Privacy Policy

How we protect your data

PRIVACY STATEMENT PURSUANT TO ARTICLE 13, REGULATION (EU) PRIVACY 2016/679 (‘GDPR’)

HOLDER OF THE TREATMENT

CD Automation s.r.l.
Address: Via P. Picasso 34/36, 20025, Legnano – MI
Phone: +39 0331 577479
Fax: +39 0331 579479
Mail: info@cdautomation.com
PEC: cdautomationsrl@legalmail.it
Iva – CF – ITVAT: IT08925720156
Authorised Share Capital and Paid-in Share Capital: 26.000,00 euro
R.E.A. 1255303
www.cdautomation.com
Sector and activity:
Industrial automation: research and development, supply and service of technology that uses control systems (such as logic circuits or computers) to manage machines and production processes.

MISSION

Our Privacy Policy is intended to describe in a clear and transparent manner the way in which our Website is managed with regard to the processing of the personal data of the users who consult it and who make use of the services it offers.
The mission of CDAUTOMATION.COM, owned by CD AUTOMATION S.R.L., is to provide our users with detailed and specific information for all their financing/financing needs, including CDAUTOMATION.COM’s products and services, including “Cessione del Quinto” and “Prestito Delega”.
The user has the option of:
• Being constantly updated with regard to industrial automation services and products, among the most sophisticated in the world;
• Requesting free information and/or quotations for certain products, through the use of a dedicated contact form;
• Being contacted by experts in the sector, our sales staff or area distributors, in order to best address the requests received and provide all the necessary information.
You can also contact the organisation via the specific form or via the email indicated in the Contact section.

PRINCIPLES

One of our fundamental objectives is the protection of personal data.
Data shall be processed lawfully, fairly and transparently, adequate, relevant and limited to what is necessary, accurate and, where necessary, kept up to date, collected for specified, explicit and legitimate purposes in accordance with Articles 5 and 6 of the Data Protection Regulation (EU) 2016/679 and following the provision of consent where required.
Data are processed in such a way as to ensure adequate security of personal data, including protection, by appropriate technical and organisational measures, against unauthorised or unlawful processing and accidental loss, destruction or damage (integrity and confidentiality).
We will inform you in the event of any substantial changes to this Privacy Policy and the related data processing, as well as of any different functionalities and technical features, leaving you free to decide whether or not to continue using our services.

SOURCES FROM WHICH PERSONAL DATA ORIGINATE

Collected from Interested Party:

Area ‘Contact’ / ‘Request Information / Quotation’ via Data Collection Form / email address or telephone number’.

	STAKEHOLDER CATEGORIES
	Users (customers, potential customers, former customers): legal persons and other operators in the sector.

	PERSONAL DATA PROCESSED
	Legal persons, including the data of employees and assimilated persons, company representatives, partners, etc. of client or potential client companies.

	PERSONAL DATA CATEGORIES
	Common: Name and Surname, Company, e-mail, Town, Address, Phone, Website.

	PURPOSE OF PROCESSING		LEGAL BASIS FOR PROCESSING		DATA RETENTION PERIOD
1) Enforcement of pre-contractual measures.		Purposes related to the establishment and execution of pre-contractual measures of a Contract to which one is a party (REQUEST FOR INFORMATION AND QUOTATION / OFFER): information, counselling, feasibility, quotation, assistance, monitoring of quotation status and satisfaction tracking, etc.; including the necessary processing of other persons used for the promotion, placement and conclusion of the contract, subject to prior notification, who assist in the correct and complete handling of requests (own Sales Network). Legal Basis of Treatment: Execution of pre-contractual measures; Legitimate Interest; Consent not necessary.		Duration and Storage for a period strictly necessary for the correct and complete handling of the request.
2) Direct marketing.		Sending informative and informative communications, notification of own events, promotional and commercial communications relating to services/products offered – by automated (such as fax, sms, mms, e-mail, WhatsApp and other comparable instant messaging solutions, etc.) and traditional (such as telephone calls with operator and traditional mail) contact methods – as well as customer satisfaction surveys, notification of own events, and market studies. Potential Customer Legal Basis of Treatment: Consent (optional and revocable at any time); In the absence of initial refusal and opposition at any time. User Customer: Legal Basis of Treatment: Legitimate interest of the Data Controller: for products or services similar to the subject matter of the contract by email; opposition from the first communication or on the occasion of subsequent communications (Soft Spam, art. 130, paragraph 4, Privacy Code as amended); Consent optional and revocable at any time for products or services other than the subject matter of the contract; no initial refusal and objection at any time.		Duration and Retention up to 24 months after Consent is given or the contract is terminated (as provided for processing for marketing purposes in connection with purchase details). Near the expiry of these various deadlines, new request for consent, otherwise blocking of processing, anonymisation, and only statistics in aggregate mode. Contractual duration or until opposition. Duration as per Potential Customer (see above).
After the aforementioned retention periods have expired, the Data will be destroyed, erased or anonymised, consistent with technical erasure and backup procedures, unless national or Union law provides for the retention of the Data.

COOKIE

Cookies are text files that are automatically generated in your computer as a result of visiting certain pages.
During navigation and use, certain information is collected, whether related to a registered user (authenticated user) or to a visitor who does not log in via a profile (non-authenticated user). Such data, although not collected for the purpose of being associated with the identity of the Subject, could indirectly, through processing and association with data held by third parties, enable the identification of the Subject. Such third parties, by cross-referencing such information and thus enriching it, could analyse uses, habits and consumption manifested on the Internet. These activities could also involve an actual profiling action, also aimed at reconstructing a commercial profile.
We use cookies to help users personalise their experience, speed up navigation, increase security, and analyse the use and efficiency of our services.
When you log in for the first time, you will have the opportunity to confirm the installation of the available cookies, or alternatively, to choose which cookies you wish to authorise by using the technical tool provided to you and the relevant Consent Banner. In addition, if you wish to remove or not use cookies on our site, you can also change your browser settings, as described in the full Cookie Policy.
For more information on the type of cookies used and how to disable them please read theFull Cookie Policy.

MONITORING OF FORWARDED COMMUNICATIONS

We make use of technological solutions aimed at monitoring the progress of the forwarding campaign of commercial or marketing communications.
These tools allow us to simultaneously deliver the same promotional content to multiple email addresses or telephone numbers.
These solutions also allow us to know the performance of advertisment campaigns by monitoring visitor interactions and storing statistical information on user navigation, on an anonymous and aggregated database, e.g., the number of users who clicked on a link and opened the message, the content within the message that attracted the most interest, the geographic location from which the various users opened the email, etc.

RECIPIENTS OF DATA

The data may be communicated to and processed by external parties acting as data controllers such as, for example:

Italy:

Supervisory and control authorities and bodies;
Police and Judicial Authorities;
Transferees of a company, a business unit, identifiable legal relationships en bloc or individual legal relationships (e.g. assignment of receivables, contracts);
Persons carrying out professional consultancy services also in associated form;
ICT service providers (Hosting/Data Centres).

Data may also be processed on behalf of the Company by external parties designated as data processors, to whom appropriate operational instructions are given. These subjects are essentially included in the following categories:

Italy:

Persons carrying out control, audit and certification activities also on behalf of clients;
Persons performing ongoing compliance support services;
Entities offering IT, ICT, Cloud, Web and Digital Marketing services;
Entities offering paper, digital and electronic storage services;
Parties offering traditional and automated mailing services;
Entities offering support in carrying out market studies;

Various other service companies or consultants.

USA:

Agents or other commercial entities authorised to distribute our products on the basis of their territorial competence corresponding to the same area as the customer or potential customer.

	OBLIGATION TO PROVIDE DATA
	The provision of data is compulsory as it is a necessary requirement for the conclusion of the contract, therefore the partial, partial or incorrect provision of such data will make it impossible to handle what is requested and the conclusion of the contract itself.

	SUBJECTS AUTHORISED TO PROCESS
	The data may be processed by the employees and collaborators of the company functions, including the sales network, assigned to the pursuit of the above-mentioned purposes, who have been expressly authorised to process the data, who have received adequate operating instructions and who have been suitably sensitised and trained.

TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION

Data may be transferred abroad to countries outside Europe, and in particular to the USA.Adequacy guarantees:

whose level of data protection has been deemed adequate by a Decision of the European Commission/US-Privacy Shield (Art. 25, p.6, Directive 95/46/EC and Art. 45, p.3, GDPR).

A copy of the data may be obtained in the manner set out in the following section ‘RIGHTS OF THE INTERESTED PARTY – COMPLAINT TO THE CONTROL AUTHORITY’.

	RIGHTS OF THE DATA SUBJECT – COMPLAINT TO THE SUPERVISORY AUTHORITY
	By cintacting the e-mail address privacy@cdautomation.com, the Data Subjects may request from the Controller access to the data concerning them, their deletion (unless national or Union law provides for the retention of such Data), the rectification of inaccurate data, the integration of incomplete data, the restriction of processing in the cases provided for by Article 18 of the GDPR, as well as the objection to processing in cases of legitimate interest of the Controller.
	The data controller shall provide the data subject with information regarding the request to exercise the data subject’s rights (pursuant to Articles 15 to 22, GDPR) without undue delay and, in any event, no later than one month after receipt of the request, as provided for in Article 12 of the GDPR.
	Data subjects also have the right, where the processing is based on consent or on contract and is carried out by automated means, to receive the data in a structured, commonly used and machine-readable format and, if technically feasible, to transmit them (Right to Portability) to another data controller without hindrance, and if they so choose, to request their permanent deletion (Right to be forgotten).
	Data subjects have the right to withdraw their consent at any time for marketing purposes by objecting to such processing. This is without prejudice to the possibility for the data subject who prefers to be contacted for the aforesaid purpose exclusively by automated means, to express his/her objection only to receiving communications by traditional means or vice versa, including the possibility, in the case of automated means, to object to one or more contact methods (e.g. SMS) in preference to other contact methods among those provided for (e.g. only E-Mail).
	Qhen the processing is based on consent for one or more purposes (Art. 6(1)(A) GDPR) and for the processing of special data (Art. 9(2)(A) GDPR), the exercise of the right to withdraw consent at any time does not affect the lawfulness of the processing based on consent before the withdrawal.
	Data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State where they habitually reside or work or in the State where the alleged infringement occurred.