PRIVACY DISCLAIMER MOD. INF REV. 1 DEL 09/09/24

Pursuant to art. 13 of the EU Regulation no. 2016/679 of the European Parliament and Council of 27/04/2016, hereinafter GDPR, the Company ATS ELETTRONICA S.R.L., as owner, informs you of the following:

A) Purpose of the data processing and legal basis

Your personal data is processed for the following Service Purposes:

A1) pursue its own legitimate interest, consisting in guaranteeing the security of the website www.atselettronica.it and of the information exchanged on it, i.e. the ability of such website to resist, at a given level of security, unforeseen events or illicit or malicious acts that compromise the availability, authenticity, integrity and confidentiality of the personal data stored or transmitted and the security of the related services offered or made accessible;

A2) for the fulfillment of pre-contractual and contractual obligations following a request for quotes/information, any legal and/or regulatory obligations (e.g. tax and accounting obligations, etc.) and internal checks;

A3) customer relationship management, in particular with regard to responses to requests to facilitate the continuation of communication with the customer;

A4) to fulfill the obligations established by law, by regulations, by community legislation or by an order of the Authority (such as, for example, in the field of anti-money laundering);

A5) to exercise the rights of the Data Controller, for example, for the right of defense in court.

B) Nature of the data provision

Your personal data, which is subject to processing, is collected directly by the Data Controller or by the person expressly authorized by the latter.

The legal basis for the processing of data for the purposes referred to in the aforementioned points A2) and A3) is art. 6 paragraph 1 letter b of the Regulation (processing necessary for the performance of a contract or pre-contractual measures), as the processing is necessary for the provision of services or to respond to requests from the interested party. The provision of Personal Data for these purposes is optional, but failure to provide it would make it impossible to activate the requested services or to respond to your requests.

The legal basis for the processing of data for the purposes referred to in points A1), A4) and A5) is the legitimate interest pursuant to art. 6, paragraph 1 letter c of the Regulation (processing necessary to comply with a legal obligation to which the data controller is subject) and does not require your consent.

C) Data processing methods

Your data will be processed (which includes its collection, recording, organization, storage, consultation, processing, use, interconnection, blocking, communication, cancellation and destruction) in accordance with art. 32 of the Regulation. In particular, we inform you that your personal data will be processed using manual, computerized and/or telematic tools suitable to guarantee the security, storage and confidentiality of the same.

D) Categories of data and their origin

Personal data concerning the interested party is processed, provided by the same, by filling in the CONTACT US NOW form on the website of www.atselettronica.it, as well as those possibly transmitted via e-mail or telephone.

E) Nature of data provision

Your personal data, which is subject to processing, is collected directly by the interested party.

With reference to the purposes referred to in points A1), A2), A3), A4) and A5), the provision of data is necessary in order to fulfill the aforementioned purposes as well as legal and contractual obligations. The processing of data for this purpose does not require your consent.

F) Scope of communication

To the extent that it is relevant to the purposes of the data processing indicated herein, only authorized collaborators are allowed to process data or those belonging to the organizational structure of the Data Controller who may become aware of them.

It is specified that your data may be transmitted to the following recipients:

- Internal authorized person who processes the data for the provision of the service;

- Suppliers and/or partners for the processing of all or part of the personal data to the extent necessary for the execution of their services;

- an IT company;

The list is available at the headquarters of the Data Controller.

G) Duration of data storage

In accordance with the principle of “storage limitation” pursuant to art. 5 of the EU Regulation no. 679/2016 (GDPR), the data collected and processed for the purposes indicated above will be retained in accordance with the deadlines set by law and, subsequently, for the time in which the Company is subject to retention obligations for purposes set by law or regulation. Verification of the obsolescence of the data retained in relation to the purposes for which they were collected is carried out periodically. In any case, data retention is expected for a maximum period of: 12 months.

H) Data profiling and dissemination

Not applicable;

I) Rights of the interested party

In your capacity as interested party, you have the rights set out in art. 15 GDPR and specifically the following rights:

1. to obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form;
2. to obtain indication of: a) the origin of the personal data; b) the purposes and the methods of processing; c) the logic applied in the case of processing carried out with the aid of electronic instruments; d) the details of the designated owner, managers and representative pursuant to art. 3, paragraph 1, GDPR; e) the subjects or the categories of subjects to whom the personal data may be communicated or who may become aware of them as designated representatives in the territory of the State, or as managers or authorized personnel;
3. to obtain: a) the updating, rectification or, when required, the integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data were communicated or disseminated, except in the case in which such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected;
4. to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator by e-mail and/or through traditional marketing methods by telephone and/or post. Please note that the interested party's right to object, set out in point b) above, for direct marketing purposes by automated methods extends to traditional ones and that in any case the possibility for the interested party to exercise the right to object even only in part remains intact. Therefore, the interested party can decide to receive only communications by traditional methods or only automated communications or neither of the two types of communication.
5. Right to rectification of your personal data in the event that they are modified and do not correspond to those previously acquired or communicated (art. 16).
6. Right to delete data ("right to be forgotten" art. 17). ATS ELETTRONICA S.R.L., if one of the following cases exists, proceeds to delete the data from all databases and archives where the same is contained:
   a) the personal data is no longer necessary in relation to the purposes for which they were collected or otherwise processed;
   b) the interested party revokes consent and if there is no other legal basis for the processing;
   c) the interested party objects to the processing pursuant to Article 21, paragraph 1, and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21, paragraph 2;
   d) personal data has been unlawfully processed;
   e) personal data must be deleted for compliance with a legal obligation under Union or Member State law to which the controller is subject;
   f) the personal data has been collected in relation to the offer of information society services referred to in Article 8, paragraph 1.
7. Right to restriction of processing (art. 18). The interested party has the right to obtain from the data controller the restriction of processing when one of the following occurs:
   a) the interested party contests the accuracy of the personal data, for a period enabling the data controller to verify the accuracy of the personal data;
   b) the processing is unlawful and the interested party opposes to the deletion of the personal data and requests instead that its use be restricted;
   c) even if the data controller no longer needs the data for the purposes of the processing, it is nonetheless necessary to ascertain, exercise or defend a right in court;
   d) the interested party has objected to the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
8. Right to object (art. 21-22): The interested party has the right to object at any time, for reasons relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6, paragraph 1, letters e) or f), including profiling based on those provisions. ATS ELETTRONICA S.R.L. does not subject the data to decisions based solely on automated processing.

Lodge a complaint with a supervisory authority (Data Protection Authority – based in Rome, Piazza Venezia n.11 - www.garanteprivacy.it );

J) Data controller and data protection officer

The Data Controller is ATS ELETTRONICA S.R.L. with registered office in Località Arcella Zona Industriale – 83030 Montefredane (AV) with VAT number 02144640642.

The Data Controller can be contacted at the following email address: info@atselettronica.it