HINWEIS ZUR VERARBEITUNG PERSONENBEZOGENER DATEN IM ZUSAMMENHANG MIT DEM AUSFÜLLEN DES „NEWSLETTER“-FORMULARS

Dieser Hinweis ergänzt die Datenschutzrichtlinie zur Nutzung der Website und soll erläutern, wie der Verantwortliche die über dieses Formular bereitgestellten personenbezogenen Daten konkret verarbeitet. Die Nutzer werden daher gebeten, die auf der Website verfügbare Datenschutzerklärung zu lesen unter: https://www.csmmachinery.com/de/politik-zum-datenschutz/

Identity and Contact Details of the Data Controller

CSM Machinery S.r.l., hereinafter also referred to as “CSM Machinery” or the “Data Controller”, with registered office in Cimetta di Codognè (TV), Via Cadore Mare no. 25,
email: info@csmmachinery.com
certified email (PEC): csmmachinery@pec.csmmachinery.com
telephone: +39 0438 795326

Purposes of Processing and Legal Bases

Newsletter: contact details are processed for the purpose of sending advertising or direct marketing communications.

Legal claims and defense: the Data Controller may process personal data to manage disputes and legal or out-of-court proceedings.

Purposes and Legal Bases

Purpose	Legal basis (ordinary data)	Legal basis (special categories of data)
Newsletter	Consent	–
Legal claims and defense	Legitimate interest of the Data Controller to establish, exercise or defend a right	Establish, exercise or defend a right

Data Retention Period

Purpose	Retention period
Newsletter	Until unsubscription
Legal claims and defense	10 years from the final resolution of the dispute

Nature of Data Provision and Consequences of Refusal

Purpose	Nature	Consequences of refusal
Newsletter	Optional	Impossibility to receive updates on the services offered by the company
Legal claims and defense	Mandatory	Inability to manage disputes or legal claims

Recipients of the Data

Personal data are processed by authorized internal staff for specific tasks and may be disclosed externally in accordance with the following rules:

Purpose	Categories of external recipients
Newsletter	Companies belonging to the same corporate group, external consultants, companies providing hosting and technological platform management services
Legal claims and defense	Law firms; debt collection or credit assignment companies; judicial authorities

Since data are also processed using IT tools, they may be visible to entities providing assistance or maintenance of such systems.

Transfer of Data to Third Countries or International Organizations

The Data Controller does not transfer personal data outside the European Economic Area (EEA).

Rights of Data Subjects

The data subject is entitled to exercise the following rights:

Right of access: to know whether personal data are being processed and, if so, to obtain access and a copy thereof.
Right to rectification: to obtain the correction of inaccurate data and the completion of incomplete data.
Right to erasure: to obtain the deletion of personal data where the legal requirements are met.
Right to restriction: to obtain the restriction of processing under certain conditions.
Right to object: to object to processing based on legitimate interest or carried out in the public interest.
Right to data portability: to receive personal data in a structured format and request their transmission to another controller where processing is based on consent or contract and carried out by automated means.
Right to withdraw consent: to withdraw consent at any time, without prejudice to the lawfulness of processing carried out prior to withdrawal.

Rights Exercisable per Purpose

Purpose	Access	Rectification	Erasure	Restriction	Objection	Portability	Withdrawal of consent
Newsletter	✔	✔	✔	✔	–	✔	✔
Legal claims and defense	✔	✔	✔	✔	✔	–	–

Exercise of Rights and Complaints

To exercise the above rights, data subjects may use the form available at:
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924

and send it to:
amministrazione.machinery@csmmachinery.com

The data subject may also request additional information (e.g. balancing test for legitimate interest or the list of data processors) using the same contact details.

Data subjects may also lodge a complaint with the competent supervisory authority. In Italy:
Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
www.garanteprivacy.it