1. DATA CONTROLLER
This privacy information is provided by ALIFAX S.R.L. (P.IVA 04337640280 – e-mail info@alifax.com – tel. 049 0992000 – PEC info.alifax@pec.alifax.com), headquarter in Via Petrarca 2/1, Polverara (35020 – PD)
2. PERSONAL DATA AND PURPOSES OF PROCESSING
2.1 In compliance with the provisions of EU Reg. 2016/679, of Legislative Decree no. 196/2003 (as amended by Legislative Decree no. 101/2018), of the Measures and indications of the Guarantor Authority and, in general, of the regulations regarding the confidentiality of personal data, this Webinar Registration form collects some common personal data, as entered by the interested party (name, surname, e-mail, address, telephone number, performance of economic activities, with particular reference to the company of reference and the relative role held in that company)
2.2 The above mentioned common personal data entered through the registration in the form are functional to the correct registration to the Webinar, among other things in order to identify the composition and characteristics of the reference audience, with consequent effects on the structure of the Webinar itself.
2.3 The collection of the aforementioned common personal data may also be aimed at traditional marketing activities (including paper mail or non-automatic telephone calls with operator) in relation to the products covered by the webinar or products complementary or similar to them
2.4 Subject to the specific consent of the interested user through the specific functionality of the site, the collection of the aforementioned common personal data may also be aimed at commercial promotion activities by sending advertising material, organizing events, direct sales, carrying out commercial research and commercial communication through the contact details indicated by the interested user, such as e-mail, SMS or similar communications, always in relation to the products covered by the webinar or complementary products or similar.
3. METHODS AND LEGAL BASIS OF PROCESSING
3.1 The processing may be carried out with or without the aid of electronic or automated tools, always in compliance with the provisions of the legislation on the confidentiality of personal data, with particular reference to the provisions of Art. 32 EU Reg. 2016/679 which requires the adoption of technical/organisational measures appropriate to the risk. The processing is carried out by the individual data processors specifically appointed/authorised and/or the various data processors specifically appointed, in any case under the supervision and according to the indications of the Data Controller
3.2 With reference to the purpose of correct registration to the Webinar, the legal basis of the treatment resides in the specific request of the Data Subject to attend the Webinar compiling registration form or the execution of agreements with the user who register in order to take part to virtual demonstrations of Alifax products (art. 6 EU Reg. 2016/679 lett. B).
3.3 With reference to the purpose of marketing/commercial promotion, the legal basis of the processing can be found in the specific consent of the interested party, issued through the appropriate functionality of the website (art. 6 EU Reg. 2016/679 lett. A). With reference to traditional marketing, the legal basis of the processing can be found in the legitimate interest of the Data Controller (Article 6 of EU Reg. 2016/679 letter F, also in consideration of Recital 47 of the Regulation).
4. DATA PROVISIONS
4.1 The provision of the common personal data referred to in this policy, with regard to the purpose of correct registration to the Webinar, is not mandatory (neither contractually nor legally) but it is necessary/functional to complete the registration and participate in the Webinar. Any refusal by the interested party to provide the relevant personal data, or the incorrect communication of such data, makes it impossible to complete the registration (if the data entry fields are marked with “*”) or the Webinar may not take into account the specific characteristics of the interested user (if the data entry fields are not marked with “*”).
4.2 With reference to personal data collected/managed for purposes of commercial promotion and/or traditional marketing, the conferment is not mandatory (neither contractually nor legally) but is necessary/functional for the performance of such purposes. Any refusal by the interested party to provide the relative personal data, or the incorrect communication of such data, makes it impossible to carry out the marketing / commercial promotion activity (if the data entry fields are marked with “*”) or the execution of a marketing / commercial promotion activity that does not take into account the specific characteristics of the interested user (if the data entry fields are not marked with “*”).
4.3 It will always be possible for the interested party to revoke at any time the consent originally provided, or to oppose the processing (for traditional marketing), with the consequent immediate interruption of the processing of the data provided for the relevant purposes. The withdrawal of consent (or opposition) for only some of the purposes indicated, will have no effect on the regular execution of the other purposes indicated.
5. END OF PROCESSING
5.1 With reference to the purpose of correct registration to the Webinar, if the cancellation/opposition is not legitimately requested, the data will be kept only for the period necessary to provide the requested Webinar service and, in any case, to an extent and for a period not exceeding that necessary to guarantee the Data Controller the possible defense of his rights in court or equivalent.
5.2 For commercial promotion purposes, in the event that consent is not revoked, or the deletion of the data/opposition to the treatment/termination of the service is legitimately requested, the data will be kept for a period not exceeding 24 months from the moment consent is given. In any case, periodic checks will be carried out on the correctness, existence and persistence of the data provided (with particular reference to contact details).
5.3 For traditional marketing purposes, if the cancellation of the data/opposition to the treatment/termination of the service is not legitimately requested, the data will be kept for a period not exceeding 24 months from the moment they are provided. In any case, periodic checks will be carried out on the correctness, existence and persistence of the data supplied (with particular reference to the contact details).
6. COMUNICATION AND DISSEMINATION
6.1 Personal data may be communicated for the aforementioned purposes to consultants and freelancers, also in an associated and specifically appointed form (for example, business consultants, law firms, etc.), public/private subjects for whom communication is obligatory or necessary in fulfilment of legal or functional obligations for the performance of the requested service (for example, the subject managing the platform for data collection and webinar implementation).
6.2 With reference to the purpose of commercial promotion, especially in view of the different geographical areas in which the interested user carries out his or her activity, the data may be transmitted to subsidiaries and local authorised distributors of the Data Controller in order to correctly carry out commercial promotion in relation to the specific characteristics of the geographical area of reference and the products concerned.
6.3 Personal data collected are not subject to dissemination.
7. DATA TRANSFER OUT OF THE EU
7.1 The Data Controller makes use of services related to the management of the web platform for the Webinar provided by suitably appointed third parties. In this regard, it will be possible for the data to be transmitted outside the European Economic Area, in particular in the United States. The processing, in any case, takes place on the basis of standard contractual clauses pursuant to art. 46 EU Reg. 2016/679 and, where not applicable, on the express consent of the interested party given through the registration to the webinar (the transfer is essential for the execution of the webinar service).
7.2 With reference to the purpose of commercial promotion, as indicated in point 6 above, the data may be transmitted to subsidiaries and authorised distributors of the Data Controller competent for the geographical area and products of reference. In this regard, the data may be transmitted outside the European Economic Area. The countries in which personal data may be transmitted in relation to the geographical area of reference of the user concerned are those listed on the web page https://www.alifax.com/azienda/. The processing is carried out on the basis of the express consent of the interested party (the transfer, if necessary, is essential for the correct execution of the commercial promotion service, failure to consent or the withdrawal of the same will make it impossible to access the service).
8. RIGHTS OF THE DATA SUBJECT
The Reg. EU Reg. 2016/679 gives the data subject specific rights, including the right to access and make available their personal data in an intelligible form; the data subject also has the right to obtain updating, rectification (if incorrect), integration (if incomplete) or deletion of data (in the event of unlawful processing), data portability (right to receive or have data transmitted to another data controller in a structured, commonly used and readable format), revocation of consent (if legal basis for processing), transformation into anonymous form or blocking/limitation of data processed in violation of the law; the data subject has the right to object, for legitimate reasons, to the processing of
data. With reference to the processing of the data provided, should the interested party identify violations of privacy legislation, he or she will have the right to lodge a complaint with the Privacy Guarantor. The Data Subject may exercise his/her rights by making a request to the Data Controller or to the Data Protection Manager (also by requesting the latter to receive a complete list of the appointed Data Processors).
