Privacy

Information  

pursuant to the Regulation (EU) 2016/679
 

Carel Industries S.p.A., headquarters in Brugine (PD), at 11 Via dell’Industria (hereinafter “the Company”), Data Controller of the personal data processing, pursuant to art. 13 of the Regulation (EU) 2016/679 (hereinafter, the “GDPR”) is obliged to inform you, as data subject, with regard to the processing of your personal data (hereinafter: the “Data”).

Personal data processing means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

The Data Controller therefore informs you that according to art. 13 and 14 of the GDPR will proceed to the relative processing for the following purposes manually and / or with the support of IT or telematic means.

1. Purposes of the processing of Data

   The data are acquired and processed in observance of the rules established by the Regulation for the following purposes:
   a)      fulfilment of the obligations deriving from the contracts stipulated with the Data Controller;
   b)      Implementation of the pre-contractual measures deriving from the compilation of contact forms for the request for information;
   c)      Compliance with the obligations set forth by the law, regulations or EU legislation;
   d)      Transmission of commercial communications for business purposes connected with the activities and/or services offered by the Data Controller.
   e) Sending of information, promotional and personalised communications based on your expressed preferences, as well as the business conducted.
   
   The personal data collected and processed by Carel Industries S.p.A. to meet the relevant objectives are of a personal and fiscal nature.
   With reference to the purposes set forth in letters a), b) and c), the legal basis for the processing is the implementation of the pre-contractual and/or contractual measures which the data subject is party to and the fulfilment of a legal obligation which the Data Controller is subject to in accordance with art. 6, paragraph 1 of the Regulation, letters b) and c) respectively.
   With reference to the purposes set out in letter d) and e), the transfer of personal data is based on the consent issued pursuant to art. 6, paragraph 1, letter a) of the Regulation.
    
   In any case, you can revoke the consent given at any moment without this compromising the lawfulness of the processing based on the consent given before the revocation.



2. Communication of the data

   In addition to the communications made in fulfillment of legal obligations, including the ones made to prevent / repress of any illegal activity, the data collected and processed can be communicated, for the purposes mentioned above, to other subjects (listed by categories below) in quality of Processor or subjects to the authority of the Data Controller:

   • to employees and collaborators of the Data Controller, for purposes of executing obligations from contracts stipulated with the Data Controller and / or for the fulfillment of obligations established by law, regulations or Community legislation;
   • to external parties for purposes of executing obligations from contracts stipulated with the Data Controller and / or for the fulfillment of obligations established by law, regulations or EU legislation;
   • to suppliers, technicians in charge of hardware and software assistance, who carry out activities in outsourcing on behalf of the Data Controller;
   • to consultancy companies, collaborating with the Data Controller.


3. Nature of the provision of Data and consequences of the refusal

   The provision of Data to the Data Controller is necessary for the abovementioned purposes and a refusal to provide the Data or the provision of incorrect and or incomplete data could prevent the execution of the contract.



4. Transfer of the Personal Data to non-EU Third Countries

   The collected and processed personal data may also be transferred to countries not belonging to the European Union or to the European Economic Area (specifically in the UK) recognized by the European Commission as having an adequate level of protection of personal data.



5. Duration of the processing of the Data

   The personal data will be stored for the time necessary to achieve the purposes indicated in paragraph 1 and also afterwards for the fulfilment of any legal obligations.



6. Data Controller, Processor and DPO

   The data controller is Carel Industries S.p.A., headquarter in Brugine (PD), at 11 Via dell’Industria. The updated list of data processors (if appointed) can be found at the aforementioned headquarter. The address for the exercise of rights pursuant to Articles 15-22 of the Regulations is the following: privacy@carel.com.

    

   Luigi Neirotti is appointed Data Protection Officer (DPO), Studio Legale Tributario, Street Meravigli, n. 14 20123 Milan email: privacy@carel.com.

    



7.  

Rights of the Data Subject  

Regulation (EU) 2016/679 of the European Parliament and of the Council
 

- Articles 15 to 22 -
 

According to articles 15 to 22 of the GDPR, the Data Subject has the right to access to a copy of the information comprised in their personal data, object to processing that is likely to cause or is causing damage or distress, object to decisions being taken by automated means, obtain the limitation of the process(in certain circumstances), have (in certain circumstances) his personal data rectified, integrated, blocked, erased or destroyed, obtain the portability of his personal data and the right to propose a claim to the Privacy Authority.