The data controller is Herno S.p.A., with registered office at Via Opifici, 100 - 28040 Lesa (NO), Italy, in the person of its legal representative. Data will be processed within the meaning and for the purposes of European Regulation 2016/679 (General Data Protection Regulation, hereinafter also “GDPR”). With reference to such data, please note that:
With regard to the data itself, you may exercise the rights envisaged by articles 15 to 22 of EU Regulation 2016/679 (a copy of which is annexed hereto). In more detail, data subjects have the following rights in relation to the processing to which their personal data is subject:
These rights may be exercised by sending written notice to the Data Controller, Herno S.p.A., with registered office at Via Opifici 100, 28040 Lesa (NO), Italy - E-mail: firstname.lastname@example.org
RIGHTS OF THE DATA SUBJECT (ART. 15 TO 22 OF EU REGULATION EU 2016/679)
Article 15 - Data subject right of access
1. Data subjects have the right to obtain confirmation as to whether their personal data is being processed and if so, to access their personal data and the following data:
2. Where personal data is transferred to a third country or international organisation, the data subject has the right to be informed of the existence of appropriate safeguards within the meaning of article 46 in the relation to the transfer.
3. The data controller provides a copy of the personal data processed. If the data subject requests further copies, the data controller can charge a reasonable fee towards the administrative costs incurred in fulfilling the requests. If the data subject makes a request electronically, the information is provided in a commonly used electronic format, unless the data subject requests otherwise./p>
4. The right to obtain a copy pursuant to paragraph 3 must not adversely affect the rights and freedoms of others.
Article 16 - Right to rectification
Data subjects have the right to have inaccurate personal data rectified without undue delay. Taking into account the purposes of the processing, data subjects have the right to have incomplete personal data completed, which may also involve the provision of a supplementary statement.
Article 17 - Right to erasure ("right to be forgotten")
1. Data subjects have the right to have their personal data erased by the data controller without undue delay and the data controller is obliged to erase the personal data without undue delay, in the event of one of the following:
2. If the data controller has made the personal data public and is required, within the meaning of paragraph 1, to erase the data, while taking into account the available technology and the implementation costs, the controller must take reasonable steps, including technical measures, to inform other data controllers who are processing the personal data, of the data subject's request for the erasure of all links to, copies or replication of their data.
3. Paragraphs 1 and 2 do not apply if processing is necessary for the purposes of:
Article 18 - Right to restrict processing
1. Data subjects have the right to request that data controllers restrict the processing of their personal data in the following circumstances:
2. If processing has been restricted under paragraph 1, such personal data, with the exception of storage, will only be processed with the data subject's consent or for the establishment, exercise or defence of a legal claim or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
3. A data subject who has obtained restriction of processing under paragraph 1, is informed by the data controller before said restriction is lifted.
Article 19 - Notification obligation regarding rectification or erasure of personal data or restriction of processing
The data controller informs each recipient to whom the personal data has been transmitted of any rectification, erasure or restriction of processing carried out under article 16, article 17, paragraph 1, and article 18, unless this proves impossible or involves disproportionate effort. The data controller shall inform the data subject about such recipients on the data subject's request.
Article 20 - Right to data portability
1. Data subjects have the right to receive the personal data provided to a data controller, in a structured, commonly used and machine-readable format and have the right to transmit such data to another data controller without hindrance from the data controller that provided the personal data, where:
2. In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to obtain the direct transmission of personal data from one controller to another, if technically feasible.
3. The exercise of the right pursuant to paragraph 1 of this article shall be without prejudice to article 17. This right does not apply to the processing necessary for performing a task in the public interest or for the exercise of the official authorities vested in the data controller.
4. The right pursuant to paragraph 1 must not adversely affect the rights and freedoms of others.
Article 21 - Right to object
1. Data subjects shall have the right to object, at any time, for reasons relating to their particular situation, to the processing of their personal data within the meaning of article 6, paragraphs 1e) and 1f), including profiling, based on these provisions. Data controllers shall stop further processing the personal data unless they demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or the processing is for the establishment, exercise or defence of a legal claim.
2. Where personal data is processed for direct marketing purposes, the data subject has the right to object to the processing of their personal data, including profiling data associated with such direct marketing, for such purposes, at any time.
3. If the data subject objects to processing for direct marketing purposes, the personal data is not processed for such purposes.
4. The right pursuant to articles 1 and 2 is brought explicitly to the data subject's attention and is presented clearly and separately from any other information no later than at the time of first communication with the data subject.
5. In the context of the use of information society services and without prejudice to Directive 2002/58/EC, the data subject may exercise their right to object by automated means that utilise technical specifications.
6. Where personal data is processed for scientific or historical research or statistical purposes under article 89, paragraph 1, the data subject has the right, for reasons in connection with their particular situation, to object to the processing of their personal data, unless the processing is necessary for the performance of a task for reasons of public interest.
Article 22 - Automated individual decision-making, including profiling
1. Data subjects have the right not to be subject to a decision based solely on automated processing, including profiling, if the decision produces legal effects concerning them or, similarly, significantly affects them.
2. Paragraph 1 does not apply if the decision:
3. In the cases pursuant to paragraphs 2a) and 2c), the data controller shall take appropriate measures to safeguard the rights of data subjects, at least the right to obtain human intervention on the part of the controller, to express their point of view and to contest the decision.
4. Decisions pursuant to paragraph 2 are not based on the special categories of personal data pursuant to article 9, paragraph 1, unless article 9, paragraph 2a) or 2g) applies, and suitable measures to safeguard the data subject's rights, freedoms and legitimate interests are in place.
Cookies are small files sent to the device of the user accessing the site by the Site being accessed. Cookies are stored on the device and allow the Site to recognise the user and to store certain user information in order to allow or improve the service provided. While browsing our site, cookies may be downloaded onto your device by our site or other websites on which several elements present on the site may reside. Herno S.p.A. cannot control the cookies set by third party sites. Please refer to the privacy statement of each third party for more information on the collection, storage and use of personal data by these third party sites.
Type: Proprietary cookies
Description: Session cookies are stored on the user's computer for technical and functional reasons in order to transmit the necessary identifying session data to allow secure and efficient browsing of the site, such as browsing language selection. Cookies are deleted at the end of the session when the browser is closed.
Google Analytics Statistical Services
Type: Third-party cookies
Description: Google Analytics is a web analysis service provided by Google Inc., which provides aggregate statistical information useful for evaluating how visitors use the site and their activities. More information on the collection, storage and use of personal data by Google is available on the website http://www.google.it/intl/it/analytics/privacyoverview.html
Google Maps Services
Type: Third-party cookies
Description: These cookies are used by Google Inc to store user preferences and information whenever the user visits web pages containing Google Maps. More information on the collection, storage and use of personal data by Google is available on the website http://www.google.com/policies/privacy/
Social Network Cookies
Type: Third-party cookies
These cookies are necessary in order to allow your social network account to interact with our site. For example, they allow you to like and share content with your social network friends. Social network cookies are not required for browsing. For more information on Social Network cookie usage policies, please refer to the relevant privacy statements and cookies policies:
How to control and manage Cookies
Users can set their cookie preferences in their browser directly in order to prevent third parties from downloading cookies, for example. Users can also delete previously downloaded cookies at browser level, including any cookie that stores consent to the downloading of cookies by this site. Please note that site operation may be compromised if all cookies are disabled. Users can find information on how to manage cookies in the most popular browsers on the following websites: Google Chrome, Mozilla Firefox, Apple Safari, Microsoft Windows Explorer.
Users can visit the site, in English, http://www.aboutcookies.org for information on how to manage/eliminate cookies.
This privacy statement was updated on 5th December 2018 and may be periodically updated in line with regulatory changes. Any updates will always be published on this page.