Privacy Policy

Privacy Policy Update - AEC Europe Srl

The present Data Privacy Policy of AEC Europe Srl has been updated in compliance with EU Regulation 679/2016 (GDPR).

AEC Europe Srl, as the Data Controller under Article 4 of EU Regulation 679/2016, is committed to protecting the privacy of data subjects.

This Privacy Policy for the processing of personal data of natural persons—or data subjects as defined under Article 4 of EU Regulation 679/2016—provides information to data subjects on the policies and procedures regarding the collection, use, processing, storage, transfer, and protection of personal data obtained by AEC Europe Srl.

The collection, use, processing, storage, and sharing of the data subject's personal data will be conducted for the purposes communicated to the data subject in this Privacy Policy and, where necessary, after obtaining their consent.

AEC Europe Srl commits to complying with applicable Privacy Policy regulations, in particular EU Regulation 679/2016 (or GDPR) and specific national legal frameworks, as applicable.

1. Collected and Processed Personal Data

Personal data includes all information or sets of information that identify or make a natural person uniquely identifiable, directly or indirectly.

The personal data collected by AEC Europe Srl include name, surname, residential address, phone number, email address, contact preferences, and are provided directly by the data subject.

2. Purpose of Personal Data Usage

The personal data provided by the data subject, as described in point 1 of this policy, are used by AEC Europe Srl to send information about the company's products, process purchase orders, provide assistance (including technical), and respond to specific inquiries.

Additionally, we use the data to enhance our website content, inform customers about updates to our website and products, and contact them for marketing and sales purposes related to their specific needs and interests.

AEC Europe Srl will process the data for the above purposes and any additional purposes deemed compatible with the original ones, considering the link between them, the context in which the data were collected, and the nature of the data itself.

3. Communication to Third Parties, Service Providers, and Others

AEC Europe Srl WILL NOT store, process, or share personal data with third parties unless explicit consent has been obtained from the data subject. In such cases, AEC Europe Srl guarantees that all worldwide partners or affiliates receiving this information will protect it with the same care and policies as AEC Europe Srl.

For the purposes of this Privacy Policy, non-personal information combined with personal information is treated as personal information.

In any case, AEC Europe Srl may process and share personal data without the data subject's consent if required by law, a request, or an order from a public authority (national or international), or if the processing is necessary to protect a right or legitimate interest of the Data Controller or a vital interest of the data subject or third parties.

4. Accuracy and Retention of Personal Data

AEC Europe Srl is committed to keeping personal data accurate and up-to-date. Personal data will only be retained for the period necessary to fulfill the purposes described in this Privacy Policy, unless otherwise required or permitted by law.

5. Data Security

To protect the personal data provided by the data subject from accidental or unlawful destruction, loss, alteration, or disclosure, AEC Europe Srl employs appropriate technical and organizational security measures, taking into account the state of the art, implementation costs, the nature, scope, purposes of processing, and the severity of risks to the rights and freedoms of the data subjects.

6. Data Security Breach

AEC Europe Srl has implemented strict security controls, intrusion detection software, and alert procedures in the event of a potential or actual breach of its IT systems.

In the event of a system breach that poses a risk to the personal data of data subjects, AEC Europe Srl has established a notification procedure to the Data Protection Authority within the terms provided by the GDPR.

If the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, AEC Europe Srl will communicate the breach to the data subject without undue delay.

7. Right to Erasure (Right to Be Forgotten)

AEC Europe Srl is committed to ensuring that a data subject who makes a request has the right to obtain the deletion of their personal data without undue delay.

If AEC Europe Srl is required to delete personal data, it will take all reasonable measures, including technical ones—taking into account available technology and implementation costs—to inform any third parties processing the personal data about the data subject's request to delete any links, copies, or reproductions of their personal data.

8. Minor Privacy

AEC Europe Srl does not offer its services nor process the personal data of individuals who are minors under the applicable national laws of their country of residence. The company will make every reasonable effort to verify that the data subject providing their personal data for the purposes described in this Privacy Policy is not a minor.

9. AEC Europe Srl Websites

On websites owned by AEC Europe Srl, NO personal data is collected, except for the data—email address included—that the data subject voluntarily provides when corresponding with the email address info@aeceurope.it, published on the website to make requests, give consent, and acknowledge this Privacy Policy.

If the processing of personal data is based on the consent provided by the data subject, the latter can revoke this consent at any time by writing to info@aeceurope.it and including "unsubscribe" in the email subject line.

10. Cookies and other technologies.

AEC Europe Srl does NOT collect any information through cookies or similar technologies on the website.

11. Forums, blogs, third-party websites, and links.

AEC Europe Srl is solely responsible for its privacy procedures and its websites. The website of AEC Europe Srl may contain links to other websites for further information and convenience, such as manuals and references to regulations. AEC Europe Srl does NOT control these other websites, nor does it approve or make any statements about them. It is also not responsible for the privacy practices of these other websites, or for the consent to transfer, process, and store personal information.

12. Modifications to this privacy policy.

Any changes to the Privacy Policy that may be necessary due to the introduction of new regulations or modifications in the purposes or methods of personal data processing by AEC Europe Srl will be published on www.aeceurope.it or communicated to the interested party via email, specifying the date of the revision.

13. Rights of the data subject.

The GDPR, in Articles 13, 14, 15, 16, 17, 18, 19, 20, and 21, recognizes the right of the data subject to:

a. to obtain confirmation of the existence or non-existence of personal data concerning them held by the Data Controller (Art. 13);

b. to access their personal data, including requesting a copy of the data in electronic form from the Data Controller (Art. 13);

c. to have inaccurate personal data updated or rectified without undue delay (Art. 13);

d. to complete their incomplete personal data, including through the provision of a supplementary declaration (Art. 13);

e. to have their personal data erased or anonymized without undue delay from the date of their request (Art. 13);

f. to restrict the processing of their personal data to only certain purposes listed in Article 4.B of this policy (Art. 13 and Art. 18);

g. to object to the processing of their personal data by the Data Controller for the pursuit of a legitimate interest, or the interests of third parties, if their own interests, rights, or fundamental freedoms prevail (Art. 21);

h. to obtain their personal data from the Data Controller in a structured, commonly used, and machine-readable format, enabling easy transfer to another Data Controller (Art. 20);

i. to withdraw their consent to the processing of personal data at any time (Art. 7);

j. to object to the processing of their personal data for direct marketing purposes (profiling) (Art. 21 and Art. 22);

k. to file a complaint with the Data Protection Authority according to the procedures and guidelines provided on the official website of the Authority at:

www.garanteprivacy.it (Art. 13).

The rights listed in points a) to j) can be exercised by the data subject by sending a request via email to the Data Controller's PEC email address

aeceuropesrl@legalmail.it or by registered letter addressed to AEC Europe Srl, located at Via Garibaldi 46, 20861-Brugherio (MB), Italy