Disclosure on treatment of personal data in accordance with Article 13 of Regulation (EU) 2016/679 (the “Regulation”)

This privacy policy describes how RIVAL SRL MECHANICAL PROCESSING collects, stores, and uses your personal information through www.rivalgroup.com (the “Site“).

Your personal data will be processed in accordance with the principles of fairness, lawfulness and transparency.

  1. Data controller

The owner of the processing of your personal data is RIVAL SRL LAVORAZIONI MECCANICHE , with registered office at Via del Lavoro, 9 20061 Carugate (MI) (the “Owner“).

You may contact the Controller for any request regarding the processing of your personal data or to exercise your rights as a data subject by sending your request to the following e-mail address: privacy@rivalgroup.com

  1. What personal data we process
  • Navigation data

The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.

This information is not collected to be associated with identified data subjects, but by its very nature could, through processing and association with data held by third parties, allow users to be identified.

This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.

This data is used for the sole purpose of obtaining anonymous statistical information about the use of the site and to check its correct operation and is deleted after processing. The data could be used to ascertain liability in case of hypothetical computer crimes against the site.

  • Data voluntarily provided by the user

In order to allow you to subscribe to the newsletter service and receive further commercial communications, the Holder processes your e-mail address.

  • Cookie

For any information regarding the handling of cookies through the Site please refer to the Cookie Policy .

  1. Purpose and legal basis for the processing of your personal data

This section 3 contains a description of the possible processing purposes pursued by the Controller depending on the service you have requested.

3.1 Registration for newsletter and commercial communications

The Holder processes your personal data in order to subscribe you to the newsletter service and send you newsletters and marketing communications, invitations to fairs and/or conventions.

In order to send you marketing communications, the Controller requires your express consent at the time of collection of your personal data in accordance with Article 6(1)(a) of the Regulation.

Right to object to processing and duration of processing

Your e-mail address will be processed until you decide to unsubscribe from further communications by contacting the Controller at the references listed in Section 1 above or by clicking on the appropriate link in any communication you receive from the Controller.

  • Site Management

Your personal data described in points 2.1 and 2.3 above will also be processed by the Data Controller to manage the Site, including by carrying out anonymous statistical analyses of the use of the Site to check its correct operation and/or to ascertain responsibility in the event of hypothetical computer crimes to the detriment of the Site.

In any case, such data are processed anonymously and are deleted immediately after processing.

The legal basis for processing is the legitimate interest of the Data Controller in ensuring the proper use of the Site and preventing any possible cybercrime, in compliance with Article 6(1)(f) of the Regulations. Therefore, the acquisition of your consent will not be necessary.

  1. Method and place of processing

The processing of your personal data will be carried out by means of paper, computer and telematic tools, in such a way as to guarantee their security and confidentiality in accordance with the provisions of Article 32 of the Regulations.

  1. Data dissemination and reporting

Your personal data will not be disclosed, except as necessary to fulfill obligations under the law, regulations and/or to execute obligations arising from the contractual relationship entered into with the Company.

Your data may be processed by the Company’s employees, specifically appointed as authorized data subjects, to fulfill the above purposes.

Your data may also be processed by external parties entrusted with the maintenance and development of the Site and our computer system for the time strictly necessary to perform this service, as well as by providers of other outsourced services, the Company’s consultants in Italy

These individuals operate, in some cases, in total autonomy as separate Data Controllers, in other cases, as Data Processors specifically appointed by the Company.

In addition, for the purposes mentioned in point 3, your personal data are processed and known by the employees and collaborators of the Company, specifically designated as persons authorized to process them, due to the different tasks assigned to each of them and the instructions given to them.

The list of such individuals is constantly updated and is available at the Company’s headquarters upon its request.

Personal data processed by the Society are not subject to dissemination.

  1. Rights guaranteed by legislation

Under the Regulations, you have the right to obtain:

  • confirmation that any processing of your personal data is taking place and to access, among other things, the following information:
  1. the purposes of processing;
  2. the categories of personal data in question;
  3. The recipients or categories of recipients to whom the personal data have been or will be disclosed, particularly if recipients in third countries or international organizations;
  4. the intended period of retention of personal data or, if this is not possible, the criteria used to determine this period (Art. 15 Regulations).
  • The rectification of personal data concerning you, as well as the integration of incomplete personal data (Art. 16 Regulations);
  • The deletion of your personal data in the cases provided for by current legislation (Art. 17 Regulations);
  • The restriction of your personal data in the occurrence of the hypotheses provided for in the current legislation (Article 18 Regulations);
  • the right to portability, that is, to receive in a structured, commonly used, machine-readable format your personal data (Art. 20 Regulation);
  • The right to object to the processing, in the cases provided for by current legislation (art. 21 Regulations);
  • Right to revoke the consent given (Art. 7 Regulations).

To exercise the above rights, you may contact the Holder by writing to the following e-mail address: privacy@rivalgroup.com

Finally, you will have the right to file a complaint with the national supervisory authority (Garante per la protezione dei dati personali, Piazza di Montecitorio no. 121, 00186, Rome (RM)).