INFORMATION REGARDING THE PROTECTION OF PERSONAL DATA

Pursuant to Art. 13 D of Regulation EU 2016/679

In compliance with the provisions of Art. 13 D of Regulation EU 2016/679, Nymco SpA, in its capacity as Data Controller of personal data, in the person of the legal representative pro-tempore, hereby provides information on the purposes and methods of processing any personal data collected, their scope of communication and dissemination, in addition to the nature of their provision.

1. PERSONAL DATA

Identification data (corporate or business name, or name and surname of natural persons, address, telephone number, email).

2. PURPOSE

The collected data, object of the processing, shall be employed by Nymco SpA in full compliance with the principles of correctness and the provisions of law, for the proper provision of products and services to satisfy the corporate purpose.

Furthermore, they may be used for the collection and management of CVs sent spontaneously and to fulfil requests for information received via the contact form.

3. PROCEDURE

The processing of data is carried out using IT procedures or in any case electronic means or paper supports by specially appointed internal individuals. The data are stored in paper, computer and electronic archives and the minimum security measures provided for by the legislator are ensured.

4. COMMUNICATION AND DISSEMINATION

The data may be disclosed to third parties for the performance of activities functional to the company, such as maintenance and management of the site and more generally by all employees and those of third parties (service, infrastructure, IT and similar providers) who are involved in the management and supervision of the same and duly appointed as data processors. In this case, their use by third parties shall be in full compliance with the principle of fairness and lawfulness.
No extra-EU data processing is foreseen.

5. THE RIGHTS OF THE DATA SUBJECT

The data subject may assert his rights as expressed in Art. 15, 16, 17 and 21 of Regulation 2016/679, by contacting the Data Controller Nymco S.P.A. or the privacy contact directly.

The data subject may obtain confirmation of the existence, or not, of personal data concerning him, even if not yet registered, and their communication in an intelligible form.

The data subject has the right to obtain the following data:

a)       the origin of personal data;

b)      the purposes and methods of processing;

c)       the logic applied in the case of processing carried with the aid of electronic instruments;

d)      the identification details of the Data Controller, the data processors and designated representative;

e)      the individuals or categories of individuals to whom such personal data may be communicated or who may learn about them as designated representative in the territory of the State, data processors or agents.

The data subject has the right to obtain:

a)       the updating, correction or, when interested, the integration of the data;

b)      the deletion, anonymisation or blocking of any data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;

c)       the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case when this fulfilment proves impossible or involves the use of resources manifestly disproportionate to the protected right.

The data subject has the right to object, in whole or in part:

a)       for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of their collection;

b)      to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.

Should you wish to exercise the rights provided for by Art. 15, 16, 17 and 21 of Regulation 2016/679, please write to Nymco SpA at its registered office at: VIA DELLA MOSA, 6 - 20017 RHO (MI), for the attention of the privacy contact.

6. DATA CONTROLLER AND RESPONSIBLE PERSONS

The Data Controller is Nymco SpA, Via della Mosa, 6 - 20017 Rho (MI).
The updated list of external processors may be consulted by submitting a written request to the Data Controller referred to above.

7. RETENTION TIMES

The data shall be retained for the time necessary to fulfil the purposes listed above in accordance with the law and in any case no longer than 5 years from the end of processing.

8. NATURE OF THE PROVISION AND CONSEQUENCES OF THE REFUSAL TO REPLY

The provision of your data, object of the processing, is optional. The refusal to provide your personal data means that it is impossible for Nymco SpA or any of its representatives to process them for the purposes and with the methods listed above.

Pursuant to Art. 6 of Regulation 2016/679, consent to the processing of the aforementioned data is not necessary as in the case of CVs these are sent spontaneously. In case of request for information relating to the services offered by the Data Controller, the legal basis is the legitimate interest on the part of the Data Controller to respond to the requests received.

COOKIE POLICY

In order to assist its users or respond to their enquiries, NYMCO SpA usually acquires personal data through the www.nymco.com website, or sometimes collects them orally or through third parties.
Considering privacy as a fundamental value, treatments carried out by Nymco SpA are based on principles of lawfulness, fairness and transparency, always protecting your privacy and your rights pursuant to EU Regulation 2016/679, Legislative Decree 196/2003 and other applicable regulations relating to personal data protection.

We therefore inform you as follows:

Nature of data processing - When you communicate with us via the website’s "Contact us form", we collect and process your personal information and contact details in order to deal with your enquiry. Generally, we do not process any sensitive data, but if this becomes necessary, we will do it only by first asking for your consent.

Purposes of data processing - If you send us a request, your data will be processed to respond to it and in relation to the contractual requirements and the consequent fulfillment of legal and fiscal obligations. Your data will be processed for the entire duration of the contractual relationship and also subsequently, for the fulfillment of legal obligations and for administrative and commercial purposes.
We also collect and process prospective and volunteer data for recruitment (i.e. when you submit your CV), employee and human resources management purposes. 
Specific information on data processing will be provided during on-site employment interviews.

Processing methods - Your data will be processed using IT tools and procedures suitable to ensure a high level of security and confidentiality and can be done either through our website or through other electronic means, and sometimes even by telephone or on paper.

Navigation data - Log files: the computer systems and software procedures used to operate the www.nymco.com website do not acquire data.

Data provided voluntarily by the user - The compilation of the specifically prepared "forms" (masks) entail our subsequent acquisition of your email address and other data, necessary to respond to your requests and / or provide the requested service.

Cookies - On the website www.nymco.com no computer techniques are used in any way for the direct acquisition of personal identification data, nor are user tracking or profiling systems implemented. In fact, our IT systems do not use any type of so-called persistent cookies, but technical session cookies for the transmission of personal information, which are not permanently stored and expire at the end of the user session. Even if NYMCO SpA endeavors to implement all possible technical measures to disable or delete any third-party cookies on its site, sometimes this type of file could still be activated using functions that allow you to interact with social networks, and the latter could then track your browsing. This could happen, for example, by using Linkedin’s sharing features. In this regard, we invite you to read the Privacy Policies available via your Social Network profile(s).

Technical cookies

Name Retention Provider Purpose
NID 6 months Google This group sets a unique ID to remember preferences and other information such as your preferred language (e.g. Italian)
_GRECAPTCHA 179 days Google This cookie is set by Google reCAPTCHA, which protects our site against spam enquiries on contact forms
1P_JAR 1 month Google Associated with the googlemap service linked to geolocation
CONSENT 2 years Google Used for the consent of Google services
ASP.NET_SessionId Session www.nymco.com Used to identify the users session on the server. The session being an area on the server which can be used to store session state in between http requests
alertcookies 31/12/9999 www.nymco.com It allows and manages the cookie banner
TS01d891c3 Session www.nymco.com Cyber security fix


Obligation or right to provide data and consequences of any refusal - With regard to the data that we are obliged to know in order to comply with the obligations established by national laws and regulations, EU legislation or provisions issued by legitimate Authorities and by supervisory and control bodies, failure to provide them will make it impossible to establish or continue commercial relations, to the extent that such data are necessary for the execution of the same. 
As for the data that we are not obliged to know, failure to provide such data will be assessed by us from time to time, and will determine the resulting decisions related to the importance for us of the data requested and not conferred.

Communication and dissemination - The data we collect from our site users will not be “disseminated” or shared indiscriminately by us in any form to unspecified parties. 
Your personal data may instead be “disclosed” by us, to one or more specific parties, in the following circumstances: a) to appointed subjects within our organisation, in particular to the employees of our administrative offices; b) to subjects who can access the data by virtue of regulations or legal provisions, always within the limits set out by law; c) to subjects who need to access the data for purposes related to the existing commercial relationships, within the limits strictly necessary for performing their services (for example financial institutions and freight forwarders); d) to our professional advisers, within the limits necessary to carry out their duties, subject to the duty of confidentiality and security in the processing of data; e) to other internal or external parties who are required to know your data, such as organisers and partners involved in institutional activities sponsored by us, relating to courses, meetings, congresses, and any other event you wish to register for via NYMCO SpA’s website.

The rights of the interested party - As an interested party you can exercise your following rights towards us: a) obtain confirmation of the existence of personal data concerning you, even if not yet registered, and the communication in intelligible form of the same data and their origin, as well as the purposes and methods of treatment and the logic applied in case of treatment carried out with the help of electronic tools; b) obtain the cancellation, transformation into anonymous form or blocking of data which need not be kept for the purposes for which the data were collected and processed; c) obtain the updating, rectification and integration of their data; d) object, in whole or in part, for legitimate reasons, to the processing of data concerning you, even if pertinent to the purpose of the collection. Although we are always at your disposal to examine your requests and resolve any problems that may affect the processing of your personal data, we also remind you that in any case you are always entitled to lodge a complaint with the Italian supervisory authority, or the Guarantor for the protection of personal data.

Data Controller - The Data Controller of your personal data is NYMCO SpA - Via della Mosa, 6 - 20017 Rho (MI)
To exercise your legal rights, you can write to us at privacy@nymco.com