...
IT | EN | ES | FR

PRIVACY POLICY


Article 13 of EU Regulation 2016/679

1. Who are we and why are we providing you with this document?

CANALAIR SERVICE S.r.l VIA PREALPINA OROBICA n. 64 - 24028 PONTE NOSSA (BG) – Italy (hereinafter defined as the DATA CONTROLLER) deals with the implementation of plant solutions for industrial application.25 years of experience in design, production, installation and testing of industrial aerotextile systems, of every type and size, which are able to satisfy multiple environmental and processing requirements. Seriousness and experience at the service of the customer, from consulting to after-sales, up to the "turnkey" system.
Having been the DATA CONTROLLER for years, it places the protection of personal data of its own and/or potential customers and users first ensuring that the processing of personal data, performed with any method, both manual and automated, and in full respect of the protection and rights established by the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016, concerning the protection of individuals with regard to the processing of personal data and the free movement of such data (hereinafter defined as the "Regulation") and all applicable rules on the protection of personal data.
The wording PERSONAL DATA refers to the definition inserted in Article 4 in point 1) of the Regulation i.e. "any information relating to an identified or identifiable natural person; an identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as the name, an identification number, location data, an online identifier, a navigation IP or to one or more characteristic elements of his physical, physiological, genetic, mental, economic, cultural or social identity (hereinafter the "PERSONAL DATA").
The Regulation stipulates that, before proceeding with the PROCESSING OF PERSONAL DATA, i.e. any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, recording, organization, structuring, storage, adaptation or modification, extraction, consultation, use, disclosure by transmission, dissemination or otherwise making available, the alignment or combination, restriction, deletion or destruction (definition contained in Article 4, point 2) of the Regulation) (hereinafter defined as the "Processing") - it is mandatory that the person to whom such Personal Data belongs is informed about why such data is requested and how they will be used. Therefore, this document is intended to provide you, in a simple and intuitive way, all the necessary and useful information for you to know all about your Personal Data in a conscious and informed manner and, at any time, request and obtain clarifications and/or corrections.
This Privacy Policy therefore follows the principle of transparency and all the principles set out in Article 13 of the Regulation and is divided into individual sections (hereinafter defined as "Sections" or "Section") each of which deals with a specific topic in order to make the information itself easy to understand.
The present document, where necessary, may be accompanied by a special Form to obtain the consent, as provided by Article 7 of the Regulation, for any further use that we intend to perform with your Personal Data.

2. Who will process your Personal Data?

The company that will process your Personal Data for the main purpose referred to in Section 4 of this Privacy Policy and which, therefore, will play the role of the DATA CONTROLLER according to the definition contained in Article 4 in paragraph 7) of the Regulation, "The natural or legal person, the public authority, the service or other body which, individually or jointly with others, determines the purpose and means of the processing of personal data" is:

CANALAIR SERVICE S.r.l.
VIA PREALPINA OROBICA n. 64
24028 PONTE NOSSA (BG)

3. To whom may you refer?

In order to simplify the relationship between you the "DATA SUBJECT", and the DATA CONTROLLER, the Regulation has provided that you can contact the DATA CONTROLLER at any time by means of the resources available to you, namely:

  • E-mail: privacy@canalair.it
  • Registered office address: CANALAIR SERVICE S.r.l VIA PREALPINA OROBICA no. 64 - 24028 PONTE NOSSA (BG) - Italy

for all matters relating to the Processing of your Personal Data and/or if you wish to exercise your rights as provided for in Section 9 of this Privacy Policy, sending a written communication to the contact details indicated above.
Whenever you want, you can consult the "Privacy" section of the Internet sites in which you will find all the modalities and information regarding the use and processing of your Personal Data and up-to-date information about contacts and communication channels to all the parties concerned by the DATA CONTROLLER.

4. For what main purpose will your Personal Data be processed?

The DATA CONTROLLER, in order to allow the provision of his services, has provided the possibility to register, and/or send requests for information using the contact forms, needs to collect some of your Personal Data, as required in the registration form on the website or at the registered office of Canalair Service Srl. The website and the registered office of the DATA CONTROLLER for which this Privacy Policy is issued are those reported in the privacy section http://www.canalair.it/privacy (hereinafter defined as the "Internet Sites").The Processing of your Personal Data will be performed by the DATA CONTROLLER to give you the information requested according to Art 6 of the EU Regulation 2016/679, participate in initiatives promoted through Internet Sites, receive newsletters, send requests for information as well as take advantage of all other services, from time to time, offered by the Data Controller.
The Processing of your Personal Data will be legally based on the contractual relationship that will be created between you and the DATA CONTROLLER following your acceptance of the conditions relating to the services that the Data Controller offers.
In order to allow the DATA CONTROLLER to perform the processing activities for the above purposes it will be necessary to provide Personal Data (NAME, SURNAME, COMPANY NAME, VAT NO/TAX ID CODE DOMICILE, TEL, E-MAIL).
In the absence of even one of the data mentioned above, it will not be possible to proceed with the processing of your Personal Data and, consequently, you will not be able to complete the relationship with the DATA CONTROLLER and/or benefit from the services provided by the Data Controller for which your Personal Data is required.

5. Further purposes

The DATA CONTROLLER, with your express, free and unequivocal consent in accordance with Article 6, paragraph 1, point a) of the Regulation, may request, in addition to the above data, additional Personal Data such as, for example, data on tastes, preferences, habits, needs and choices of consumption, for the following purposes, i.e. profiling data.

  1. Direct marketing purposes: this term means that the DATA CONTROLLER can provide you with promotional and/or marketing activities. All activities carried out to promote products, services, sold and/or provided on the basis of their legitimate interest in pursuing their social object fall within this category.
  2. Indirect marketing purposes: this term means the will of the DATA CONTROLLER to carry out promotional and/or marketing activities on behalf of third parties. This category shall include all activities carried out to promote products, services, sold and/or provided by third parties with whom the DATA CONTROLLER has legal relations, without in this case there being communication of data.
  3. Purpose of profiling: this term means the will of the DATA CONTROLLER to profile, that is to evaluate your tastes, preferences and habits of consumption also related to market surveys and statistical analysis. This category covers any form of automated Processing of Personal Data to assess certain personal aspects such as those concerning, but not limited to, professional performance, economic situation, personal preferences, interests, reliability, behaviour, location, or movements.

The Processing of your Personal Data for the purposes set out in points (II) and (III) requires your express consent, which will necessarily have to comply with the conditions laid down in Article 7 of the Regulation, imposing the lawfulness of the Processing of your Personal Data.
With regard to the direct marketing purpose referred to in point (I), it should be specified that, pursuant to Article 6, paragraph 1, point f) of the Regulation, the DATA CONTROLLER may carry out such activity in relation to their legitimate interest, regardless of your consent and in any case until you oppose to such Processing as better explained in Recital 47 of the Regulation in which "the processing of personal data for direct marketing purposes is considered legitimate". This will also be possible as a result of the assessments made by the DATA CONTROLLER regarding the possible prevalence of your interests, rights and fundamental freedoms on the protection of Personal Data on their legitimate interest in sending direct marketing communications. The contact methods aimed at direct, indirect and profiling marketing activities as in the previous points (I), (II) and (III), can be either automated (email, SMS, MMS, fax, telephone without operator) or traditional (telephone calls with operator, postal items).However, as defined in Section 8, you may revoke your consent, even partially, for example consenting to only traditional contact methods.
In relation to the contact methods that foresee the use of your telephone contacts, we remind you that the activities of direct marketing by the DATA CONTROLLER will be carried out after verification of your possible entry in the Register of Oppositions as established pursuant to and for the effects of Presidential Decree no. 178 of 7 September 2010 and subsequent amendments.

6. Who are the persons to whom your Personal Data may be disclosed?

Your Personal Data may be communicated to specific subjects considered as recipients of such Personal Data. In fact, Article 4, point 9) of the Regulation defines as the recipients of a Personal Data "the natural or legal person, public authority, service or other body that receives communication of Personal Data, whether it is a third party or not" (hereinafter defined as the "Recipients"). For this reason, in order to provide the services expressed in this statement, the following Recipients may be in a position to process your Personal Data:

  • third parties (hereinafter the "Data Processor") who carry out part of the Processing activities and/or related and instrumental activities to the same on behalf of the DATA CONTROLLER; the latter have been appointed responsible for processing in accordance with Article 4, point 8) of the Regulation, "the natural or legal person, the public authority, the service or other body that processes personal data on behalf of the DATA CONTROLLER for example "the accountant";
  • individuals, employees and/or collaborators (hereinafter the "Authorised Persons") of the DATA CONTROLLER, who have been entrusted with specific and/or further processing activities on your Personal Data. These people have been trained on the subject of security and proper use of Personal Data and are defined, in accordance with Article 4, point 10) of the Regulation, "persons authorized to process Personal Data under the direct authority of the Data Controller or Data Processor"
  • If required by law or to prevent or suppress the commission of a crime, your Personal Data may be disclosed to public bodies or to the judicial authorities without these being defined as Recipients. Indeed, in accordance with Article 4, point 9) of the Regulation, "public authorities which may receive communication of Personal Data in the context of a specific investigation in accordance with Union or Member State law are not considered Recipients".

7. How long will your Personal Data be processed?

One of the principles applicable to the Processing of your Personal Data concerns the limitation of the retention period, governed by Article 5, paragraph 1, point e) of the Regulation that states "Personal Data shall be kept in a form that allows the identification of Data Subjects for a period of time not exceeding the achievement of the purposes for which they are processed in our case until the termination of the contractual relationship; Personal Data may be stored for longer periods provided they are processed exclusively for archival purposes in the public interest, for scientific or historical research or for statistical purposes, in accordance with Article 89, paragraph 1, subject to implementation of the appropriate technical and organisational measures required by this Regulation in order to safeguard the rights and freedoms of the Data Subject".
In light of this principle, your Personal Data will be processed by the DATA CONTROLLER only for the time necessary for the pursuit of the purposes set out in Section 4 of this Information statement. In particular, your Personal Data will be processed for a period of time equal to the minimum necessary, as indicated in Recital 39 of the Regulation, i.e. until the termination of the contractual relationships between you and the DATA CONTROLLER, without prejudice to a further retention period that may be imposed by law as also provided for by Recital 65 of the Regulation.
In relation to the processing performed to achieve the purposes set out in Section 5 of this statement, the DATA CONTROLLER may lawfully process your Personal Data until you notify your intention to withdraw your consent to one or all of the purposes for which you have been asked using one of the methods provided for in this statement. Any revocation of your consent will require the DATA CONTROLLER to cease the processing of your Personal Data for these purposes.

8. Is it possible to revoke the consent given and how?

As provided in the Regulation, if you have given your consent to the processing of your Personal Data for one or more purposes for which you have been requested, you may, when you wish, revoke it totally and/or partially without prejudice to the lawfulness of consent-based processing given prior to revocation.
The methods of revocation of consent are very simple and intuitive, simply contact the DATA CONTROLLER using the contact channels reported in this statement and in sections 3 and 9 respectively.
In addition to the above and for simplicity, if you receive advertising e-mails from the DATA CONTROLLER that are no longer of interest to you, simply click on the unsubscribe button placed at the bottom of the same to no longer receive any communication, even through additional contact channels for which your consent had been obtained (SMS, MMS, paper mail, fax, phone calls).

9. What are your rights?

As required by Article 15 of the Regulation, you may access your Personal Data, ask for rectification and updating, if incomplete or erroneous, request its erasure if the collection occurred in violation of a law or regulation, as well as oppose the Processing for legitimate and specific reasons.
In particular, below we have listed all the rights you may exercise at any time against the DATA CONTROLLER:

  • Right of access: you shall have the right, pursuant to Article 15, paragraph 1 of the Regulation, to obtain the confirmation from the DATA CONTROLLER that the Processing of Personal Data is or is not in progress and in that case, to obtain access to such Personal Data and to the following information: a) the purpose of the processing; b) the categories of Personal Data in question; c) the Recipients or categories of Recipients to whom your Personal Data have been or will be communicated, in particular if Recipients of third countries or international organisations; d) where possible, the retention period of the Personal Data provided or, if not possible, the criteria used to determine that period; e) the existence of the right of the Data Subject to ask the DATA CONTROLLER for the rectification or deletion of Personal Data or the limitation of the Processing of Personal Data concerning him/her or to oppose their processing; f) the right to lodge a complaint to a supervisory authority; g) where Personal Data are not collected from the Data Subject, all information available on their origin; h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4 of the Regulation and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such Processing for the Data Subject. All this information may be found in this Information statement that will always be at your disposal within the Privacy section of each of the Internet sites or at the DATA CONTROLLER.
  • Right to rectification: pursuant to Article 16 of the Regulation, you may obtain the rectification of your Personal Data if these are inaccurate. Taking into account the purpose of the processing, moreover, it will be possible to obtain the integration of your personal data, which are incomplete, by providing a supplementary statement.
  • Right to erasure: pursuant to Article 17, paragraph 1 of the Regulation, you may obtain the erasure of your Personal Data without undue delay and the DATA CONTROLLER will be obliged to cancel your Personal Data where even only one of the following reasons exists: a) your Personal Data is no longer necessary for the purposes for which they were collected or otherwise processed; b) you have revoked your consent on which the Processing of your Personal Data is based and there is no other legal basis for their Processing; c) you have opposed the Processing pursuant to Article 21, paragraph 1 or 2 of the Regulation and there is no longer any legitimate reason to proceed with the Processing of your Personal Data; d) your Personal Data has been processed unlawfully; e) it is necessary to delete your Personal Data in order to fulfil a legal obligation under a community or national law. In some cases, pursuant to Article 17, paragraph 3 of the Regulation, the DATA CONTROLLER shall be entitled not to provide for the erasure of your Personal Data if their Processing is necessary, for example, for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest, for purposes of archiving in the public interest, for scientific or historical research or for statistical purposes, for the assessment, exercise or defence of a right in court.
  • Right to restriction of processing: pursuant to Article 18 of the Regulation, you may obtain the restriction of processing where one of the following applies: a) you contest the accuracy of your personal data, (the limitation will continue for the period necessary for the DATA CONTROLLER to verify the accuracy of such Personal Data); b) the processing is unlawful but you oppose the deletion of your Personal Data and requests that the use is limited; c) although the DATA CONTROLLER no longer needs it for Processing purposes, your Personal Data are necessary for verification, exercise or defence of a right in court; d) you have opposed to the processing pursuant to Article 21, paragraph 1, of the Regulation and are awaiting verification of the possible prevalence of the DATA CONTROLLER'S legitimate reasons in relation to yours. In case of restriction of processing, your Personal Data will be processed, subject to your consent for storage, or for the assessment, exercise or defence of a right in court, or to protect the rights of another natural or legal person or for reasons of significant public interest. We shall inform you, in any event, before this restriction is revoked.
  • Right to data portability: you may, at any time, request and receive, in accordance with Article 20, paragraph 1 of the Regulation, all your Personal Data processed by the DATA CONTROLLER in a structured format, of common and legible use, or request transmission to another DATA CONTROLLER without hindrance. In this case, it will be your responsibility to provide us with all the exact details of the new DATA CONTROLLER to whom you intend to transfer your Personal Data, giving us written authorization.
  • Right to be forgotten: in law, a particular form of guarantee, which foresees the NON-diffusion, without particular reasons, of previous prejudicial information of a person, by such we intend mainly the judicial history of a person. On the basis of this principle it is not legitimate, for example, to disseminate information about convictions received or any other sensitive data of a similar subject, except where these are special cases which can be linked to news events and also in such cases the publicity of the fact must be proportionate to the importance of the event and the time elapsed from the incident.
  • Right of opposition: in accordance with Article 21, paragraph 2 of the Regulation and as also reiterated in Recital 70, you may, at any time, oppose the Processing of your Personal Data where these are processed for direct marketing purposes, including profiling in so far as it is related to such direct marketing.
  • Right to lodge a complaint with the supervisory authority: without prejudice to your right to appeal any other administrative or judicial office, if you consider that the processing of your Personal Data is carried out by the DATA CONTROLLER in violation of the Regulation and/or applicable law, you may lodge a complaint to the competent Data Protection Authority for the Protection of Personal Data.

To exercise all your rights as identified above, simply contact the DATA CONTROLLER in the following ways:

  • E-mail: privacy@canalair.it
  • Registered office address: CANALAIR SERVICE S.r.l VIA PREALPINA OROBICA n. 64 - 24028 PONTE NOSSA (BG) - Italy

10. Where will your Personal Data be processed?

Your Personal Data will be processed by the DATA CONTROLLER within the territory of the European Union.
If, for technical and/or operational reasons, it is necessary to make use of entities located outside the European Union, we inform you that those entities will be appointed Data Processors pursuant to and for the purposes of Article 28 of the Regulation and the transfer of your Personal Data to such persons, limited to the performance of specific processing activities, will be regulated in accordance with the provisions of chapter V of the Regulation. All necessary precautions will be taken to ensure the full protection of your Personal Data based on this transfer:(a) on decisions about the adequacy of third country recipients expressed by the European Commission; (b) on adequate guarantees expressed by the third party recipient pursuant to Article 46 of the Regulation; (c) on the adoption of corporate binding rules.
In all cases, you may request more details from the DATA CONTROLLER if your Personal Data have been processed outside the European Union, and ask for evidence of the specific guarantees adopted.