Who are we and what do we do with your personal data?

Idrotherm 2000 S.pA. based in via Pio La Torre, n. 21, Castelnuovo di Garfagnana (LU), hereafter, Data Controller, protects the confidentiality of your personal data and guarantees the safeguarding required by each event that may place them at risk of violation. 

To that end, the Data Controller implements policies and practices concerning the collection and use of personal data and the exercise of the rights granted to you by the applicable regulations. The Data Controller updates its policies and practices on personal data protection every time this is necessary or when regulatory and organisational changes are made that may affect the processing of your personal data.

The Data Controller has appointed a Data Protection Officer (DPO) who you may contact if you have questions about the policies and practices adopted. The Data Protection Officer's contact details are the following: dpo@idrotherm2000.com

How does the Data Controller collect and process your data?

The Data Controller collects and/or receives information relating to you, such as: IP addresses, identifying personal data (such as name, surname, email address, company of belonging) issued during browsing on the website https://www.corexcores.com

They are used by the Data Controller:

1. For responding to your request for information

Your personal data are processec to manage the website and to follow up on any requests by you to receive information. Your personal data is communicated mainly to third parties and/or recipients whose activity is necessary to perform the activities relating to the aforementioned purposes, and also to comply with certain legal obligations. Any communication not related to those purposes will be submitted for your consent in advance. 

Your personal data will not be disseminated or disclosed to indeterminate entities in any way.

The personal data relating to you will be also processed:

2. For marketing activities

Your personal data are processed for the purpose of sending commercial and/or promotional communications. Your data (such as your first name, last name, email address, and phone number) may be processed via email, phone number, or SMS. This processing may be carried out if you give your consent for the use of your data for a period not exceeding two years.

We remind you that by using the contact details provided by the Data Controller, you can request at any time that your data not be processed for this purpose.

What happens if you do not provide your data?

The personal data relating to you and that identify you are necessary in order to fulfil the request submitted by you via the “contacts” section and, if not provided, this will prevent the Data Controller from fulfilling your requests.

What happens if you do not give your consent to personal data processing for marketing purposes?

Your personal data will not be processed for those purposes.

If you have given authorisation and you later withdraw it or object to the processing for marketing purposes, your data will no longer be processed for marketing activities and you will not suffer any prejudicial consequences or effects.

How, where and for how long will your data be stored?

How

The processing of data concerning you is carried out using both electronic and manual means and tools made available to persons acting under the authority of the Data Controller and authorized and trained for this purpose. 

Where

The data is mainly stored on servers located within the EU, but may be transferred outside the EU on the basis of the following safeguards:

  • Data Privacy Framework;
  • Standard Contractual Clauses;
  • Commission Adequacy Decision;

How long

Personal data is stored in electronic archives protected by effective security measures that are adequate to counter the risks of violation considered by the Data Controller. For the time necessary to fulfill requests for information and to send communications of this exclusive nature that the Data Controller makes following your request and in any case for a period not exceeding a maximum of 2 years except in cases where events occur that require the intervention of the competent authorities, also in collaboration with third parties/recipients responsible for the data security of the Data Controller, to carry out any investigations into the causes that led to the event.

Personal data processed for marketing purposes will be stored for a maximum of 2 years, unless previously given consent is revoked.

What are your rights?

In line with the time limits established above for the processing of personal data relating to you, the rights that are granted to you allow you always to have control of your data. Your rights are those of:

  • access;
  • rectification;
  • erasure;
  • restriction on processing;
  • opposition to processing;
  • portability. 

Your rights are granted to you without particular burdens and formalities in relation to the request to exercise them which is essentially understood to be free of charge. You have the right:

  • to obtain a copy, even in electronic format, of the data that you have asked to access. If you request further copies, the Data Controller may charge to you a reasonable contribution to costs;
  • to obtain the erasure of the same or the restriction of processing or even the update or rectification of your personal data and to guarantee that third parties/recipients, who have received your data, also adjust to your request, unless legitimate reasons prevail over those that determined your request (e.g. environmental surveys and containment of risk determined by the emergency managed through them by the Controller);
  • to obtain any useful communication in relation to the activities performed following the exercise of your rights without delay and in any case within one month from your request, subject to motivated extension of up to two months, which must be duly communicated to you.
  • For any further communication and in any case to submit your request, you must contact the Controller, at the address privacy@idrotherm2000.com

With whom may I lodge a complaint?

Subject to any other action in the administrative or judicial venue, you may lodge a complaint with the competent supervisory authority or with that which performs its duties and exercises its powers in Italy where you have your habitual residence or where you work or, if different, in the Member State in which the violation of Regulation (EU) 2016/679 occurred. 

Any update to this privacy policy will be communicated to you promptly and by appropriate methods and you will also be notified if the Data Controller is to process your data for purposes additional to those indicated in this privacy policy before it proceeds to do so and in time for your to provide your consent, if required.