Information pursuant to Article 13 of Regulation (EU) 2016/679

Why this information

Pursuant to Regulation (EU) 2016/679 (hereinafter referred to as the “Regulation”), this page describes the methods for processing the personal data of users consulting the Holmac S.a.s. website, accessible electronically at https://holmac.com (hereinafter referred to as the “Site”). This information does not concern other sites, pages or online services that can be reached via hypertext links that may be published on the Site, but which refer to resources outside the domain https://holmac.com. This privacy policy of Holmac S.a.s. (the “Privacy Policy”) applies exclusively to the online activities of the Site and is valid for visitors and users of the Site. It does not apply to information collected through channels other than the Site. The purpose of the Privacy Policy is to provide maximum transparency regarding the information the Site collects and how it uses it. When the Site requires the provision of data, the provision and therefore consent to the collection and processing of the same is optional, the user may deny consent, and may revoke consent already provided at any time (by writing to Holmac S.a.s. using the addresses in the “Contacts” section of the Site). However, denying consent, even by disabling cookies, may result in the inability to provide certain services and your browsing experience on the Site may be impaired.

Data controller

The data controller is Holmac S.a.s., with registered office in Via Canada n. 13, 35127 Padua, in the person of its legal representative pro tempore.

Data Protection Officer

The company’s Data Protection Officer (DPO) can be reached at the address given in the ‘Contact’ section of the website.

Legal basis for processing

The personal data collected are processed exclusively for purposes connected with the exercise of Holmac S.a.s.’s typical activity. The legal basis for processing is to be found in the Regulation.

Types of data processed

Navigation data

The computer systems and software procedures used to operate the Site acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the use of Internet communication protocols. This category of data includes the IP addresses or domain names of the computers and terminals used by users, the URI/URL (Uniform Resource Identifier/Locator) notation addresses of the resources requested, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user’s operating system and computer environment. Such data, necessary for the use of the Site and the services it offers, may also be processed for the purpose of:

• obtain statistical information on the use of services or user preferences with respect to cars and vehicles promoted through the Site (most visited pages, number of visitors per time slot or day, geographical areas of origin, type of vehicles on which attention is focused, etc.);
• monitor the proper functioning of the services offered.

Browsing data do not persist and are deleted after they are aggregated (except in the event of criminal investigations by judicial authorities). This information is processed automatically and collected in aggregate form only for the purpose of verifying the proper functioning of the Site, and for security reasons. For security purposes (anti-spam filters, firewalls, virus detection), automatically recorded data may possibly also include personal data such as the IP address, which could be used, in accordance with the relevant laws in force, in order to block attempts to damage the Site itself or to cause damage to other users, or in any case harmful or criminal activities. This data is never used for user identification or profiling, but only for the protection of the Site and its users.

Data communicated by the user

The optional, explicit and voluntary sending of messages to the contact addresses on the Site, as well as the completion and forwarding of any forms or the filling in of contact forms, entail the acquisition of the sender’s contact data necessary to reply, as well as all the personal data included in the communications themselves, and their provision implies consent to their processing for the purposes indicated herein.

Cookies and other tracking systems

For more details on the use of cookies, please refer to the relevant notice here: https://holmac.com/en/cookie-policy-ue/

Purpose of processing

The data shall be processed for institutional purposes, connected and instrumental to the typical activity of Holmac S.a.s. and in particular:

1. for purposes strictly related to the management of the contractual relationship, the processing of which is necessary for the performance of the contract to which the data subject is party (Art. 6 letter b) of the GDPR) and the pursuit of Holmac S.a.s.’s interest in carrying out its economic activity (Art. 6 letter f) of the GDPR);
2. for the fulfilment of legal obligations to which the data controller is subject (Art. 6(c) GDPR);
3. to communicate and/or send, also by automated means, newsletters and information on the activities and products of Holmac S.a.s. (art. 6 letter a) of the GDPR) (direct marketing purposes);
4. to identify, including by means of electronic processing, consumer habits and propensities, to meet specific user needs by proposing new services and products (Art. 6(a) GDPR);
5. to disseminate, at promotional events and trade fairs, on Holmac S.a.s. communication channels the images of participants collected therein by means of photographs and/or films;

Place of processing

The data collected by the site are processed at the Data Controller’s premises, and at the web hosting datacenter, which is located in the European Union and acts in accordance with European standards.

Security Measures

The Site processes user data lawfully and fairly, taking appropriate security measures to prevent unauthorised access, disclosure, modification or destruction of data. Processing is carried out by means of computer and/or telematic tools, with organisational methods and logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, categories of persons in charge of the organisation of the Site and of Holmac S.a.s. (such as administrative and sales staff, marketing staff, system administrators) or external subjects (such as third party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the data.

Users’ rights

Pursuant to the Rules and Regulations and national legislation, the user may, in the manner and within the limits provided for by current legislation, exercise the following rights:

• request confirmation of the existence of personal data concerning him/her (right of access);
• know its origin;
• receive intelligible communication;
• obtain information on the logic, methods and purposes of the processing;
• request the updating, rectification, integration, deletion, transformation into anonymous form, and blocking of data processed in breach of the law, including data no longer necessary for the purposes for which they were collected;
• in cases of consent-based processing, receive, at the sole cost of any support, your data provided to the data controller, in a structured, machine-readable form and in a format commonly used by an electronic device;
• the right to lodge a complaint with the supervisory authority (garanteprivacy.it);
• as well as, more generally, to exercise all the rights recognised to him by the applicable legal provisions.

Requests should be addressed to the Data Controller at the addresses indicated in the ‘Contact’ section of the Site. Where data are processed on the basis of the legitimate interests The rights of the data subject to the processing are in any case guaranteed (except the right to portability, which is not provided for by the rules), in particular the right to object to the processing, which may be exercised by sending a request to the data controller.

Right to complain

Data subjects who consider that the processing of personal data relating to them carried out through this Site is in breach of the provisions of the Regulation have the right to lodge a complaint with the Garante della Privacy (www.garanteprivacy.it), as provided for by Art. 77 of the Regulation itself, or to take appropriate legal action (Art. 79 of the Regulation).