PRIVACY POLICY

With this privacy notice on the protection of personal data, our company provides some information on the categories, purposes and methods for processing the Personal Data (hereinafter “Data”) that can be collected when the end user (e.g, workshop personnel, hereinafter the “User”) of a Rotary tool  (hereinafter the “Tool”) inserts such Data on the  DIGITiQ APP (hereinafter “APP”).

1. DATA CONTROLLER

The Data controller is VSG (hereinafter “VSG” or the “Controller”). To exercise your rights and for any other matter relating to Data processing, you can refer to the Controller by sending a specific written request to the e-mail address: ……………….

2. CATEGORY OF PROCESSED DATA, NATURE OF PROVISION

User registration is not required to access the APP. Such APP could be used by the User to manage its Tool, and in this case the APP interacts and collects some information including the Data.

Through the APP, the User can remotely consult the technical data transmitted by the product used (e.g. information relating to the procedures started and/or notification of any anomalies) and easily manage the services.

For the purpose of using some features (e.g. report of the operations carried out using the product) the User can insert the Data. The categories of Data that can be collected and processed include: data relating to the customer and/or vehicle to which the User performs a service (e.g. Name, Surname, license plate, VIN number, etc.).In this case, the User is responsible for informing the interested parties (e.g. customers) regarding the aforementioned treatments.

3. PURPOSES AND LEGAL BASIS FOR PROCESSING

The Data entered by the User will be processed by the Data Controller for the purposes of executing the agreements relating to the services purchased or requested by the customer and for carrying out the organisational, technical and security activities related to the provision of such service. For these purposes, the processing of the Data is necessary for the fulfillment of the contractual and/or legal obligations related to the supply of the requested products and services to the customer.

4. METHODS OF DATA PROCESSING

The processing is carried out through electronic and automated tools for the time strictly necessary to achieve the purposes for which the Data were collected and, in any case, with the adoption of specific security measures aimed at avoiding any violation of personal data, such as loss of Data, illicit or incorrect use and unauthorized access.

5. DATA DISCLOSURE TO THIRD PARTIES – RECIPIENTS OF THE DATA

The Data will be processed by employees and/or collaborators, who received adequate operating instructions and were expressly authorised to the processing, of the TEXA S.p.A. nominated Data Processor, in their role to provide software maintenance and assistance to the APP developed by the Data Processor itself.

6. TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS

The Data will be processed both in EU territories by the Data Processor and in USA.

7. PERIOD FOR WHICH THE DATA WILL BE STORED

The Data will be kept for the time necessary for the provision of the services and after that, except in the cases whose conservation is required by laws, regulations or provisions issued by the Authorities, they will be definitively cancelled.

8. RIGHTS OF THE DATA SUBJECTS

Since the Data are also processed by the Data Processor in the EU, the provisions of EU Reg. 2016/579 (GDPR) apply, and this privacy notice is also provided pursuant to the GDPR. The GDPR (articles 12 and 15-22) grants that every Data Subject can exercise the right to access the data concerning him or her and the information about processing; to rectify or integrate the data if inaccurate or incomplete. Moreover, where the conditions set forth by the regulation are met, the Data Subject can exercise the right to erasure of the Data; to restriction of processing; to Data portability intended as the right to obtain the data by the Data Controller in a structured, commonly used and machine-readable format to transmit those data to another controller without hindrance; to object to processing; not to be subject to a decision based solely on automated processing. If the Personal Data processing is based on consent, the Data Subjects have the right to withdraw their consent, without prejudice to the lawfulness of processing performed before the withdrawal. Furthermore, if you believe your rights have been harmed, you can lodge a complaint to the Guarantor for the Protection of Personal Data.