Privacy Policy AB4YOU

INFORMATION ON THE PROCESSING OF PERSONAL DATA

pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 and applicable national legislation

AB Holding S.p.A. as the data controller (hereinafter "AB" or "Data Controller"), wishes to provide you, in your capacity as data subject, with an information notice pursuant to Regulation (EU) 2016/679 (General Data Protection Regulation, hereinafter "GDPR") and applicable national legislation, on the processing of your personal data following registration for the use of services through the "AB4YOU" application ("APP") downloaded on your device.

It should be noted that the use of the services through the APP ("Services") is part of a contractual relationship for maintenance services ("Contract") existing between a company of the group of which AB is the head ("AB Group") and a legal entity ("Customer") owning an equipment designed, manufactured and installed by the AB Group. 

I.      Type of personal data, purpose and legal basis for processing

The Data Controller will process the personal data ('Personal Data') communicated by you for the purposes specifically indicated and on the legal basis indicated below:

1.     Type of Personal Data:

(a)  Common data: identification and contact data including: first name, last name, e-mail address and mobile phone number provided by you during registration.

II.      Methods of processing personal data

Personal data will be processed by means of the following operations: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Personal Data are processed using computerised and manual systems in accordance with the principles of fairness, loyalty and transparency provided for by applicable legislation and protecting the data subject and his rights by adopting appropriate technical and organisational measures to ensure a level of security appropriate to the risk. Any automated processing shall be carried out by AB according to methods strictly related to the purposes described in Article I above.

III.      Nature of provision

The provision of the personal data by the data subject is necessary to be able to use the APP Services.

IV.      Data retention

All personal data will be kept for a period of time not exceeding 6 (six) months after last access the data subject's to the APP Services.

V.      Communication, disclosure and transfer of personal data

Subject to communications being carried out in accordance with the principles of lawfulness, correctness, transparency and data minimisation, all personal data collected may be disclosed and subsequently processed:

• AB and AB Group’s internal processors, as well as AB and AB Group's personnel specially authorised and instructed;

• any external processors appointed by the AB Group on the basis of an appointment contract pursuant to Article 28 of the GDPR, for the provision of certain services for which the APP has been designed;

• the other companies of the AB Group in compliance with the company procedure 'Organisational Model for the Processing of Personal Data_PR038' to which they have adhered to guarantee the data subject the same level of protection as provided for by the regulations in force and the exercise of his or her rights in accordance with them.

Where required by authorities and supervisory bodies, personal data may be disclosed to such parties.

Personal data will not be disclosed.

Personal data will not be transferred outside the European Union.

VI.      Rights of the data subject

In relation to the data processing described herein, the data subject may exercise the rights set out in Articles 15-21 of the GDPR, and in particular:

(a)    right of access: the right to be informed and to request access to personal data processed;

(b)   right of rectification: the right to request that personal data be amended or updated in the event of inaccuracy or incompleteness;

(c)    right of erasure: the right to request the permanent deletion of personal data where provided for by the GDPR;

(d)   right of restriction: the right to request the temporary or definitive stop of processing of all or some of the personal data where provided for by the GDPR;

(e)    right to object: the right to object at any time to the processing of personal data where provided for by the GDPR (e.g. on grounds relating to the specific situation of the data subject);

(f)    right to data portability: the right to request a copy of one's own personal data in electronic format and to request that such data be transmitted to another data controller;

(g)   right to withdraw consent: at any time without prejudice to the lawfulness of the processing based on the consent given before revocation;

(h)   right to lodge a complaint with the supervisory authority in the event of a breach of the GDPR and of the applicable national legislation on the processing of personal data.

To exercise the aforementioned rights, the data subject may contact the Data Controller by writing to privacy@gruppoab.it or by registered letter with return receipt to the address indicated in Article VII hereof.

The data subject has also the right to lodge a complaint with the Garante per la protezione dei dati personali.

VII.      Data Controller

The Data Controller is AB Holding S.p.A., with legal office in Via Caduti del Lavoro, 13 - 25034 Orzinuovi BS - tel.: 030 9942411 - fax: 030 9942426 - e-mail: privacy@gruppoab.it in the person of its legal representative.