Information on the processing of personal data according to Article 13 of EU Regulation 2016/679

EBI MOTION CONTROLS SRL in the person of its pro tempore legal representative with registered office in Granarolo dell’Emilia (BO), Via Andrea Costa 11/2, 40057 in the Cadriano District (Tax Code and VAT Number 09320640965), according to Article 26 of EU Regulation 2016/679 (hereinafter the GDPR) in a joint data controller relationship with the following companies, which jointly determine the purposes and means:

FLODRAULIC EUROPE S.R.L. a Socio Unico with registered offices in Granarolo dell’Emilia (BO), Via Don Minzoni 28-30-32, 40057 Frazione Cadriano;

CEIMU S.R.L. a Socio Unico with registered offices  in Cerea (VR), Via del Commercio, 9, 37053;

EBI MOTION CONTROLS S.R.L. a Socio Unico with registered offices in Granarolo dell’Emilia (BO), via Andrea Costa 11/2, 40057, Frazione Cadriano;

OLEOBI S.R.L. a Socio Unico with registered offices in Granarolo dell’Emilia (BO), via Don Minzoni 28, 30, 32, 40057 Frazione Cadriano;

PK S.R.L. a Socio Unico registered offices in Castel Maggiore (BO), Via Lirone 60/C, 40013;

SACE S.R.L. a Socio Unico with registered offices in Sasso Marconi (BO), via Cartiera 154, 40037 Frazione Borgonuovo.

The Joint Data Controllers have entered into a a joint data controller  agreement in accordance with the provisions of Article 26 of the GDPR. The essential content of the agreement is made available to data subjects by sending an express request to the Joint Data Controllers contact point, at the following e-mail address: comitatoprivacy@flodrauliceurope.com

EBI MOTION CONTROLS SRL, as Data Controller, will process the personal data of its customers, suppliers and users of the website for which it independently determines the purposes and means of processing.

We inform you that the personal data you provide will be processed in accordance with current legislation, in compliance with the principles of correctness, lawfulness and transparency.

1. Purpose and Legal Basis of Processing

Your personal data will be processed for the following purposes:

1.1 To conclude contracts with the Data Controller and/or Joint Controllers and manage related relationships during pre-contractual, contractual, tax, administrative, and accounting phases (the legal basis for processing is the performance of a contract or pre-contractual measures and compliance with legal obligations pursuant to Article 6(1)(b)(c) GDPR).

1.2 To send commercial or promotional communications concerning products or services similar to those already provided (soft spam) to the email address provided by the data subject within the framework of a previous contractual relationship with the Data Controller and/or Joint Controllers, subject to the right to object pursuant to Article 21 GDPR in the first or subsequent communications (the legal basis for processing is legitimate interest pursuant to Article 6(1)(f) GDPR).

1.3 To send commercial communications, advertising material, direct sales offers, or conduct market research (i.e., direct marketing) related to products or services of the Data Controller and/or Joint Controllers using automated systems (e.g., email, SMS, fax, MMS, etc.) and traditional methods (postal mail and phone calls) (the legal basis for processing is the data subject’s consent pursuant to Article 6(1)(a) GDPR).

1.4 To respond to information requests submitted through the contact form available on the Data Controller’s website https://oleobi.it/ (the legal basis for processing is the performance of a contract or pre-contractual measures pursuant to Article 6(1)(b) GDPR).

1.5 To register on the Data Controller’s website https://shop.oleobi.it/ (the legal basis for processing is the data subject’s consent pursuant to Article 6(1)(a) GDPR).

1.6 To subscribe to the group newsletter and stay updated on initiatives, products, and services offered by the Joint Controllers (the legal basis for processing is consent pursuant to Article 6(1)(a) GDPR).

1.7 To establish, defend, or exercise legal claims of the Data Controller and/or Joint Controllers (the legal basis for processing is legitimate interest pursuant to Article 6(1)(f) GDPR).

1.8 For accounting, tax, and administrative purposes, customer data may be shared within the group (the legal basis for processing is legitimate interest pursuant to Article 6(1)(f) GDPR).

1.9 To facilitate and streamline navigation on the Data Controller’s websites through technical and analytical cookies (the legal basis for processing in these cases is the performance of services requested directly by the data subject pursuant to Article 6(1)(b) GDPR) and through marketing cookies (the legal basis for processing is user consent pursuant to Article 6(1)(a) GDPR).

2. Data Processing Methods and Retention Period

Your personal data will be processed using technical and organizational security measures designed to ensure an adequate level of security appropriate to the risk, considering the state of the art and implementation costs, in compliance with privacy regulations and the decisions of the Data Protection Authority, within the limits established by Article 5 of the GDPR.

Data retention is limited to the time necessary to achieve the purposes for which the data is collected, subject to mandatory retention periods established by law or specified by the Data Protection Authority.

Specifically:

For the purposes outlined in Articles 1.1 and 1.8: Personal data will be retained for 10 years from the termination of the contract, unless interrupted by legal proceedings (Article 2946 of the Italian Civil Code).

For direct marketing purposes under Articles 1.2 and 1.3: Personal data will be retained for no more than 24 months from its collection, subject to the right to object in the case of soft spam (Article 1.2) and the withdrawal of consent by the data subject (Article 1.3).

For the purpose outlined in Article 1.4: Data will be retained for the time necessary to respond to your request.

For the purposes outlined in Articles 1.5 and 1.6: Data will be retained until the data subject exercises their right to withdraw consent.

For the purpose outlined in Article 1.7: Data will be retained for the time necessary to exercise the Data Controller and/or Joint Controllers’ legal defense rights.

For the purpose outlined in Article 1.9: Data will be retained according to the retention periods specified in the Cookie Policy published on the Data Controller’s website.

3. Data Recipients

For the purposes mentioned above, your personal data may be processed by authorized and trained personnel of the Data Controller and/or Joint Controllers.

Data may be disclosed, in compliance with legal obligations or for the proper execution of the contractual relationship, to external parties who will process your data either as Independent Data Controllers or as Data Processors, appointed in accordance with applicable regulations, depending on the role they play in relation to the processing.

Examples of such entities include: social security, welfare, and insurance agencies; trade associations; tax and labor authorities; other companies within the group; professional firms providing legal, commercial, or tax assistance; auditing firms; banks; and credit institutions.

4. Nature of Data Provision

The provision of your data is mandatory to fulfill contractual and legal obligations. Therefore, failure to provide the required data, in whole or in part, will result in the inability to execute the contractual relationship with you in all its phases.

The provision of data for other purposes is optional. Consequently, refusal to provide such data will only prevent access to services offered through the Data Controller’s websites, such as subscribing to the group newsletter, submitting inquiries via the contact form, or receiving commercial and/or promotional communications for direct marketing purposes as described above.

Please note that concerning direct marketing activities, you may exercise your right to object to data processing for such purposes (in the case of soft spam) at any time, and your data will no longer be processed for that purpose. Alternatively, you may withdraw your consent as explained in paragraph 7 below.

Additionally, when data processing is based on your consent, the provision of your data is optional, and you may withdraw your consent at any time.

5. 5. Data Transfer Abroad

Your data will not be transferred to countries outside the European Union or to international organizations.

Should it become necessary for technical and/or operational reasons or for contract performance to use entities located outside the European Union, we inform you that the transfer of data outside the EU will be carried out in compliance with applicable legal provisions. This means the transfer will occur based on:

The existence of an adequacy decision by the European Commission;

In the absence of such a decision, appropriate safeguards under Articles 46 or 47 of the GDPR (e.g., the adoption of the European Commission’s Standard Contractual Clauses);

Or, if applicable, specific derogations under Article 49 of the GDPR.

For information regarding the transfer of personal data outside the EU collected through third-party cookies, please refer to the privacy policies of each third party, available on their respective websites (links are provided in the Cookie Policy published on the Data Controller’s website).

6. Data Subject Rights

As a data subject, you may exercise your rights at any time under Articles 15 to 22 of the GDPR.

In particular, you have the right to:

• Access Your Personal Data: Obtain confirmation of whether your data is being processed, learn about the purposes of the processing, categories of data involved, recipients to whom the data may be disclosed, applicable retention periods, the existence of automated decision-making processes (including profiling), and, where applicable, meaningful information about the logic involved and potential consequences for you, unless already specified in this Privacy Policy.
• Rectification: Request the correction of inaccurate personal data concerning you without delay.
• Erasure: Request the deletion of your personal data when permitted by law.
• Restriction or Objection to Processing: Request restriction of data processing or object to processing where applicable under relevant legal provisions.
• Data Portability: Where legally applicable, request the transfer of the personal data you provided to the Data Controller in a structured, commonly used, and machine-readable format, including the right to have the data transferred directly to another Data Controller, if technically feasible.
• Lodge a Complaint: Submit a complaint to the Data Protection Authority if you believe your data is being processed unlawfully (Article 77 GDPR).

Lastly, please note that for processing activities based on consent, you have the right to withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal.

7. Exercising Your Rights

Pursuant to Article 26(3) of the GDPR, you may exercise your rights with and against each Joint Controller. In any case, you may contact EBI MOTION CONTROLS SRL by sending a written communication to the company’s registered office or by emailing comitatoprivacy@flodrauliceurope.com.

Update December 2024