authorities, Italian Exchange Office, Employment Agency Inspectorate, Local Health Authority, Social Security Administrations, Chamber of Commerce, etc.;

Your data will not be disclosed.

Data transfer

In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller ensures from now that the transfer of data outside the EU will take place in accordance with applicable laws, In this case, the Data Controller ensures from now that the transfer of data outside the EU will take place in accordance with applicable laws, subject to the stipulation of the standard contractual clauses provided by the European Commission. The Controller Data reserves the right to use cloud services and in this case the service providers will be selected from those who provide adequate guarantees, as required by art. 46 GDPR 679/16.

Nature of data provision and consequences of a refusal to answer

The provision of data for the purposes referred to in art. 2.A). is mandatory. In its absence, we will not be able to guarantee the services referred to in art. 2.A). Instead the provision of data for the purposes referred to in art. 2.B) is optional. You can therefore decide not to provide any data or subsequently to deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial information and advertising material relating to the Services offered by the Data Controller. However, you will continue to be entitled to use the Services referred to in art. 2.A).

Data subject rights

As a data subject, you have the rights referred to in art. 15 GDPR and precisely the rights to:

  • Obtain the confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
  • Obtain the indication of:
    a. the origin of the personal data;
    b. the purposes and processing methods;
    c. the method applied in case of processing carried out with the aid of electronic instruments;
    d.the information identifying the Controller Data, the designated subject, the Data Protection Manager if appointed, the subjects or categories of subjects to whom the personal data might be communicated or who could have access as appointed representative in the territory of the State, managers or appointees.
  • Obtain:
    e. the updating, the rectification or the integration of data;
    f. the cancellation, transformation into anonymous form or the blockage of data processed in breach of the law, as well as those that need not to be stored for the purposes for which the data were collected or subsequently processed;
    g. the attestation that the operations referred to in letters e) and f) have been brought to the attention, even with regards to their content, of those to whom the data have been communicated or shared, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that it has been protected
  • Object in whole or in part:
    h. due to legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection;
    i. to the processing of personal data concerning you for the purpose of sending advertising material or direct sale or carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by e-mail and / or traditional marketing methods like telephone and / or paper mail.

It should be noted that the right to object, for direct marketing purposes through automated methods, is extended to traditional ones and in any case it remains the possibility for the data subject to exercise the right to object, even partially. Therefore, the subject can decide to receive only traditional communications or only automated communications or none of the two. Where applicable, he also has the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right to limitation of processing, right to data portability, right of opposition), as well as the right to complain to the Data Protection Authority.

Exercise of the rights

You can exercise your rights at any time by sending:
• a registered letter to NUVAP S.p.A (Vat number 02137180507) Italy, 56021 – Cascina (PI), Via Giuntini 25
• a Certified E-Mail to nuvap@legalmail.it

Controller Data, managers for personal data processing

The Controller Data is NUVAP S.p.A (Vat number 02137180507), registered office in Italy, Milan, Via del Vecchio Politecnico, 7. The updated list of data processors managers is available to the registered office of the Data Controller.

Advisory note on the processing of personal data when requesting that the Newsletter be sent pursuant to art. 13 of EU Regulation 2016/679

Dear Sir / Madam,

the company NUVAP S.p.A (P.iva 02137180507) with registered office via P. Giannone 9, 20154 Milan (MI), as Data Controller for the processing of personal data pursuant to and in accordance with the provisions of the EU Regulation 679/16 and of Legislative Decree 196/2003 and subsequent amendments, with the present, wants to inform you that your personal data obtained directly from you, as you entered them in the online form available on the page of the corporate site, will be used exclusively for any formalities and/or legal or administrative obligations, to which the Data Controller is held. Failure to provide the data will have as consequence the inability of NUVAP S.p.A to comply with its willingness to register. Furthermore, as per you explicitly expressed approval, your data may also be included in a paper and digital archive, in order to send you, by email, text message, newsletter or various messages, promotional material, information, advertising or commercial. Pursuant to and for the purposes of the aforementioned EU Regulation 679/16 and Legislative Decree. 196/2003 and subsequent amendments, inform you that:

Processing methods

The processing of your personal data is carried out by means of the operations indicated in article 4 n.2 of the GDPR (EU regulation 679/2016) and in particular: treatment means any operation or set of operations, performed with or without the use of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction, collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, the information or interconnection, limitation, deletion or destruction of data. Personal data are subjected to both paper and computer processing (including portable devices) in the manner strictly necessary to meet the aforementioned purposes. The owner of the processing declare that his data will not be subject to any type of profiling.

Data retention

The Data Controller will process personal data for the time necessary to fulfill the purposes indicated above and in any case for no more than three years.

Communication and access to data

Your personal data may be made accessible and / or communicated to:

  • employees and collaborators of the company NUVAP S.p.A, in their capacity as authorized and/or internal contacts of the treatment;
  • to Supervisory Bodies, Judicial Authorities, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of the purposes indicated above.

Data transfer

Personal data will be stored on paper or digital archives, on PC or other portable devices, as well as on servers located in the national territory and for any reason will be sent to subjects residing in non-EU countries.

Purpose of the processing and legal basis

The processing of personal data provided is aimed solely at:
To comply with the request to send the newsletter and its registration in the mailing list concerning information messages and commercial and promotional communications relating to the activity carried out by the Owner, in full compliance with the principles of lawfulness and correctness and the provisions of law.

Rights of the interested party

In his capacity as an interested party shall have the rights referred to in Articles 15 to 21 of the GDPR relating to:

  • right of access to personal data;
  • right to rectify incorrect personal data and the right to integrate incomplete personal data;
  • right to delete personal data c.d. “Right to be forgotten” (upon the occurrence of one of the conditions, indicate at article 17 paragraph 1 GDPR and in compliance with the exceptions set out in paragraph 3 of the same article);
  • right of limitation of treatment (in one of the hypotheses as per article 18 par.1 GDPR);
  • right to data portability; right to object to the processing of personal data;
  • right of with draw a lof consent;
  • right to a complaint to a supervisory authority.

These concentrations may be exercised by you, at any time, by sending requests to us in point 5 of this information by registered letter with return receipt to the registered office of the company NUVAP S.p.A., as indicated above.
In order to exercise your rights as referred to in art. 15 of the GDPR or for questions or information regarding the processing of your personal data and the security measures adopted, you may, in any case, contact:

Nuvap S.P.A.
Via P. Giannone 9, 20154 Milan (MI)
E-mail: nuvap@legalmail.it