1. Data Controller
The Data Controller is IMS TECHNOLOGIES, based in Calcinate (BG),
2. Methods of data processing
Personal data is mainly processed with electronic, IT and automated tools, for the period strictly necessary to achieve the purposes for which it was collected.
IMS TECHNOLOGIES processes personal data in compliance with the law, adopting adequate security measures, capable of preventing both unauthorized access and the dissemination, unauthorized modification, or destruction of data.
3. Purpose of data processing
The User’s personal data will be processed by IMS TECHNOLOGIES exclusively for the following purposes:
a. Response to requests sent by the User. Customer support. By filling out the appropriate form in the “Contacts” section or by contacting the Company at the references indicated in the “Service” section of the Site, the User can send or address different kind of communications to IMS TECHNOLOGIES, for example in relation to the services and products of the Company, including your customer support request. In this regard, the User’s personal data will be processed by the Company to process, correctly manage and respond to the User’s or customer’s request or communication. The data will be made anonymous after 6 months from the reply provided to the User unless further needs strictly connected to the request sent by the User are identified. The legal basis of the processing is the provision of services expressly requested by the User or customer; the provision of data is necessary, and any refusal will make it impossible to obtain the requested service.
b.Subscription to the IMS TECHNOLOGIES newsletter. By filling in the appropriate registration form, IMS TECHNOLOGIES will periodically send newsletters about its services to the User, also based on the areas of expressed interest. To receive the Company’s newsletters, it is necessary to communicate, among other data, a valid e-mail address. For this reason, the Company will check the e-mail address provided by the User by sending a verification e-mail to the address provided. When the User subscribes to the newsletter, the Company stores the IP address and the date and time at which the User subscribed, to protect IMS TECHNOLOGIES if a third party uses the User’s e-mail address improperly for subscribing to the Company’s newsletter.
c. Legitimate interests pursued by the Company and/or by third parties. The User’s personal data may also be used for the exercise of the legitimate rights and interests of IMS TECHNOLOGIES and/or of third parties, for example the right to bring legal actions to enforce one’s rights, for the management of complaints and litigation, debt recovery, prevention of fraud and/or illegal activities. The data will be stored according to the ordinary prescription criteria and subsequently deleted unless further storage times become necessary.
d. Fulfillment of legal obligations and/or applicable provisions. IMS TECHNOLOGIES may also process personal data provided by the User or otherwise collected during the interaction of the latter with the Site, for the fulfillment of the obligations provided by law, regulations, national and European regulations, as well as any order issued by competent authorities, which represent the legal basis of the processing; the provision of personal data is necessary for the Company to comply with the obligations provided by law to which it is subject.
f. Access to the Customer Area and IMS Community. By completing the appropriate registration form, the User is given the opportunity to access the Customer Area and thus become part of the IMS Community in order to keep track of the history of their orders and requests for assistance, interact with the responsible office for requests for assistance on the products or services requested, have access to the technical documentation relating to the products purchased (i.e. manuals, diagrams, drawings, spare parts lists, etc.), have access to some paid services reserved for members and access the IMS TECHNOLOGIES e-commerce dedicated to spare parts. The legal basis of the processing is connected to the execution and operational and technical management of the request for registration in the Community by the User; the provision of data is necessary, and any refusal will make it impossible to obtain the requested service.
4. Personal data undergoing processing
IMS TECHNOLOGIES receives and collects, through the Site, information relating to the User who visits its pages and uses the services offered by the Site. IMS TECHNOLOGIES will collect and process the following information.
4.1 Browsing data
4.2 Data provided voluntarily by the User
IMS TECHNOLOGIES, in addition to the data collected automatically and illustrated in the preceding point, will also collect information voluntarily provided by the User in relation to the purposes referred to in paragraph 3 above, as well as for the services expressly requested by the latter. Furthermore, the Company may collect and process further personal data, where such data is voluntarily provided by the User as part of the services offered by the Site, for example in the event that the User contacts the Company to communicate any inefficiency or malfunction, to exercise the rights of the interested party in relation to the processing of personal data, etc. Such personal data will be processed by IMS TECHNOLOGIES only for purposes strictly related to the User’s request. The refusal to provide the data will make it impossible to obtain the requested service.
5. Communication of data to third parties
The personal data provided by the User as well as those collected by the Site in the provision of services will not be disseminated and may be communicated, even abroad, in countries not belonging to the EU, exclusively for the purposes and with the methods illustrated above, to the categories of individuals indicated below:
- collaborators, consultants, professionals, Group companies who provide IMS TECHNOLOGIES with technical or organizational services (e.g., IT service providers), or who collaborate with IMS TECHNOLOGIES, for the correct supply and execution of the respective services.
- people, companies, professionals who provide consultancy and assistance to IMS TECHNOLOGIES, with particular but not exclusive reference to accounting, administrative, legal, tax and financial matters.
- Group companies, for the purposes illustrated in the previous par. 3.
- individuals and entities entitled to access the data by legal provisions or by order of authority.
To find out the list of non-EU countries to which personal data may be communicated, click here . In case of communication of data to individuals settled in non-EU countries, IMS TECHNOLOGIES adopts the measures envisaged by the GDPR to legitimize the transfer of data to third countries. For more details on data transfers to non-EU countries, write to firstname.lastname@example.org .
6. Data Retention
Personal data is processed for the time necessary to provide the services requested by the User and for the performance of related and instrumental activities and will be kept according to the statutes of limitations indicated with respect to each purpose or those envisaged by the applicable provisions or to enforce the rights of the Company both in the pre-litigation phase and during legal proceedings.
At the end of this period, the data will be stored anonymously for statistical and analytical purposes. For further details on the retention times of personal data based on the various purposes pursued, write to email@example.com .
7. Data retention
The User, as an Interested Party (i.e., the natural person whose data is processed), can exercise the specific rights provided for in articles 15 to 21 of GDPR.
In particular, the User has the right to:
- Obtain confirmation as to whether personal data is being processed and, if so, obtain access to information concerning the processing of personal data (for example, purposes, categories of personal data processed, recipients or categories of recipients, data retention period, etc.).
- Obtain the restriction of processing (for example, if the accuracy of the personal data is contested; the processing is unlawful and the interested party opposes the erasure of the personal data; the personal data are necessary for the interested party to ascertain, exercise or defense of a right in court, even if the Company no longer needs such data; the User has opposed the processing pending verification of legitimate reasons carried out by the Company of legitimate reasons);
- Receive personal data concerning them in a structured format, commonly used and readable by an automated device (e.g., pdf) and transmit such data to another holder or obtain direct transmission of personal data from one data controller to another if technically feasible (i.e. data portability).
Furthermore, the User has the right to revoke the consent to the processing of personal data for the purposes that provide for it at any time, without prejudice to the lawfulness of the treatment based on the consent given before the revocation.
To exercise these rights, the User can contact the Data Protection Officer indicated in paragraph 2 above, or by writing to firstname.lastname@example.org .
If the changes are particularly significant, the Company can communicate them to the User using a different channel (for example by sending them an e-mail).
Last update: September 2023