Annex E – Privacy policy template for Portal registration

PRIVACY POLICY ON THE PROCESSING OF PERSONAL DATA (EU Regulation 2016/679)

KROMO Ali Group S.r.l. with Single Shareholder (hereinafter also referred to as “the Controller”) with registered office in Cernusco sul Naviglio (MI), via Pietro Gobetti 2/a, would like to inform Users on the processing of personal data related to registration on the KROMO Portal and/or Application (hereinafter also referred to as “Portal” or “Application”) and to the performance of services provided and available through the Portal or Application.

The Data Controller may use the Users’ personal data to enable and manage their possible registration on the Portal and/or Application, and to manage execution of the connectivity service provided by the Controller through that Portal and/or Application.  In particular, the user’s personal data will be used to enable the user to remotely control and/or monitor the functionality and execution of machines and to provide, if required, a remote technical assistance service, including sending communications via service e-mail. Moreover, referred to users registered as technicians authorised by the Controller, the relevant data may be used to enable execution and performance, by users with a technical profile, of the remote technical assistance service on machines registered on the Portal.

The User is free to provide personal data in the account registration forms and use the services. In some cases, failure to provide data may make it impossible for the Controller to provide the services offered. The legal basis legitimising processing of identification data consists in execution of the service registration request sent by the interested party and execution of the services through functionalities made available on the Portal and/or the Application.

In addition, with the express consent of the user, free, optional and always revocable, the Controller may use the personal data to send by post, telephone, e-mail and SMS relating to products, activities, initiatives, and on the projects of the Controller itself. The User may at any time revoke consent to data processing to pursue the purposes in question by writing to the Controller at the e-mail address available in the “contacts” area of the company website. Consent for the communication purposes indicated is optional and any refusal will, in any case, allow the user to register with the Portal and to use the connectivity service; and, for users with a technical profile, to use the Portal functionalities to provide a remote technical assistance service. 

Personal data are accessible to the Controller’s staff duly authorised and instructed by the latter, on a need-to-know basis, and are communicated to authorities and public bodies for their respective institutional purposes, when communication is required by laws and regulations. The data may also be communicated to the Controller’s suppliers (such as third-party technical service providers, hosting providers, IT companies, public authorities) appointed, as Processors by the Controller if needed.

User data will be stored in a form that enables identification for the time strictly needed to implement the purposes declared, to comply with regulatory obligations and to ensure the protection and defence of the rights of the Controller. At the end of the storage period, the data will be erased or anonymised. 

The User may exercise vis-à-vis the Controller the rights provided for in Articles 15 et seq. of EU Regulation 679/2016, including the right to access data concerning him/her, the right to updating, rectification, integration, portability.

The User also has the right to obtain restriction, erasure, anonymisation or blocking of data processed in breach of the law, and to object to processing.

In order to exercise the aforementioned rights, the user may contact the Controller in writing at the e-mail address available in the contact area of the company website.

With regard to the right to stop receiving information on products, services and company initiatives, please note that a special option will be provided in each communication enabling the recipient to easily unsubscribe from the distribution list, with reference to the contact methods indicated above.

If the User discovers that his/her rights have been breached, he/she may appeal to the competent supervisory authority, without prejudice to being able to take direct legal action.

For further information on data processing, please refer to the Portal’s Privacy Policy.

Having read and understood the privacy policy, the User consents to the processing of his/her personal data.