PRIVACY POLICY – www.arlam.com
Dear User, the European Regulation on the protection of personal data (GDPR) in art. 13, paragraph 1, imposes the obligation to inform the interested party, in case of direct collection of your data, on the fundamental elements of the processing, specifying them in § 1, letters a/f. Therefore, you are informed that:
DATA CONTROLLER
The data controller is the company ARLAM SRL , located in Forlì, via Meucci 17,
PEC: arlamsrl@cert.cna.it EMAIL: arlam@arlam.com
TEL: 0543720112 FAX: 0543723910
DATA PROCESSING METHODS:
The personal data you provide will be processed in compliance with the aforementioned legislation and the confidentiality obligations that govern the Data Controller’s activities. The data will be processed using both computerized tools and paper-based media, as well as any other suitable media (e.g., cloud systems, digital archiving and preservation systems, etc.), in compliance with the appropriate technical and organizational security measures required by the GDPR.
DATA CATEGORIES:
The object of the processing may be your personal data such as:
SOURCE OF PERSONAL DATA:
The personal data held by the Data Controller are collected directly from the interested party.
PURPOSE OF DATA PROCESSING AND LEGAL BASIS:
The processing of your data has the following purposes and legal basis:
DATA RECIPIENTS:
Within the limits relevant to the processing purposes indicated, your data may be disclosed to parties appointed as Data Processors by the Data Controller (a list of such parties can be requested from the Data Controller). The personal data collected is also processed by Arlam srl personnel , who act on the basis of specific instructions provided regarding data processing for specific tasks and functions that require the commitment to specific confidentiality obligations. Your data will not be disclosed in any way.
TRANSFER OF DATA TO THIRD COUNTRIES:
Currently, there are no plans to transfer your data to a third country. Should such a transfer occur, it will be carried out in accordance with applicable laws, following the stipulation of the standard contractual clauses provided by the European Commission and, where applicable, notification to the interested parties.
RETENTION PERIOD:
In accordance with the principle of storage limitation (Article 5, GDPR), a periodic check is performed to determine whether the data retained is obsolete in relation to the purposes for which it was collected. Specifically:
RIGHTS OF THE INTERESTED PARTY:
The data subject always has the right to request from the Data Controller access to their data, rectification or erasure of the same, restriction of processing, or the right to object to processing, to request data portability , or to withdraw consent to processing, exercising these and other rights provided by the GDPR by simply notifying the Data Controller. The data subject may also lodge a complaint with a supervisory authority.
MANDATORY OR OPTIONAL NATURE OF THE PROVISION:
Providing your data is mandatory when browsing our website for the purposes set out in points 1 and 2 above, to enable the correct provision of the service.