Article 13 of EU Reg. 679/2016
We would like to inform you that EU Reg. 679/2016 (and Legislative Decree 196/2003 and subsequent amendments and additions, only insofar as it complies with EU Reg. 679/2016) provides for the protection of individuals with regard to the processing of personal data. According to this legislation, the processing of your data will be based on the principles of correctness, lawfulness and transparency, protecting the confidentiality and security of data and ensuring the exercise of your rights. Pursuant to the aforementioned Article 13 of EU Reg. 679/2016, we, therefore, provide you with the following information:
a) The identity and contact details of the Data Controller and, where applicable, of the Data Controller's representative;
The Data Controller is:
HV HYDRAULIC SRLregistered office address VALSAMOGGIA (BO), VIA DELL'AGRICOLTURA no. 162, POSTCODE 40053, FRAZIONE: CASTELLO DI SERRAVALLEREA (Economic and Administrative Index) No. BO - 435998Tax code 02390201206VAT number 02390201206Tel. 051/6705011Fax. 051/6705374
The data controller is established in the European Union and, therefore, is not required to designate a representative.
b) The contact details of the Data Protection Officer, where applicable;
The Data Controller does not currently process data falling under the obligation to designate a "Data Protection Officer" as detailed in Articles 37-38-39 and Recital 97 of EU Regulation 2016/679.
c) The purposes of the processing for which the personal data are intended and the legal basis of the processing;
The purpose of the processing is as follows:
- To process your return request made by filling in a specific data collection form on our website https://www.hvhydraulic.com
We inform you that for the above-mentioned purpose, your personal data will be processed (personal data, contact data such as, for example, e-mail addresses, telephone numbers), data necessary to manage the return procedures).
Please note that in no section of the website, nor for access to any functionality of the website, the provision of "special categories of personal data" and/or "personal data relating to criminal convictions and offences", as defined by Articles 9 and 10 of EU Reg. 679/2016, is required. If the User spontaneously sends the Data Controller information of the aforementioned type, the Data Controller shall process it in compliance with the provisions of EU Reg. 679/2016 and only if and to the extent strictly necessary in relation to the requests received from the website visitor; otherwise, such types of data shall not be processed and shall be immediately deleted by the Data Controller.
The legal basis of the processing relates to the provisions of Article 6(1)(b) of EU Reg. 679/2016: the processing is necessary for the performance of a contract to which the Data Subject is a party or for the performance of pre-contractual measures taken at the request of the Data Subject prior to entering into a contract.
d) Where the processing is based on Article 6(1)(f), the legitimate interests pursued by the Data Controller or a third party;
We inform you that the processing of the data is not based on Article 6(1)(f ), as the processing is not necessary for the purposes of pursuing the legitimate interests pursued by the Data Controller or a third party, provided that the interests or the fundamental rights and freedoms of the Data Subject which require the protection of personal data do not prevail, in particular, if the Data Subject is a child.
e) The recipients or categories of recipients of the personal data, if any;
Your personal data will be processed by persons specifically appointed by the Data Controller as Data Processors (if appointed) and/or by anyone acting under their authority and/or under the authority of the Data Controller and having access to personal data (Directors/Members/Employees of the Data Controller); these subjects will process your data only when necessary in relation to the purposes of the conferment and only in the context of the performance of the tasks assigned to them by the Data Controller, undertaking to process only the data necessary for the performance of such tasks and to carry out only the operations necessary for the performance of such tasks.
Your personal data will not be communicated to third parties and/or disseminated.
f) Where applicable, the intention of the Data Controller to transfer personal data to a third country or an international organisation and the existence or absence of an adequacy decision by the Commission or, in case of transfers pursuant to Article 46 or 47, or to the second paragraph of Article 49, the reference to appropriate or adequate safeguards and the means of obtaining a copy of such data or the place where they have been made available.
The Data Controller does not intend to transfer your personal data to a third country or an international organisation.
In addition to the information provided above, the Data Controller provides you with the following additional information necessary to ensure fair and transparent processing:
g) The retention period of your personal data or, if this is not possible, the criteria used to determine this period;
Your data will be kept for the time necessary to process your return requests received via the form on the company website (for a maximum period of 1 year from the time of collection).
h) The existence of the Data Subject's right to request access to and rectification or erasure of personal data from the Data Controller or to restrict the processing of personal data concerning him or her or to object to the processing of such data, in addition to the right to data portability;
You may, at any time, exercise the following rights under EU Reg. 679/2016 vis-à-vis the Data Controller by contacting the Data Controller at the contact details indicated in point a) of this notice:
- Data subject's right of access (Article 15 of EU Reg. 679/2016).- Right of rectification (Article 16 of EU Reg. 679/2016).- Right to erasure - "right to be forgotten" (Article 17 of EU Reg. 679/2016).- Right to restriction of processing (Article 18 of EU Reg. 679/2016).- Right to object (Article 21 of EU Reg. 679/2016).- Right to data portability (Article 20 of EU Reg. 679/2016).
i) Where the processing is based on Article 6(1)(a) or Article 9(2)(a), the existence of the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;
You may exercise vis-à-vis the Data Controller the right to withdraw your consent at any time without prejudice to the lawfulness of the processing based on your consent given prior to the revocation by contacting the Data Controller at the contact details given in point a) of this notice.
j) The right to lodge a complaint with a supervisory authority;
If you consider that the processing of personal data relating to you, carried out by the Data Controller, is in breach of the provisions of EU Reg. 679/2016, you have the right to lodge a complaint with the relevant Supervisory Authority, as provided for in Article 77 of EU Reg. 679/2016 itself, or to take appropriate legal action (Article 79 of EU Reg. 679/2016).
k) Whether the disclosure of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, and whether the Data Subject is under an obligation to provide personal data, as well as the possible consequences of not providing such data;
The communication of data described above is necessary in order to process your requests for returns and is strictly related to normal business operations; therefore, failure to provide such data may make it impossible to process your requests for returns (in particular, as regards the "mandatory fields" in the information collection form).
l) The existence of an automated decision-making process, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information about the logic used, as well as the importance and expected consequences of such processing for the Data Subject.
The Data Controller hereby informs you that your data will not be subject to automated decision-making, including profiling as referred to in Article 22(1) and (4) of EU Reg. 679/2016.
The full text of the articles of EU REG. 679/2016 relating to your rights (Articles 15 to 22 inclusive) can be found at the following link on the website of the Italian Data Protection Authority:
alternatively, they will be provided to you by the Data Controller at your request.
Finally, the Data Controller informs you that, if the Data Controller intends to further process your personal data for a purpose other than that for which they were collected, prior to such further processing it undertakes to provide you with all information regarding such other purpose and any further relevant information as referred to in Article 13 of EU Reg. 679/2016, paragraph 2.
Date of last modification of the document
VALSAMOGGIA (BO), 08/11/2021