Privacy Policy on the Newsletter

The Company ZEC S.p.A. (VAT IDENTIFICATION NUMBER IT01720400348), with registered office at address Via Lungolorno, 11, 43052 Colorno (PR), Italy, contact details: e-mail info@zecspa.com certified e-mail address (Italian acronym PEC) info@pec.zecspa.com phone +39 0521 816631, owner of the website https://www.zecspa.com (hereinafter the “Site”), in its capacity as the Controller of the personal data of the users of the Newsletter service (hereinafter the “Users”), through its legal representative in office, gives  here below the information to data subjects pursuant to Article 13 of Regulation (EU) 2016/679 of 27 April 2016 (hereinafter the “Regulation”, or the “Applicable Legislation”).

This Newsletter service is reserved to persons that are at least eighteen years old. Therefore, the Data Controller does not collect any personal data of people under 18 years of age. At the users’ request, the Data Controller will erase without delay any and all personal data collected concerning people under 18 years old.

The Data Controller attaches the utmost importance to the privacy and to the protection of the personal data of its Users. For any queries about this privacy policy, Users can contact the Data Controller at any time, with the following methods:

• Sending a registered letter with return receipt to the registered office of the Data Controller, at address Via Lungolorno, 11, 43052 Colorno (PR), Italy; 
• Sending an e-mail message to the following addresses: e-mail: info@zecspa.com; certified e-mail (Italian acronym PEC): info@pec.zecspa.com

1 Purposes of the processing
The Users’ personal data will be processed lawfully by the Data Controller in accordance with Article 6 of the Regulation for the following purposes:
To respond to the User’s request: the personal data are collected and processed by the Data Controller solely for the purpose of ascertaining the User’s identity (also through the validation of his or her e-mail address), thus preventing any frauds or abuses and to respond to the user's request for having the newsletter sent. Therefore, the User will periodically receive a newsletter from the Data Controller containing relevant information and news regarding the industry, the Data Controller’s activities or offers, promotions and commercial opportunities submitted by the Data Controller. The User's data collected by the Data Controller for this purpose include: first name, last name and e-mail address. No other processing of the Users’ personal data shall be carried out by the Data Controller. Notwithstanding any other provisions laid down in this privacy policy, in no case shall he Data Controller make the Users’ personal data accessible to other Users and/or third parties.

However, it is always possible to ask the Data Controller to clarify the specific legal basis for each processing activity and in particular to specify whether the processing activity is based on the law, set forth in a contract or needed to close a contract.

The provision of the personal data for the above-stated purposes is optional but necessary as any failure to provide them will entail the impossibility for the User to receive the newsletter from the Data Controller. In case he or she gives his or her consent, the User shall be entitled to withdraw it at any time, notifying said withdrawal to the Data Controller with one of the methods set out in paragraph 5 below.

Furthermore, the Users can easily opt out and stop further newsletters from being sent, also clicking on the specific link for consent withdrawal, which is given in every e-mail containing the newsletter. After consent is withdrawn, the Data Controller will send an e-mail message to the User in order to for the consent withdrawal to be confirmed.

2. Data processing method and storage period
The Data Controller will process the Users’ personal data with manual and IT means, in accordance with logics strictly connected to the purposes, in order to ensure the data security and confidentiality.

The personal data of the Users will be stored for the time strictly necessary to pursue the primary purposes stated in point 1) above or, however, for the time necessary in order to protect the interests both of the Users and of the Data Controller under the Italian civil law.

3. Scope of disclosure and dissemination of the data
The Data Controller's staff members in charge of managing the newsletter service and the Users’ requests may come to know the Users’ personal data. Those persons, who have been instructed to that effect by the Data Controller in accordance with Article 29 of the Regulation, will process the Users’ personal data solely for the purposes set out in this privacy policy and in compliance with the Applicable Legislation.

Furthermore, third parties may come to know the Users’ personal data as said third parties may process personal data on behalf of the Data Controller in the capacity as “External Data Processors”, with said third parties being, by way of example, providers of IT and logistic services instrumental to the service operation, providers of outsourced or cloud computing services, advisors and consultants.

The Users have the right to obtain a list of any data processors appointed by the Data Controller, making the relevant request to the Data Controller with the methods set out in paragraph 5) below.

4. Transfers outside the EU
The data are not processed in extra-EU countries.
Nevertheless, the Data Controller reserves the right to use cloud services and, in this case, the providers of the services will be selected amongst those who ensure appropriate safeguards in accordance with Article 46 of Regulation (EU) 2016/679.

5. Rights of the data subjects
The Users will be able to exercise their rights under the Applicable Legislation by getting in touch with the Data Controller using the following methods:

• Sending a registered letter with return receipt to the registered office of the Data Controller, at address Via Lungolorno, 11, 43052 Colorno (PR), Italy; 
• Sending an e-mail message to the following addresses: e-mail: info@zecspa.com - certified e-mail (Italian acronym PEC): info@pec.zecspa.com

Pursuant to the Applicable Legislation, the Data Controller informs the Users that they have the right to obtain information as to (i) the origin of their personal data; (ii) the purposes and methods of the processing; (iii) the logic applied in the case of processing carried out with the help of electronic tools; (iv) the identification of the data controller and data processors; (v) the entities or categories of entities to which the personal data may be disclosed or which may become aware of the personal data in the capacity of data processors or persons in charge of data processing..

Furthermore, the Site Users have the right to obtain:

• Access to, the updating, rectification or, where they have an interest therein, supplementation of the data;
• The erasure, anonymisation or blocking of data processed in violation of the law, including any data whose storage is not necessary in relation to the purposes for which the data were collected or subsequently processed;
• Confirmation that the operations described under letters a) and b) were brought to the attention, including with regard to their content, of those to whom the data were communicated or disseminated, except in cases where this is impossible or involves the use of resources that are clearly disproportionate to the protected right,

Furthermore, the Site Users have:

• The right to withdraw their consent at any time, if processing is based on their consent;
•  (Where applicable) the right to data portability (the right to receive the personal data concerning him or her in a structured, commonly used and machine-readable format), the right to restriction of processing of their personal data and the right to erasure (“right to be forgotten”);
• The right to object, in whole or in part, on legitimate grounds, to the processing of person data concerning them, even if pertinent to the purpose for which they are collected;
• The right to lodge a complaint with a supervisory authority (in the Member State of his or her habitual residence, place of work or place of the alleged infringement) if the data subject considers that the processing of personal data relating to him or her infringes the Regulation. 

The Italian supervisory authority is the Italian Data Protection Authority Garante per la protezione dei dati personali, with headquarters at Piazza Venezia 11, 00186 – Rome, Italy (http://www.garanteprivacy.it/).

For anything not provided for in this privacy policy, please refer to Regulation (EU) 2016/679, to Italian Legislative Decree 196/03as amended by Italian Legislative Decree 101/2018 as amended and supplemented, as well as to any other measure issued by the Italian Data Protection Authority (Autorità Garante per la Protezione dei Dati Personali, hereinafter “Garante”).

The Data Controller shall not be held responsible and accountable for the updating of all the links in this Privacy Policy and, therefore, if a link does not work and/or is not updated, the Users acknowledge and accept that they shall always refer to the document and/or section of the websites the link refers to In case he or she does not accept the amendments made to this privacy policy, the User shall discontinue his or her use of https://www.zecspa.com  and has the right to obtain, from the Data Controller, the erasure of his or her Personal Data. Unless specified otherwise, this privacy policy shall continue to apply to the Personal Data collected up to that time.