Information on the processing of personal data

for those consulting our website

pursuant to Article 13 of EU Regulation 2016/679 (GDPR)

Dear surfer, pursuant to art. 13 of EU Regulation 2016/679 (GDPR, General Data Protection Regulation), we provide you with the methods for processing the personal data of users who consult the CMC s.r.l. website accessible at the following web address: www.cmcmt.it. This information does not concern other sites, pages or online services that can be reached through hypertext links that may be published on the site, but which refer to resources outside the domain of CMC srl.

DATA CONTROLLER
The Data Controller is CMC srl, with registered office in Via Padre Paolo Meroni, 20 - 22031/ALBAVILLA (CO) Tax code and VAT no. 02927020137. The Data Controller can be contacted by writing to the following e-mail address: cmcmt@cmcmt.it.

LEGAL BASIS FOR PROCESSING
The legal basis for the processing is the consent freely given by the user when providing his data and/or the legitimate interest of the Controller.
Your personal data will be processed in accordance with the principles of correctness, lawfulness and transparency for the management of the contractual and/or pre-contractual relationship and to fulfil your requests.

MODALITIES OF DATA PROCESSING
Personal data provided by users may be processed by means of both paper and computer files (including portable devices), as well as on any other suitable medium, in compliance with the appropriate technical and organisational security measures provided for by the GDPR.

TYPE OF DATA PROCESSED AND PURPOSE OF PROCESSING
Navigation data
The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. These are those personal data transmitted and automatically acquired by merely connecting to the site. This information in itself is not collected to identify the user, but by its very nature could, through processing and association with data held by third parties, allow users to be identified. The data could be used to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the site.
This category of data includes IP addresses, the domain names of the computers or devices used for the connection, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the connection and request time, the request method and any other parameter related to the user's operating system and computer environment.
These data, necessary for the use of web services, are also processed for the purpose of:
-obtain anonymous statistical information on the use of the site (most visited pages, number of visitors per time slot or per day, geographical areas of origin, etc.);
-check the proper functioning of the site.
The recipients of this data are the owner and the hosting provider (currently Siteground - Privacy Policy)

Identifying data communicated by the user
The optional, voluntary and explicit sending of e-mail messages to the contact addresses of CMC srl, as well as the completion and sending of on-line forms present on the CMC srl website, entail the acquisition of the sender's contact details, which allow direct identification of the sender and are necessary for replying, as well as all the personal data included in the communications.
Specific information is published on the pages of the site set up for the provision of these specific services.

Identifying data provided by cookies and other tracking systems
While browsing, the user may also unwittingly provide identification data by means of Cookies installed to recognise the user each time he/she logs in and which are suitable for revealing his/her habits and interests.
The storage of cookies in devices or browsers is under the user's control, where on the servers, at the end of sessions, information relating to cookies remains recorded in browser logs. The computer systems used for this site do not use: cookies for the transmission of information of a personal nature or persistent profiling cookies.
The policy on the management and use of Cookies is better explained in the Cookies Policy section of this site, to which we also refer for a better understanding of the data that falls under this category. For more details see theCookie policy of the site.

The data collected is also acquired and processed for the following purposes: integration with social networks, external platforms and third parties (facebook, google, youtube) displaying the content of external platforms and interaction with them.

Details of Services Used
The Controller manages the sending of mailing lists and/or newsletters through the services MailChimp widget (The Rocket Science Group, LLC.)in each case subject to the express consent of the user to the processing. By registering for the newsletter, the User's email address and name are automatically included in a list of contacts to whom email messages may be sent containing information, also of a commercial and promotional nature, relating to CMC srl. The newsletter is managed with MailChimp, and the User's personal data is stored on MailChimp's servers. Failure to consent to the processing of data for the purpose of sending the newsletter will make its use impossible.
For more details see Privacy Policy of MailChimp and our Privacy Policy Newsletter.

Google Analytics which issues technical cookies aimed at the statistical collection of browsing information (Privacy Policy).

Widget of Youtube/Vimeo for viewing videos from youtube.com (Privacy Policy) or vimeo.com (Privacy Policy).

Widget of Google Mapsused on the 'Contacts' page to display the Google map (Privacy Policy).

DATA RECIPIENTS AND DATA TRANSFER ABROAD
Your personal data may be communicated, within the limits strictly pertinent to the obligations, tasks and purposes indicated above and in compliance with the regulations in force, to: persons to whom such communication must be made in order to fulfil or to require the fulfilment of specific obligations laid down by laws, regulations and/or EU legislation; external natural and/or legal persons who provide services instrumental to the Controller's activities.
Our employees and our internal or external collaborators have been appointed "Data Processors" or "Persons in charge of the processing" on the basis of their roles and work tasks. They are therefore entitled to know and process the data you have provided, within the limits of their competence and in accordance with the instructions given by the Data Controllers.
The Data Controller has adopted appropriate technical and organisational measures to guarantee the protection of the data processed in compliance with the relevant legislation in force, as well as an adequate security policy that includes the training of the personnel in charge of processing to ensure that the processing is always carried out in a secure manner.
Your data will not be disseminated in any way.
Personal data collected from this site are processed at the headquarters of:
-Titleholder;
-Aruba S.p.a with registered office in Ponte San Pietro (BG), Via San Clemente no. 53;
-MailChimp widget (The Rocket Science Group, LLC.) based in the United States (Atlanta) (with the 'Privacy Shield framework' certificate for Privacy in the European Union).
Data collected for newsletters are transferred to countries outside the EU (U.S.A.), in accordance with Art. 44 et seq. of the GDPR.

DURATION OF PERSONAL DATA RETENTION
The data collected will be retained for a period of time not exceeding the achievement of the purposes for which they are processed ("principle of retention limitation", art.5, GDPR); in any case for the time of browsing and beyond in the case of consent given by the person concerned to the installation and use of Cookies. (For more details on the retention period, see theCookie policy of the site).
Newsletter and cookie data will be automatically deleted if consent is revoked.

RIGHTS OF THE DATA SUBJECT
The data subject has the right to obtain from CMC srl, in the cases provided for, access to his/her personal data as well as the rectification or erasure or portability of the same or the restriction or opposition of their processing (pursuant to Articles 15 to 22 of the Regulation). The data subject may exercise his/her rights by sending an e-mail to cmcmt@cmcmt.it. 

RIGHT OF COMPLAINT
Interested parties who consider that the processing of personal data relating to them carried out via this site is in breach of the provisions of the Regulation have the right to lodge a complaint with the Garante, as provided for in Article 77 of the Regulation, or to take legal action (Article 79 of the Regulation).