PRIVACY POLICY

This information is provided pursuant to art. 13 of EU Regulation 679/2016 by the Company CSA SRL with headquarters in Via Firenze, 19 - 36030 VILLAVERLA (VI) - Italy, in its capacity as Data Controller, to those who access the website of the Company CSA SRL itself and fill in the "contact" form, authorising the Company CSA SRL to process their personal data.
The provision of data is optional. Refusal to provide the data will make it impossible to process and follow up on the requests received.

PURPOSE OF PROCESSING
The personal data provided by users are used for the sole purpose of processing and following up their requests.

LEGAL BASIS
The personal data provided by the users are lawfully processed in order to carry out pre-contractual measures or contractual obligations (art. 6 par. 1 lett. b) of Regulation 679/2016), requested by the users themselves (request sent by filling in the form).

DATA RECIPIENTS
The personal data provided by users will not be disclosed to third parties in any way. They may be communicated to employees and collaborators of the Data Controller, who will process them in compliance with the instructions given by the Data Controller.

DATA STORAGE
Users' personal data will be processed for the time necessary to fulfil the purposes indicated.

RIGHTS OF THE INTERESTED PARTY
Pursuant to Articles 13, paragraph 2, and 15 to 21 of the Regulation, we inform you that in relation to the processing of your personal data you may exercise the following rights:

Right to obtain access to personal data and the following information:
confirmation as to whether or not your personal data are being processed;
the purposes of the processing;
the categories of personal data;
the recipients or categories of recipients to whom the personal data have been or will be communicated;
where the data are not collected from the data subject, all available information as to their source;
the existence of an automated decision-making process, including profiling;
a copy of the personal data being processed.
Right to rectification and integration of personal data;
Right to erasure of data ("right to be forgotten") if one of the following reasons applies:
the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
the data subject withdraws consent to the processing of the data and there is no other legal basis for the processing;
the data subject objects to the processing and there is no overriding legitimate ground for the processing;
the personal data have been processed unlawfully;
the personal data must be erased in order to comply with a legal obligation laid down by Union or Member State law to which the controller is subject.
If a data controller has made personal data public and is obliged to erase it, it must inform other data controllers processing personal data of the request to erase any link, copy or reproduction of its data.
Right to restriction of processing where:
the data subject contests the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of such personal data;
the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead that their use be restricted;
although the controller no longer needs the personal data for processing purposes, the personal data are necessary for the establishment, exercise or defence of legal claims by the data subject;
the data subject has objected to the processing, pending verification as to whether the legitimate reasons of the data controller prevail over those of the data subject.
Right to lodge a complaint with the Garante per la protezione dei dati personali, following the procedures and instructions published on the Authority's official website www.garanteprivacy.it.
The data subject's right to data portability, i.e. the right to receive in a structured, commonly used and machine-readable format personal data concerning him or her that have been provided to a data controller and, where applicable, to transmit them to another data controller, where the processing is based on consent or on a contract and is carried out by automated means. Where technically possible, the data subject shall have the right to obtain the direct transmission of data from one controller to another.
Right to object at any time to the processing of personal data, including profiling, in particular where:
the processing is carried out on the basis of the legitimate interest of the controller, subject to an explanation of the reasons for the objection;
the personal data are processed for direct marketing purposes.
The right not to be subject to a decision based solely on automated processing, including profiling, except where the decision: is necessary for the conclusion or performance of a contract between the data subject and a data controller; is authorised by Union law or the law of the Member State to which the data controller is subject; or is based on the explicit consent of the data subject.
Right to withdraw consent at any time; data, if not based on another legal basis (including, compliance with a legal obligation or performance of a contract) must be erased by the controller.

The exercise of rights is not subject to any formal constraints and is free of charge.

METHODS OF EXERCISING RIGHTS
The interested party may exercise his/her rights at any time by sending

a registered letter with return receipt to CSA SRL Via Firenze, 19 - 36030 VILLAVERLA (VI) - Italy;
an e-mail to controlsystemautomazioni@legalmail.it.
DATA CONTROLLER
The Data Controller is CSA SRL .
Contact details: Via Firenze, 19 - 36030 VILLAVERLA (VI) - Italy - Tel. 0445 350469 - info@csasrl.net.