Privacy Policy pursuant to EU Regulation no. 679/2016

INFORMATION FOR THE PROCESSING OF PERSONAL DATA
This information is also provided pursuant to art. 13 of EU Regulation no. 679/2016 on the protection of personal data to those who interact with the web services of M.E.S. S.R.L. accessible electronically from the address: www.mesimpianti.com.
The information is provided only for the site indicated above and not for other websites that may be consulted by the user through links.

THE DATA CONTROLLER
The holder of the treatment is:
M.E.S. S.r.l. – Via Nazionale, 50/bis – 45030 Occhiobello (RO)
Tel: +39 0425 758429
E-mail: info@mesimpianti.com
Pec: mes@pec.mesimpianti.com

PLACE OF DATA PROCESSING
The processing operations connected to the web services of this site take place at the headquarters of M.E.S. S.r.l. and are handled by employees or contractors, authorized to process. If we use external subjects for the processing of data on our behalf, they will be appointed as data processors as provided by art. 28 of EU Regulation 2016/679.
No data deriving from the website will be communicated or disseminated. However, Internet providers receive the navigation data of users as necessary for the performance of their activities, while companies that provide support services and maintenance on computer systems may come into contact with user data in the event of maintenance work on the systems.

TYPES OF DATA PROCESSED
Navigation data
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of hosts used by users connecting to the site, URI (Uniform Resource Identifier) of requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response from the server (successful, error, etc..) and other parameters relating to the operating system, browser (fingerprint) and computer environment of the user.
The data (log-files, traffic data) could be used to ascertain responsibility in the event of hypothetical computer crimes against the site, and for the same reason stored by ‘ISP (Internet Service Provider, Internet connectivity provider).

Sending of e-mails through contacts indicated on the appropriate page
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message. The email address thus acquired is used to respond to requests sent to us and the simple sending of an email for contact purposes does not imply subscription to mailing lists for the purpose of sending advertising material. For the treatment in question is not necessary to acquire your prior consent as responding to requests sent to us is a legitimate interest of the owner of the treatment.
The processing of the requested data is therefore optional but necessary for the purposes of formulating your request. If you refuse to provide such data, M.E.S. S.r.l. will not be able to consider your request.
Your data will be kept no later than the exhaustion of the request.

Contacts
The form in the section “Contacts” is used for the purpose of responding to requests sent to us. Also in this case it is not necessary to obtain your prior consent as the processing of the data in question (company
name, contact person, e-mail, telephone, address, city) is carried out on the basis of a legitimate interest of the owner of the treatment.

Reserved area
The data will be processed for:
1. to authorise access to the Reserved Area;
2. inform the interested party that in the Reserved Area are available contents and documents of interest to him and the Company;
3. in case of loss of access credentials, activate the procedure that allows the recovery of the password and the reset of the same;
4. pursue the legitimate interests of the Holder, including, where necessary, to assert or defend a right in court.
The processing of data for the purposes mentioned above does not require consent as it is necessary for the pursuit of the legitimate interest of the Holder, pursuant to art. 6, c. 1 of EU Regulation no. 679/2016.
The provision of data for the purposes is optional; in their absence, however, the Owner may not grant access to the Reserved Area.
The data will be kept until the moment of your request for cancellation.

OPTIONALITY ‘OF THE PROVISION OF DATA
Apart from that specified for navigation data, the user is free to provide personal data using the contacts indicated on the site to request the sending of informative material or other communications.
Failure to provide such data may make it impossible to obtain what has been requested.

MODALITIES OF THE TREATMENT
Apart from the navigation data, processed by the ISP as an independent holder, personal data are processed with paper, computer and telematic tools and supports in compliance with the provisions of the law, regulations and company policy to ensure the security, confidentiality, availability and integrity, as well as the accuracy, updating and relevance of the data with respect to the purposes stated below. The data will be processed in compliance with the principles of correctness, lawfulness and transparency.
The data will be processed by specifically authorized and trained internal personnel, and in the event that an external party is used to process certain data, the party in question will be appointed as Data Processor through a regular contract as provided for in art. 28 of the Regulation.
Personal data acquired through the site are kept for the time strictly necessary to achieve the purposes for which they were collected.
Specific security measures are observed to prevent the loss of data, illicit or incorrect use and unauthorized access.
No personal data is transferred to a third country or an international organisation.

DATA RETENTION TIME
Personal data will be processed no later than the time necessary to achieve the purpose and in any case not later than the maximum time required by law.

RIGHTS OF THE INTERESTED PARTY

In relation to the aforementioned processing operations and the relative data existing in our archives, the rights referred to in Chapter III, articles 15 to 22 of EU Regulation 2016/679, in particular, may be exercised:
– Right of access (art.15);
– Right of rectification (art.16);
– Right to cancellation (so-called right to be forgotten, art.17);
– Right to limitation of treatment (art.18);
– Right to data portability (art.20);
– Right of opposition (art.21).
In order to exercise your rights you may contact the Writer by telephone, mail or e-mail using the contacts indicated at the top of this information notice.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
Pursuant to Article 13(2)(d), you are informed of your right to lodge a complaint with the Data Protection Authority if you find that your rights as a data subject have been violated or if you have any questions regarding the processing of your personal data.
Requests relating to the above mentioned articles of EU Regulation no. 679/2016, must be forwarded to the Data Controller using the contacts indicated at the top of this statement.