This notice supplements the website browsing privacy policy and is intended to explain how the Data Controller specifically processes the personal data provided through this form. Users are therefore invited to read the website privacy policy available at:
https://www.csmmachinery.com/en/privacy-notice/
CSM Machinery S.r.l., hereinafter also referred to as “CSM Machinery” or the “Data Controller”, with registered office in Cimetta di Codognè (TV), Via Cadore Mare no. 25,
email: info@csmmachinery.com certified email (PEC): csmmachinery@pec.csmmachinery.com telephone: +39 0438 795326
Management of information requests: personal data are processed for all purposes related to handling requests for information and/or quotations.
Newsletter: contact details are processed for the sending of advertising or direct marketing communications.
Legal claims and defense: the Data Controller may process personal data for the management of disputes and legal or out‑of‑court proceedings.
| Purpose | Legal basis (ordinary data) | Legal basis (special categories of data) |
|---|---|---|
| Management of information requests | Performance of pre‑contractual measures; legitimate interest of the Data Controller in responding to submitted requests | – |
| Newsletter | Consent | – |
| Legal claims and defense | Legitimate interest of the Data Controller to establish, exercise or defend a right | Establish, exercise or defend a right |
| Purpose | Retention period |
|---|---|
| Management of information requests | Time necessary to handle the request and subsequent correspondence (generally 6 months from the last communication) |
| Newsletter | Until unsubscription |
| Legal claims and defense | 10 years from the final resolution of the dispute |
| Purpose | Nature | Consequences of refusal |
|---|---|---|
| Management of information requests | Mandatory | Impossibility to receive the requested information |
| Newsletter | Optional | Impossibility to receive updates on the services offered by the company |
| Legal claims and defense | Mandatory | Inability to manage disputes or legal claims |
Personal data are processed by duly authorized internal staff for specific tasks and may be disclosed externally in accordance with the following rules:
| Purpose | Categories of external recipients |
|---|---|
| Management of information requests | Companies belonging to the same corporate group, commercial agents, sales consultants |
| Newsletter | Companies belonging to the same corporate group, external consultants, companies providing hosting and technological platform management services |
| Legal claims and defense | Law firms; debt collection or credit assignment companies; judicial authorities |
Since data are also processed by electronic means, they may also be accessible to entities providing assistance or maintenance services for such systems.
The Data Controller does not transfer personal data outside the European Economic Area (EEA).
The data subject is entitled to exercise the following rights:
| Purpose | Access | Rectification | Erasure | Restriction | Objection | Portability | Withdrawal of consent |
|---|---|---|---|---|---|---|---|
| Management of information requests | ✔ | ✔ | ✔ | ✔ | ✔ | – | – |
| Newsletter | ✔ | ✔ | ✔ | ✔ | – | ✔ | ✔ |
| Legal claims and defense | ✔ | ✔ | ✔ | ✔ | ✔ | – | – |
To exercise the above rights, data subjects may use the form available at:
https://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924
and submit it to the following contact address:
amministrazione.machinery@csmmachinery.com
The data subject may also request additional information using the same contact details (e.g. balancing test for legitimate interest or the list of data processors).
Data subjects may lodge a complaint with a supervisory authority. In Italy, the competent authority is:
Italian Data Protection Authority (Garante per la Protezione dei Dati Personali)
www.garanteprivacy.it
