PRIVACY NOTICE RELATED TO
OUR CORPORATE INFORMATION SYSTEMS
Last updated: December 2023
At DAB Group, the protection and confidentiality of your data is a priority. We are committed to complying with the relevant applicable data protection laws in the countries in which we operate.
With this notice, we wish to inform you as a Data Subject ("Data Subject") how we will process your data following your registration within our system "CRM" (Customer relationship management) or through "SSO" (Single Sign On). The processing is carried out in compliance with the criteria set out in the applicable regulations and will be based on the principles of lawfulness, fairness, and transparency and the protection of your confidentiality and your rights.
This document is subject to periodic updating. For this reason, we indicate the date of the last update at the beginning of the notice. We will notify you through the appropriate channels, of any substantial changes to this policy, always to ensure the effective knowledge of the methods and purposes of the processing, with a view to full transparency and adequate protection of your rights. In any case, we invite you to regularly visit this notice to stay updated.
- THE DATA CONTROLLER:
DAB PUMPS SPA ("DAB" or "Data Controller") in its capacity as the operating parent company of the companies of the "DAB Group", on which it plays a role of direction, coordination, and synergic management, providing services directly (with its structure and organization) and indirectly (through selected suppliers), for this reason, DAB is to be considered the Data Controller for itself and on behalf of the other companies of DAB Group indicated at https://www.dabpumps.com/.
- CONTACT:
For any request relating to the processing of personal data or exercise stated below the Data Subject may contact our Privacy Team:
DAB PUMPS SPA - P.IVA 03675230282
Registered office in Via Marco Polo 14, 35035 Mestrino (PD) - Italy
Telephone: + 39 049 5125000
e-mail: data.protection@dabpumps.com
If it is not possible to correctly identify the request, the privacy team may request additional information for the sole purpose of correctly identifying the identity of the Data Subject.
- PURPOSES, LEGAL BASIS, AND RETENTION TIME
The personal data processed by the Data Controller (including Name, Surname, E-mail, Telephone No., Address, VAT No, Fiscal code, job title, employer/organization, financial date) are collected for the following purposes and according to the specific legal basis:
PURPOSES AND LEGAL BASIS |
RETENTION TIME |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
For the purposes referred to in points a), b) f), and g) the provision of data is compulsory, the data are collected without your consent, otherwise the Data Controller will not be able to proceed with the execution of the contract or the performance of pre-contractual negotiations.
For the purposes referred to in points c) and d), the provision of data is optional and in the event of failure to do so, the Data Controller will not be able to proceed for this specific purpose without your prior and explicit consent. For the purposes referred to in point e) conferment is optional, in the absence of your explicit consent the Data Controller may proceed to send you communications until you object to such processing.
Nevertheless, you can always ask the Data Controller to clarify the concrete legal basis of each processing and/or object to processing based on Legitimate Interest by contacting our Privacy Team at: data.protection@dabpumps.com.
- METHODS:
Personal data are processed, also with the aid of automated tools, by the Data Controller and by the Managers duly appointed for the correct fulfillment of the purposes indicated in point 3) using electronic tools and paper archives, as well as with the use of security measures aimed at guaranteeing the confidentiality of personal data and avoiding undue access by unauthorized parties.
- COMMUNICATION:
The Data are processed at the Controller's operating offices and any other place where the parties involved in the processing are located. Accounting/fiscal data may be communicated to duly appointed external parties that perform activities on behalf of the Data Controller, such as but not limited to: accountants, credit institutions, and related external professionals. The processed data may be transferred to duly appointed external partners and suppliers who guarantee the same level of technical/organizational/informational/legal protection guaranteed by the Data Controller. Data dissemination is not envisaged (e.g. social networks, websites, etc.). Based on what is defined in this information notice, the Data Controller may use automated processes, including profiling, to achieve the purposes set out in point 3 of this document. The personal information related to the processing in question may be transferred to the companies of the DAB Group, for the achievement of the purposes outlined in this information notice and providing sufficient guarantees to implement adequate technical and organizational measures so that the processing meets the security requirements outlined in this agreement and the relevant laws.
- RIGHTS OF THE INTERESTED PARTIES:
As a Data Subject, you may have the right, within the limits and under the conditions set out in the regulation, to request from the Data Controller access to your personal data or the rectification or erasure of the same or the restriction of the processing concerning you, or the right to object to their processing, as well as the right to request the portability of the same.
To exercise the above rights you can contact us via email or registered mail addressed to the Privacy Team with the subject: "Request by the Data Subject" specifying in the request the right that the Data Subject wishes to exercise (cancellation, rectification, portability, oblivion), together with a valid email address/pec to which the response should be sent.
The Data Controller or anyone appointed by the same, will process and provide you, without undue delay and, in any case, at the latest within one (1) month from the receipt of the request. This deadline may be extended to a further 30 days, if necessary, taking into account the complexity and number of requests, but in these cases, the Data Controller will provide timely notice to the Data Subject. In addition, you may lodge a complaint with the Supervisory Authority for the protection of personal data in your country.