Privacy Policy pursuant to Article 13 of EU Regulation 2016/679 GDPR
Policy on the processing of personal data collected from the data subject
In accordance with EU Regulation 2016/679 (General Data Protection Regulation) you are hereby informed about the processing of your personal data provided. This information is not valid for other websites which might be visited through links contained in all the websites of the Data Controller’s domain name. The Data Controller shall not be considered responsible for third parties’ websites. This policy is provided in compliance with Art. 13 of EU Regulation 2016/679 (European Regulation on Personal Data Protection) and is also inspired by the provisions of Directive 2002/58/EC, as amended by Directive 2009/136/EC, on Cookies as well as by the provisions of the Italian Data Protection Authority on Cookies dated 08.05.2014. Processed personal data: “Personal data”: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person; (C26, C27, C30 EU Reg. 2016/679)
1. DATA PROCESSING PARTIES
DATA CONTROLLER, pursuant to Articles 4 and 24 of EU Reg. 2016/ 679 is LLC Corvette with registered office in 050042, Kazakhstan, Almaty, Taygul microdistrict-1 street, building 33, BIN 230340017636; acting in the person of its legal representative pro tempore. DATA PROTECTION OFFICER, pursuant to Articles 4 and 28 of EU Reg. 2016/679 is, among others, the person in charge of the processing and updating of the Data Controller’s website. A complete list of the designated Data Protection Officers is available at LLC Corvette’s registered office.
2. PURPOSES AND LAWFULNESS OF DATA PROCESSING
Personal data shall be processed in compliance with the lawfulness conditions pursuant to Art. 6 of EU Reg. 2016/679 for the following purposes:
A Data processing management with regard to (Art. 6 lett. b)):
- browsing the current Internet website;
- requests for contact and quotations which imply sending the information requested to contact details and/or filling in the website contact form; - compliance with contract and legal obligations as well as administrative and accounting activities. For the purposes of the provisions concerning personal data protection, data processing for administrative and accounting purposes are those related to organizational, administrative, financial and accounting activities regardless of the nature of data processed. In particular, internal organizational activities, those necessary to the fulfilment of pre-contractual obligations and information activities.
B) Data processing management with regard to (Art.6 lett. a)):
- upon prior consent and until data subject’s objection, to the subscription to LLC Corvette’s newsletter to receive information materials, invitations to events or news on products and on LLC Corvette’s activities.
The Data Controller sends newsletters and promotional materials through systems that generate reports, in order to compare and improve the outcomes of such communications.
Thanks to such reports, the Data Controller shall be able to know, for instance: the number or readers, the number of opened messages, the number of single clicks and of clicks; the devices and operating systems used to read the communication; details on the activities of individual users; details of sent, delivered and undelivered and of forwarded emails. All these data can be used to compare and improve the outcome of such communications.
Cookies
Information regarding the cookies used on the current websites can be obtained by visiting the cookies policy.
3. DATA RECIPIENTS OR RECIPIENT CATEGORIES
Personal data provided may be communicated to recipients, who will process the data as processors, as natural persons acting under the authority of the Data Controller and Data Protection Officer, or as independent Data Controllers for contract related purposes or the like. Namely, data may be communicated to the following recipient categories:- Companies controlled by LLC Corvette; – Subjects providing management services for the computer system and communication networks of LLC Corvette (including email); – Firms or Companies within the context of assistance and consultancy relationships; – Competent authorities to fulfil legal obligations and/or provisions of public bodies, upon request; – In case the processing is done for administrative or accounting purposes, data can be transferred to business information companies for the assessment of the solvency and payment patterns and/or to debt collection agencies. Subjects belonging to the abovementioned categories shall be appointed Data Protection Officers or shall operate as independent Data Controllers. The list of the designated Data Protection Officers is constantly updated and is available upon request at LLC Corvette’s’s head office, 050042, Kazakhstan, Almaty, Taygul microdistrict-1 street, building 33 or by emailing [email protected]
4. DATA TRANSFER TO THIRD COUNTRIES AND/OR INTERNATIONAL ORGANISATIONS
A transfer of personal data to European Union and non-European Union Countries can occur in order to fulfil any of the connected purposes mentioned above. Data shall be transferred in compliance with Article 44 et seq. of EU Regulation 2016/679. Information on the data transfer can be obtained by writing an email message to [email protected]
5. DATA RETENTION PERIOD OR RELEVANT CRITERIA TO DETERMINE SUCH PERIOD Data shall be processed automatically and/or manually, in a manner and with tools that ensure maximum security and confidentiality, by specifically appointed subjects. In compliance with the provisions of Art. 5 par. 1 lett. e) of EU Reg. 2016/679, the personal data collected shall be kept in a form which permits identification of data subjects for a period not exceeding the purposes for which the personal data were collected and subsequently processed. The retention period for personal data is determined on the basis of criteria obtainable from the Data Controller.
6. NATURE OF DATA PROVISION AND FAILURE TO CONSENT Except for browsing data, the data subject is free to provide personal data in dedicated areas on website registration forms. Provision of personal data for the purposes of paragraph A) (requests for contact and quotations) of this privacy policy shall be necessary to the fulfilment of the specific functions and to be provided with the services by the Data Controller. Failure to provide personal data shall entail the impossibility to be provided with the services requested
Provision of personal data and relevant consent to their processing for the purposes of paragraph B) (newsletters) of this privacy policy is optional. Failure to provide such data shall prevent the sending of information materials, invitations to events or news on products and on LLC Corvette’s activities, but shall not impede the provision of the services described in paragraph A).
7. DATA SUBJECTS’ RIGHTS
You have the right to exercise your rights as provided by Articles 15, 16, 17, 18, 19, 20, 21 and 22 of EU Regulation 2016/679), by contacting the Data Controller by email at [email protected]. At any time, you are entitled to obtain from the Data Controller access to your personal data and rectification or erasure of such data as well as restriction of their processing, Similarly, you can object to the processing (including automated processing e.g. profiling) and portability of your data.
Without prejudice to any other administrative and jurisdictional appeal, if you think that the processing of your personal data infringes upon what is stated in EU Regulation 2016/679, pursuant to Art. 15 letter f) of the abovementioned EU Regulation 2016/679, you have the right to lodge a complaint with the data protection authority and to withdraw your consent at any moment as set forth in Art. 6 para. , lett. a) and Art. 9, para 2, lett. a). In case of a data portability request, the Data Controller will provide you with your personal data in a structured, easily readable and commonly-used format by an automatic device, subject to compliance with the provisions 3 and 4, of Art. 20 of the EU Regulation 2016/679.
There is no automated decision-making.
LINKS TO OTHER WEBSITES
This website may contain links and access to other websites such as the social network Linkedin. By clicking on the relevant links, our contents can be shared, LLC Corvette does not control cookies and other monitoring technologies of those websites to which the present Privacy Policy does not apply.
AMENDMENTS TO THE CURRENT PRIVACY POLICY
The Data Controller checks his/her privacy and security policy periodically, and, if necessary, he/she reserves the right to amend it in compliance with new regulation, organisational or technological changes. Shall the policy be amended, a new version will be published on the current website page.