Information for suppliers

This information is given to natural persons working in the name and on behalf of MEC PROJECT DI BROSSA ROBERTO suppliers, in accordance with the article 13 of the legislative decree No. 196 signed on 30th June 2003 – “Codice in materia di protezione dei dati personali” (regarding the protection of personal data) and the article 13 GDPR 679/16 – “European regulation on the protection of personal data”.
Owner identity
The officer responsible for processing personal data involving natural persons who operate in the name and on behalf of the suppliers is MR. BROSSA ROBERTO owner of MEC PROJECT DI BROSSA ROBERTO - VIA CAV. GIUSEPPE AVENA 33 – 12013 CHIUSA DI PESIO (CN), and his pro tempore legal delegate BROSSA ROBERTO. No Data Protection Officer (DPO) was chosen.
Data source
Personal data which can be processed are those provided by the interested party on the occasion of:

visits or phone calls;
direct contact after participation to fairs, trade shows, exhibitions, etc.;
offer proposals;
communications and transactions following the orders.

Processing purposes
Personal data of natural persons operating in the name and on behalf of the suppliers will be processed for:

forward communications of various kind and by different means of communication (e.g. phone, mobile, SMS, email, fax, mail);
eventual requests or processing of received requests;
any information aimed at the execution of the contractual relationship, including pre- and post-contractual activities.

Legal basis
Processing of personal data is necessary to give execution to the contract where suppliers are mentioned as parties or to perform pre-contractual measures taken at their own request.
Data recipients
The personal data processed by the Owner will not be disclosed, that means they will not be transmitted to indeterminate subjects in any possible form, including giving access to them for simple consultation. However, the owner is allowed to transfer them to his staff (i.e. employees and workers) and to other external subjects who cooperate with him. They may also be communicated to parties who need to perform services or tasks on our behalf and /or to provide goods with the purpose of carrying out orders. Only if strictly necessary, they will be transmitted for any possible information and quote requests. Finally, they may be communicated to subjects entitled to access them under the provisions of the law, directions and community regulations.
In particular, some workers have been entitled to process personal data on the basis of their position and job duties, within the limits of their tasks and in accordance with the instructions given by the Owner.
Data transfer
The Owner will not transfer personal data to third parties in other countries or to international organizations. However, he reserves the right to use cloud services; in this case, service providers will be selected among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.
Data retain
The Owner retains and processes personal data for the time necessary to fulfill the above-mentioned purposes. At a later time, personal data will be stored and not further processed for the time established by the current provisions on civil and fiscal matters.
Rights of the interested party
In accordance with the article 7 of the legislative decree No. 196/2003 and the articles 15 (access), 16 (adjustment), 17 (cancellation), 18 (right of processing limitation), 20 (portability), 21 (opposition right), 22 (opposition right to automated decision-making processes) of the GDPR 679/16, the interested party can exercise his rights by writing to the Owner at the address above, or by email, specifying the right he intends to exercise in the object and attaching a photocopy of an identity document attesting the legitimacy of his request.
Consent withdrawal
In accordance with the article No. 23 of the legislative decree 196/2003 and with the article No. 6 of the GDPR 679/16 the interested party can withdraw his consent to the use of personal data at any time. However, the processing of personal data as stated in this information is lawful and allowed, even without consent, when it is necessary for the execution of the contract in which the subject is one of the interested parties (e.g. as products or services supplier).
Complaint proposal
The interested party has the right to file a complaint to the Authority for Personal Data Protection in his own country.
Refusal to provide data
The interested party can refuse to provide his personal data to the Owner. The provision of personal data is however necessary for a correct and efficient management of the contractual relationship; therefore, such a refusal may compromise the contractual relationship in whole or in part.
Automated decision-making processes
The Owner does not use data processing methods consisting of automated decision-making processes.

Information for applicants

This information is given to all applicants who send their curriculum vitae to MEC PROJECT DI BROSSA ROBERTO spontaneously or after a particular search for employees or workers, in accordance with the article 13 of the legislative decree No. 196 signed on 30th June 2003 – “Codice in materia di protezione dei dati personali” (regarding the protection of personal data) and the article 13 GDPR 679/16 – “European regulation on the protection of personal data”.
Owner Identity
The officer responsible for processing personal data involving natural persons or natural persons who operate in the name and on behalf of legal entities is MR. BROSSA ROBERTO of MEC PROJECT DI BROSSA ROBERTO, located in VIA CAV. GIUSEPPE AVENA 33, 12013 - CHIUSA DI PESIO (CN). No Data Protection Officer (DPO) was chosen.
Data source
Personal data which can be processed are those provided in the occasion of:

sending a curriculum vitae;
job interviews;
direct contact after participation to fairs, trade shows, exhibitions, etc.;
recommendation by third parties.

Processing purposes
Personal data of those who spontaneously send their curriculum vitae or apply for a job after a particular search for employees or workers will be processed for evaluation and selection purposes only, including the possibility of proposing other job offers in accordance with the professional profile of the candidate.
Legal basis
The legal basis of data processing consists of a pre-contractual request by the interested party.
Data recipients
The personal data processed by the Owner will not be disclosed, that means they will not be transmitted to indeterminate subjects in any possible form, including giving access to them for simple consultation. However, the owner is allowed to transfer them to his staff (i.e. employees and workers) and to other external subjects who cooperate with him. They may also be communicated to parties who need to perform services or tasks on our behalf and /or to provide goods with the purpose of carrying out orders. Only if strictly necessary, they will be transmitted for any possible information and quote requests. Finally, they may be communicated to subjects entitled to access them under the provisions of the law, directions and community regulations.
In particular, some workers have been entitled to process personal data on the basis of their position and job duties, within the limits of their tasks and in accordance with the instructions given by the Owner.
Data transfer
The Owner will not transfer personal data to third parties in other countries or to international organizations. However, he reserves the right to use cloud services; in this case, service providers will be selected among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.
Data retain
The Owner retains and processes personal data for the time necessary to fulfill the above-mentioned purposes. In particular, all data will be kept for a period not exceeding thirty months from their receipt.
Rights of the interested party
In accordance with the article 7 of the legislative decree No. 196/2003 and the articles 15 (access), 16 (adjustment), 17 (cancellation), 18 (right of processing limitation), 20 (portability), 21 (opposition right), 22 (opposition right to automated decision-making processes) of the GDPR 679/16, the interested party can exercise his rights by writing to the Owner at the address above, or by email, specifying the right he intends to exercise in the object and attaching a photocopy of an identity document attesting the legitimacy of his request.
Consent withdrawal
In accordance with the article No. 23 of the legislative decree 196/2003 and with the article No. 6 of the GDPR 679/16 the interested party can withdraw his consent to the use of personal data at any time. However, the processing of personal data as stated in this information is lawful and allowed, even without consent, when it is necessary for the execution of pre-contractual measures (i.e) curricula evaluation and candidate selection), which are carried out after a specific request of the interested party.
Complaint proposal
The interested party has the right to file a complaint to the Authority for Personal Data Protection in his own country.
Refusal to provide data
The interested party can refuse to provide his personal data to the Owner. However, any refusal to provide personal data in whole or in part may compromise our possibility to evaluate and to select the application of the interested candidate.
Automated decision-making processes
The Owner does not use processing methods consisting of automated decision-making processes on data of those who spontaneously send their curriculum vitae or are recruited after a particular search for employees or workers.

Information for cookies and website (without traffic analyzer)

This information is given to natural persons who browse and log in to the company website MEC PROJECT DI BROSSA ROBERTO, in accordance with the article 13 GDPR 679/16 – “European regulation on the protection of personal data”.
Owner identity
This website is managed by MR. BROSSA ROBERTO, officer responsible for processing of personal data in the company MEC PROJECT DI BROSSA ROBERTO located in VIA CAV. GIUSEPPE AVENA 33,12013 - CHIUSA DI PESIO (CN). The Owner guarantees the safety, security, confidentiality and protection of personal data in his possession, at any stage of their processing. Personal data are processed in accordance with the GDPR 679/16. No Data Protection Officer (DPO) was chosen.
Processing purposes
During their normal operation, computer systems and software procedures used to operate this site acquire various personal data, whose transmission is implicit in the use of internet communication protocols. These data are not supposed to be connected to identified persons, but by their very nature they can be elaborated and associated to data owned by third parties, which could therefore identify the users. Such data include IP address or domain name of computers used to access this website, URI address (Uniform Resource Identifier) of the requested resources, when your request was performed and the method you use to send your request to the server, the dimension of the file you get in response, numeric codes stating the request status (your research was successful, an error has occurred...) and other parameters related to your operating system and computer background. These data will be used for statistical research only, concerning anonymous information about the usage of the site and its correct functioning. Therefore, they are erased immediately after being processed. These data could be processed to verify responsibility in case of computer crimes against the site.
Legal basis
Technical cookies are used in the legitimate interest of the Owner.
Data recipients
The Owner will not transmit any personal data or information which can lead to the identification of the user to third subjects, with the exception of service providers. They will be informed only if strictly necessary for purposes related to the management of the site and for the execution of contractual measures and administrative obligations.
Data transfer
The Owner will not transfer personal data to third parties in other countries or to international organizations.
Data retain
The Owner retains and processes personal data for the time necessary to get anonymous statistical information about the usage of the site and to check if it is working properly. Data are immediately erased after processing.
Rights of the interested party
In accordance with the article 7 of the legislative decree No. 196/2003 and the articles 15 (access), 16 (adjustment), 17 (cancellation), 18 (right of processing limitation), 20 (portability), 21 (opposition right), 22 (opposition right to automated decision-making processes) of the GDPR 679/16, the interested party can exercise his rights by writing to the Owner at the address above, or by email, specifying the right he intends to exercise in the object and attaching a photocopy of an identity document attesting the legitimacy of his request.
Consent withdrawal
In accordance with the article No. 7 of the GDPR 679/16, the interested person can withdraw his consent at any time.
Complaint proposal
The interested party has the right to file a complaint to the Authority for Personal Data Protection in his own country.
Refusal to provide data
The interested party can refuse to provide his personal data to the Owner. To do this, it is necessary to disable cookies following the browser instructions. Disabling cookies may make surfing worse or compromise the usage of the website.
Automated decision-making processes
The Owner does not use data processing methods consisting of automated decision-making processes.
Type of cookies
Cookies are pieces of information entered on your browser when you visit a website or use a social network with your PC, smartphone or tablet. Each cookie contains various data such as for example the name of the server where it comes from or a numerical identificatory. Cookies can remain in the system for the duration of a session (i.e. until the browser you are using to surf the web is not shut down) or for longer periods and can contain a unique identification code.
Technical cookies
Some cookies are used to perform computer authentication or monitoring sessions, and to store specific information about users when they access a web page. These cookies are called “technical cookies” and they are often useful, because they can make your browsing faster and improve your efficiency on the internet: for example, they intervene when you place an order or buy something online, when you log into private areas and when you want your language to be immediately recognized by a website, by making some procedures easier and faster. One particular type of cookies is called “analytics”. They can be used by website providers to collect aggregated information about the number of users and the way they visit their site, in such a way that they can generate statistics about general features of their service and how it is used by the users.
Profiling cookies
Other cookies can be used to monitor and profile users while browsing, and to analyse their movements or consumption habits (what they buy, what they read, etc.), even with the aim of sending them advertisement or personalized services (i.e. Behavioural Advertising). In this case, they are called “profiling cookies”. It may occur that a web page contains cookies coming from other websites and contained in other elements hosted in the page, such as for example advertising banners, images, videos etc. These are called cookies from third parties, which are usually used with profiling purposes.
Because of their particular invasiveness in the private sphere of the users, especially considering profiling cookies coming from third parties, European and Italian legislation agreed that the user must be adequately informed about the use of the same and express his valid consent to the inclusion of cookies on his terminal.
Cookies in use
The website www.mecproject.it uses cookies with the aim of making its resources simpler and more efficient to use. Users browsing the site will receive some very little amount of information on their devices, whether they are computers or mobile devices, in the form of little text files, which are then stored in the browser directories. These files are called “cookies”.
Cookies used by https://www.mecproject.it allow you to:

store your surfing settings,
avoid typing twice the same information,
analyse site services and content to optimize your browsing experience.

The website https://www.mecproject.it does not use traffic analysers. When the user clicks on possible icons related to Facebook, Twitter, Youtube, Instagram etc. he will be redirected to those sites and will receive cookies that are not under the control of the Owner. Finally, if the user is redirected to another website after clicking on an advertisement banner, he must be aware that the network provider has assigned cookies which are necessary to detect the throughput and the amount of any possible purchase. The responsibility of managing these cookies belongs to the site provider, whose privacy policy is normally to be found on the site itself.

Information for persons who fill in the form “contact us”.

Information for customers

This information is given to customers, whether they are natural persons or natural persons operating in the name and on behalf of legal entities, of the company MEC PROJECT DI BROSSA ROBERTO, in accordance with the article No. 13 of the legislative decree 196 signed on 30th June 2003 – “Codice in materia di protezione dei dati personali” (regarding the protection of personal data) and the article 13 GDPR 679/16 – “European regulation on the protection of personal data”.
Owner identity
The officer responsible for processing personal data involving natural persons or natural persons who operate in the name and on behalf of legal entities is MR. BROSSA ROBERTO of MEC PROJECT DI BROSSA ROBERTO, located in VIA CAV. GIUSEPPE AVENA 33, 12013 - CHIUSA DI PESIO (CN).
No Data Protection Officer (DPO) was chosen.
Data source
Personal data are those given by the interested person in the occasion of:

visits a tour workshop;
contacts through our website;
information requests, even if per email;
previous transactions.

Processing purpose
Fiscal fulfilments, organisational management of the requested services and appointment arrangements.
Bureaucratic and legal requirements related to vehicle documentation.
Finally, in accordance with the article No. 130 comma 4 of the legislative decree 196/2003 and to the Provvedimento generale del Garante G.U. signed on the 1st July 2008 No. 188/C, formulation 6, points a, b, c, all personal data of the interested parties will be included in the Owner's archives and used to send communications concerning products, services, news and promotions.
Legal basis
Legal basis consists of the execution of a contract where the interested person is mentioned as a party, or the execution of pre-contractual measures handled at his particular request. Data processing may be handled for the legitimate interest of the Owner (promotion of his commercial activities and pursuit of his statutory purposes).
Data recipients
The personal data processed by the Owner will not be disclosed, that means they will not be transmitted to indeterminate subjects in any possible form, including giving access to them for simple consultation. However, the owner is allowed to transfer them to his staff (i.e. employees and workers) and to other external subjects who cooperate with him. They may also be communicated to parties who need to perform services or tasks on our behalf and /or to provide goods with the purpose of carrying out orders. Only if strictly necessary, they will be transmitted for any possible information and quote requests. Finally, they may be communicated to subjects entitled to access them under the provisions of the law, directions and community regulations.
In particular, some workers have been entitled to process personal data on the basis of their position and job duties, within the limits of their tasks and in accordance with the instructions given by the Owner.
Data transfer
The Owner will not transfer personal data to third parties in other countries or to international organizations. However, he reserves the right to use cloud services; in this case, service providers will be selected among those who provide adequate guarantees, as required by art. 46 GDPR 679/16.
Data retain
The Owner retains and processes personal data for the time necessary to fulfill the above-mentioned purposes. At a later time, personal data will be stored and not further processed for the time established by the current provisions on civil and fiscal matters.
Rights of the interested party
In accordance with the article 7 of the legislative decree No. 196/2003 and the articles 15 (access), 16 (adjustment), 17 (cancellation), 18 (right of processing limitation), 20 (portability), 21 (opposition right), 22 (opposition right to automated decision-making processes) of the GDPR 679/16, the interested party can exercise his rights by writing to the Owner at the address above, or by email, specifying the right he intends to exercise in the object and attaching a photocopy of an identity document attesting the legitimacy of his request.
Consent withdrawal
In accordance with the article No. 23 of the legislative decree 196/2003 and with the article No. 6 of the GDPR 679/16 the interested party can withdraw his consent to the use of personal data at any time. However, the processing of personal data as stated in this information is lawful and allowed, even without consent, when it is necessary for the execution of the contract in which the subject is one of the interested parties (e.g. in a supplying relationship) or to handle his requests.
Complaint proposal
The interested party has the right to file a complaint to the Authority for Personal Data Protection in his own country.
Refusal to provide data
Natural persons cannot refuse to give the Owner their personal data, because they are necessary to comply with the law directions regulating commercial transactions and taxation. It may also be necessary to give additional personal data, in order to improve the quality and the efficiency of the transaction. Therefore, the refusal to provide the data required by law will prevent the fulfilment of orders, while the refusal to provide additional data may compromise in whole or in part the processing of other requests and the quality and efficiency of the transaction. Persons operating in the name and on behalf of legal entities can refuse to give the Owner their personal data. Providing personal data is necessary to manage the contractual relationship correctly and efficiently. Therefore, the refusal to provide data may compromise the contract in whole or in part.
Automated decision-making processes
The Owner does not use processing methods consisting of automated decision-making processes to handle data of his customers, whether they are natural persons or natural persons operating in the name and on behalf of legal entities.