This Privacy Policy applies not only when accessing the website https://www.quintegia.it/zh-hans/ and choosing to browse it, but also in all cases of data processing by QUINTEGIA S.P.A.
This policy, in fact, provides all the necessary information to understand how data is collected and used by QUINTEGIA S.P.A.
INFORMATION PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679 2016/679
This information is provided only for the QUINTEGIA website and not also for any third-party sites consulted by the user through links.
DATA CONTROLLER
IThe Data Controller of the data collected through this site is QUINTEGIA S.P.A., located at Strada S. Angelo, 116, 31100, Treviso (TV), privacy@quintegia.it.
It independently decides on the purposes and methods of processing, as well as the security procedures to be applied to ensure the confidentiality, integrity and availability of the data.
PURPOSE OF PROCESSING
The specific purposes for which the data are processed are:
- management of registration for events organized by Quintegia and management of digital content purchases (contract execution and eventual billing management);
- conducting survey activities within the automotive market;
- handling of business inquiries and requests for information referred to in the “Contact” section;
- fulfillment of legal obligations related to contractual relationships entered into by Quintegia;
- organizational contract management, e.g. relationships with employees, external contractors;
- protection of contractual rights;
- receipt of Curricula vitae;
- subscription to the newsletter service;
- sending communications for marketing purposes by means of various channels, both electronic and telematic (e-mail, SMS) and traditional (paper mail).
- transfer to third parties, operating in the automotive industry, located in countries belonging to the EU for marketing purposes and/or survey activities.
MODE OF DATA PROCESSING AND STORAGE
Personal data will be processed primarily electronically and telematically.
Processing operations are implemented to ensure the logical, physical security and confidentiality of your personal data.
The data provided will be kept for the time strictly necessary to achieve the purposes for which it was collected, namely:
- Those collected for the purposes set forth in no. 1, 2, 4 and 5: throughout the duration of the contractual relationship and for a period after the conclusion of the contract equal to 10 years;
- data collected for the purpose of No. 3: for as long as necessary to fulfill the request of the data subject;
- Those collected for the purpose stated in no. 6: For the time necessary for the statute of limitations of rights arising from the contractual relationship;
- the data referred to in the Curricula Vitae (purpose stated in #7): for 12 months;
- The data of the user registered for the newsletter service referred to in the purpose stated in no. 8: Until the request for cancellation of the same, but no later than 48 months after the last interaction;
- data collected for marketing purposes indicated in no. 9: Data collected on events and products purchased to send newsletters and/or commercial communications: no longer than 24 months, unless a request for revocation of consent occurs before that time, if the processing is carried out on the basis of this condition of lawfulness; or a request for opposition – in the case of “Soft spam” – where the processing is carried out on the basis of legitimate interest.
MANDATORY OR OPTIONAL NATURE OF DATA PROVISION AND LEGAL BASIS (CONDITION OF LAWFULNESS)
Providing QUINTEGIA with personal data, requested in the different collection occasions, may be mandatory or optional.
1 to 6, the provision of data is mandatory and failure to provide them will result in the inability to execute the request.In the case of the purposes indicated in nos.
7 provision is mandatory, otherwise, without it the application cannot be considered.For the purpose stated in no.
For the purposes indicated, however, in nos. 8 to 10 conferment is optional.
The legal basis and/or condition of lawfulness of processing is as follows:
- the contract, for the purposes stated in nos. 1, 2, 5;
- the consent given by the data subject participating in the survey activity, for the purpose indicated in no. 2;
- consent for the purpose indicated in 3. above, in the case of requests for information only in the absence of a purchase, manifested with the same request; the contract, in other cases;
- the fulfillment of a legal obligation for the purpose stated in no. 4;
- The legitimate interest of the Data Controller for the purpose stated in no. 6;
- the consent given at the bottom of the c.v. by the candidate for the purpose indicated in no. 7. It should be noted that Article 111-bis of Legislative Decree No. 196 of 2003, in the case of spontaneously sent curricula vitae that do not contain special data, does not require any consent from the person concerned;
- for the purposes indicated in points 8 and 9 is the consent given, in the absence of which QUINTEGIA will not be able to: send newsletters/commercial/promotional communications. With reference, on the other hand, to the hypotheses in which users have provided their contact details in the context of a previous business relationship with QUINTEGIA, the latter may use their data to send communications about its own Products/services, similar to what has already been purchased, even without having acquired specific consent for this, unless they refuse such use (so-called “soft spam” – art. 130, paragraph 4, Legislative Decree 196/2003; art. 6, paragraph 1, letter f) of EU Reg. 2016/679). In this case, in fact, the legal basis justifying the processing is the legitimate interest of the Data Controller (Recital (47) of EU Reg. 2016/679). For the sake of completeness, it should be mentioned that in some cases (not the subject of the ordinary management of this site) the Authority may request news and information pursuant to Article 157 of Legislative Decree No. 196/2003, for the purpose of monitoring the processing of personal data. In these cases, the response is mandatory under penalty of administrative sanction.
Translated with DeepL.com (free version) - for the purposes stated in Section 10 is the consent given by the data subject.
SCOPE OF DATA COMMUNICATION AND DISSEMINATION
Data may be disclosed to:
- all persons to whom the right of access to such data is recognized by virtue of regulatory measures;
- to our collaborators, employees, within the scope of their duties, authorized to process the data provided;
- to third parties, adequately selected and endowed with experience, capacity, and reliability, who offer suitable guarantees of full compliance with current processing provisions, including the data security profile. These third parties have been appointed “data controllers” and carry out their activities according to the instructions given by QUINTEGIA.
These include:
-
- companies and professionals that the Data Controller uses;
- companies and professionals used by the Client, for particular services and always at the Client’s request;
- companies that manage the website.
SOURCE OF PERSONAL DATA COLLECTION AND TYPE OF PERSONAL DATA PROCESSED
Data are acquired when accessing this website.
Type of Personal Data
| COMMON DATA | |
|---|---|
| PURPOSE | TYPE OF DATA |
| Registration to the site, with subsequent management of the relevant account, and use of the services offered by Quintegia. Executing purchase orders for Digital Content. Organizational management of registration for events organized by Quintegia (e.g. relations with employees, external collaborators). Fulfilling legal obligations. |
Account Management
|
| Survey activity | ANAGRAPHICAL DATA/COMPANYING REGION CONTACT DATA DATA CONTAINED IN THE SURVEY |
| Handling of inquiries: of a commercial nature and requests for information (“Contact” section) |
|
| Data contained in curricula vitae |
|
Data for:
|
Newsletter
Promotional communications/marketing
|
It should also be noted that the computer systems and software procedures in charge of the operation of this website acquire, in the course of their normal operation, some personal data – NAVIGATION DATA – the transmission of which is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of computers used by users connecting to the site, and other parameters related to the user’s operating system and computing environment.
For more details on the processing of such data https://www.quintegia.it/en/cookie-policy-ue/
SAFETY MEASURES
QUINTEGIA has taken appropriate security measures in order to minimize the risks of destruction or loss – even accidental – of data, unauthorized access or processing that is not permitted or not in accordance with the stated purposes of collection.
RIGHTS OF INTERESTED PARTIES set forth in Articles 15, 16, 17, 18, 20, 21, and 22 of REG. EU 2016/679
The ‘data subject has, in addition to the right to lodge a complaint with a supervisory authority, the rights listed below, which he or she may enforce by addressing a specific request to the Data Controller.
Art.15 – Right of access
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and if so, to obtain access to the personal data and information regarding the processing.
Art. 16 – Right of Rectification
The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him or her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary statement.
Article 17 – Right to deletion (right to be forgotten).
The data subject has the right to obtain from the data controller the deletion of personal data concerning him or her without undue delay, and the data controller has the obligation to delete the personal data without undue delay.
Art. 18 – Right to limitation of processing
The data subject has the right to obtain from the data controller the restriction of processing when one of the following cases occurs:
- the data subject disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
- processing is unlawful and the data subject objects to the deletion of personal data and instead requests that their use be restricted;
- although the data controller no longer needs it for the purposes of processing, the personal data is necessary for the data subject to establish, exercise or defend a right in court;
- the data subject has objected to the processing under Article 21 paragraph 1, pending verification as to whether the data controller's legitimate grounds prevail over those of the data subject.
Art. 20 – Right to data portability
The data subject shall have the right to receive in a structured, commonly used and machine-readable format personal data concerning him or her that have been provided to a data controller and shall have the right to transmit such data to another data controller without any impediment from the controller to whom he or she has provided them.
When exercising his or her rights regarding data portability under paragraph 1, the data subject has the right to obtain direct transmission of personal data from one data controller to another, if technically feasible.
Art. 21 – Right of Opposition
The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her in accordance with Article 6 paragraph 1, letters e) o f), including profiling on the basis of such provisions.
Art. 22 – Right not to be subjected to automated decision-making, including profiling
The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning him or her or that significantly affects him or her in a similar way.
Withdrawal of consent to treatment
The data subject is also granted the right to withdraw consent to the processing of His/Her personal data.
Upon completion of this operation, Your personal data will be removed from the archives as soon as possible.
If you wish to have more information about the processing of your personal data, or to exercise your rights under the previous point, you may write to privacy@quintegia.it.
Before providing, or changing any information, it may be necessary to verify the identity of the person concerned by answering a few questions. A response will be provided as soon as possible, within 30 days from the request.
In addition, requests may also be addressed to the Data Controller by writing to:
Quintegia S.p.a.
Via Strada S. Angelo, 116
31100 – Treviso – Italy