INFORMATION ON THE PROCESSING OF PERSONAL DATA - CONTACT FORM

pursuant to Article 13 of Regulation (EU) 2016/679

Pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”), the following information is provided regarding the processing of personal data communicated by the data subject through the contact form on the website.

Data Controller

The Data Controller is SCP Rapid Prototyping, Tax Code/VAT No. 03710290366, with registered office at Via della Pace, 65 – 41051 Castelnuovo Rangone (MO), Italy, certified email address (PEC) scpspinellisrl@pec.it.

For any information concerning the processing of personal data and for the exercise of the rights provided for by the Regulation, the data subject may contact the Data Controller at the contact details indicated above.

Categories of personal data processed

The following personal data provided directly by the data subject may be collected through the contact form, in particular:

• first name and surname;
• email address;
• telephone number (if any);
• any further contact details;
• subject of the request;
• content of the message;
• any data contained in documents or files voluntarily attached by the data subject.

The data subject is requested not to enter in the free-text field or in any attachments personal data other than that necessary to handle their request and, in particular, data belonging to special categories pursuant to Article 9 GDPR, unless this is strictly necessary in relation to the request made.

Purposes of processing and legal basis

The marketing purpose is autonomous and distinct from the handling of the contact request.

Failure to consent to marketing shall not in any way affect the possibility of submitting the form, receiving a reply or entering into a contractual relationship with the Data Controller.

Consent for marketing purposes

The processing of data for marketing purposes shall be carried out exclusively subject to the data subject’s freely given, specific, informed and unambiguous consent.

Consent may be withdrawn at any time, without affecting the lawfulness of processing carried out before such withdrawal.

Nature of the provision of data

The provision of the data necessary to handle the request is optional but indispensable to enable the Data Controller to receive, assess and respond to the communication.

In the event of failure to provide the necessary data, the Data Controller may be unable to provide the requested reply.

The provision of data for marketing purposes is, by contrast, optional.

Failure to consent to marketing has no consequence with regard to the handling of the request or the possible establishment of a contractual relationship.

Methods of processing

Personal data are processed by means of IT and telematic tools in compliance with the principles of lawfulness, fairness, transparency, minimisation, accuracy, integrity and confidentiality.

The Data Controller adopts appropriate technical and organisational measures in order to protect data from unauthorised access, loss, alteration, destruction or unlawful disclosure.

Recipients of personal data

Data may be processed by duly authorised and instructed personnel and collaborators of the Data Controller.

For the technical management of the contact form and the sending of the related communications, based on the technical configuration communicated, the Resend service, provided by Resend Inc., is used.

Resend Inc. may process the data to the extent necessary for the transmission of the communication and of any automatic confirmation message, in accordance with the data protection role and the terms provided for by the applicable contractual relationship.

For marketing purposes, data may also be processed by any communication, mailing, CRM or technical support service providers appointed, where necessary, as Data Processors pursuant to Article 28 GDPR.

Data may be disclosed to the competent Authorities in the cases provided for by law.

Personal data shall not be disseminated.

Transfer of data to third countries

The use of Resend and of any further technology providers may involve the processing of personal data in the United States of America or in other countries located outside the European Economic Area.

Any such transfers shall be carried out in compliance with Articles 44 et seq. GDPR and on the basis of the instruments provided for by the applicable legislation.

The data subject may request further information from the Data Controller on the safeguards adopted for specific transfers.

Retention period

Data processed to handle the request shall be retained for the time necessary to handle and respond to it.

Where the request gives rise to a contractual relationship, the data shall form part of the related documentation and shall be retained for the periods provided for by the applicable civil, tax and accounting legislation.

Where the request does not give rise to a contractual relationship, the data shall be erased or anonymised once the needs connected with the request have been fulfilled, unless further retention is necessary for the establishment, exercise or defence of a legal claim.

Data processed for marketing purposes shall be retained until consent is withdrawn and, in any event, for a period proportionate to the purposes pursued, without prejudice to the data subject’s right to withdraw the consent given at any time.

Rights of the data subject

In the cases provided for by the GDPR, the data subject may exercise the rights set out in Articles 15 et seq. and, in particular:

• obtain access to personal data;
• obtain the rectification of inaccurate data or the completion of incomplete data;
• obtain the erasure of data in the cases provided for by Article 17 GDPR;
• obtain the restriction of processing in the cases provided for by Article 18 GDPR;
• obtain data portability, where applicable;
• object to processing in the cases provided for by Article 21 GDPR;
• withdraw at any time the consent given for marketing purposes.

Requests concerning the exercise of rights may be sent to the Data Controller at the PEC address scpspinellisrl@pec.it.

Right to lodge a complaint

The data subject has the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) pursuant to Article 77 GDPR where they consider that the processing of their personal data infringes the applicable legislation.

Declaration of consent for marketing purposes

I declare that I have read the information on the processing of personal data.

I consent to the processing of my personal data for the sending of commercial, promotional and marketing communications relating to the products, services, activities and initiatives of SCP Rapid Prototyping.

☐ I CONSENT
☐ I DO NOT CONSENT