This site uses cookies, including third party cookies. For more information or to deny consent for all of certain cookies click here..
Clicking "OK" you are consenting to the use of cookies.

PRIVACY POLICY

INFORMATION ON THE TREATMENT OF PERSONAL DATA within the meaning of the European Regulation 679/2016 (GDPR)

This past May 25th, the European Regulation 679/2016 (RGPD) became fully applicable, defining the general rules for the protection of personal data.
This is an important step that sets the same rules for all the countries of the European Union in the treatment of personal data.
Officine Meccaniche Aeronautiche S.p.a. considers the protection of the personal data of individuals a founding value and respect is a primary objective which must be guided by the management.

CONTACT HOLDER DATA

Officine Meccaniche Aeronautiche S.p.A. - Via Cagliari 20 06034 Foligno (PG)
Tel. +39 0742 34751 E-mail: privacy@omafoligno.it

PRIVACY POLICY

  1. OWNER
    The one who determines the purposes and means of the treatment of personal data is Officine Meccaniche Aeronautiche S.p.A., owner/holder of the treatment, with head offices in Foligno - Perugia Via Cagliari 20, 06034
    VAT IT00147650543.
    The legal representative is Umberto Nazzareno Tonti, President & CEO.
  2. MANAGER/PERSON-IN-CHARGE FOR THE PROTECTION OF PERSONAL DATA
    The manager for the protection of personal data has not been designated as the proprietor does not fall between the subjects obliged.
  3. CO-OWNERSHIP - THIRD PARTIES CONFIDENCES
    In the case of co-ownership, the holder ensures that the respect of the principles that follow is guaranteed through the agreement of co-ownership.
    In the case in which the activities of the treatment of personal data should be entrusted to third parties, the holder ensures that the respect of the principles that follow is guaranteed through the services contract.
  4. ORGANIZATION
    The owner organizes the resources and the processing of personal data in such a way that the latter satisfy the requirements of the GDPR and by the regulations of the national industry. Specifically:
    1. Inside
      1. The organization of privacy reflects the operative position, the attributions are consistent with the operating tasks, powers and authority related to them.
      2. The persons for whom tasks and responsibilities are assigned (considering the amount and categories of personal data, the risks for the rights and freedoms of natural persons) are selected, identified and entrusted on the basis of objective criteria that define the needs of the institution in terms of knowledge, skills and experience. In the absence of qualification certificates, the requirements and evaluation weights are predefined beforehand.
      3. Those who treat the data act under the direct authority of the owner or a manager from these appointed. The staff is trained and informed according to an ongoing training program which takes account of the different requirements in relation to the different roles covered.
      4. The holder directs and supervises all those who deal with personal data on its behalf.
    2. Outside
      1. The subjects entrusted to treat personal data are selected and identified and responsible on the basis of a transparent process, which guarantees the objectivity of choice; the possession by the supplier of the expertise and professionalism needed for the organization; the possession by the supplier guarantees to implement appropriate technical and organizational measures appropriate in such a way that the treatment meets the requirements of GDPR and ensures the protection of the rights of the person concerned.
      2. The relationship with third parties dealing with data on behalf of the holder are always formalized in writing. The contract fulfils the minimum requirements laid down by art. GDPR 28.
      3. The holder directs and supervises all those whose delegate treatment activities.
  5. THE STAKEHOLDERS
    1. The holder treats the personal data of the following categories of natural persons:
      • Employees
      • Professionals
      • Users
      • Suppliers
    2. Categories of subjects indirectly affected:
      • Family members of employees or users
      • Creditors of employees
      • Having cause of employees
    3. Institutions / Interested entities
      • Trade Unions
    4. Other
  6. THE CULTURE OF PRIVACY
    For Officine Meccaniche Aeronautiche S.p.A. the ability to protect your personal data is not so much and not only a legal obligation, but rather, a preferential requirement, a competitive asset. In harmony with the prospect of accountability required by GDPR Officine Meccaniche Aeronautiche S.p.A. tackles the conformity of their personal data treatment in relation to GDPR with an approach oriented to the risks and their treatment. Respect for rights, freedom and of the data of natural persons for Officine Meccaniche Aeronautiche S.p.A. is a mandatory ethical imperative that guides all activities it puts in place.
  7. LAWFULNESS
    Officine Meccaniche Aeronautiche S.p.A. only processes personal data that are based on one of the legal bases referred to in art. 6 GDPR (consensus, fulfilling contractual obligations, vital interests of the person concerned or of third parties, legal obligations to which the holder subject, public interest or the exercise of powers conferred by public law, legitimate interest prevailing of the Proprietor/owner or of third parties to whom the data is communicated).
    Officine Meccaniche Aeronautiche S.p.A. treats personal data details (i.e. data suitable to reveal racial or ethnic origin, political opinions, religious or philosophical beliefs or trade-union membership, as well as dealing with genetic data, biometric data intended to uniquely identify a natural person, data concerning health or sexual life or sexual orientation of the person), only if there is one of the cases provided for by art. GDPR 9.2.
    Officine Meccaniche Aeronautiche S.p.A. treats personal data relating to criminal convictions and the offenses or related safety measures, on only one of the legal bases referred to in Article 6.1 GDPR, and only under the control of the public authority or whether the treatment is authorized by the law of the Union or of the Member States which provides appropriate safeguards for the rights and freedoms of the persons concerned.
  8. CORRECTNESS
    Officine Meccaniche Aeronautiche S.p.A. treats personal data exclusively for specified, explicit and legitimate purposes without impropriety or deception in respect of the concerned following rigidly within the limits of the legal bases which legitimize the treatment.
  9. TRANSPARENCY
    Officine Meccaniche Aeronautiche S.p.A. shall adopt appropriate measures to provide the concerned all the information referred to in Articles 13 and 14 and the communications referred to in Articles 15 to 22 and Article 34 relating to the treatment in a concise form, transparent, comprehensible and easily accessible, with a simple and clear language. In particular Officine Meccaniche Aeronautiche S.p.A. for each treatment carried out makes it known to the interested party the modalities with which personal data are collected, used, consulted or otherwise treated as well as the extent to which the personal data are or will be treated. The information and communications relating to the processing of such personal data must be easily accessible and understandable.
  10. LIMITATION OF PURPOSE
    Officine Meccaniche Aeronautiche S.p.A. treats personal data for specified purposes, explicit and legitimate, and ensuring that the treatments are not incompatible with those purposes.
  11. THE MINIMIZATION OF THE DATA
    Officine Meccaniche Aeronautiche S.p.A. treats personal data adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed.
  12. ACCURACY
    Officine Meccaniche Aeronautiche S.p.A. treats personal data accurate and, if necessary, updated; by taking all reasonable steps to delete or amend their inaccurate data promptly in relation to the purposes for which they are processed.
  13. LIMITATION OF CONSERVATION
    Officine Meccaniche Aeronautiche S.p.A. stores personal data in a form which permits identification of data subjects for a period of time not greater than the achievement of the purposes for which they are processed.
  14. INTEGRITY AND CONFIDENTIALITY
    Officine Meccaniche Aeronautiche S.p.A. treats personal data in such a way as to ensure an adequate security of those, including protection, by means of technical and organizational measures appropriate, from unauthorized or unlawful treatments and from loss, destruction or from accidental damage.
  15. DATA PROTECTION BY DESIGN AND BY DEFAULT
    Officine Meccaniche Aeronautiche S.p.A. adopts the methodological approach to any project, on the basis of which it must be evaluated the protection of personal data early in the design process. For any project, therefore, both structural and conceptual, consideration must be given to the protection of personal data from the time of its design and it must provide solutions for the protection of personal data.
    Officine Meccaniche Aeronautiche S.p.A. puts in act relevant technical and organizational measures to ensure that they are treated, by default, only personal data necessary for each specific purpose of the treatment; in particular the technical and organizational measures put in place have the purpose to ensure that - by default – they are treated according to the specific aims of the treatment.
  16. BINDING EFFECT
    Failure to comply with the principles contained in this document, as well as directives, instructions, requests, orders that were to be imparted by Officine Meccaniche Aeronautiche S.p.A. for the protection of personal data and the compliance with current legislation constitutes a serious infringement.
  17. REVISIONS
    This document is approved by the Governing Council and is arranged by the owner who takes care of updating and dissemination.

MODALITIES FOR THE EXERCISE OF THE RIGHTS OF THE PERSON CONCERNED

The Regulation recognizes those concerned, the following rights can be exercised in relation to and against the holder and each joint proprietor.

  • Right of access: Art.15 of the European Regulation allows you to obtain from the holder/data collector confirmation, whether or not it concerns data being treated, and in this case obtain access to such data.
  • Right of Reply: Art. 16 of the European Regulation allows you to obtain from the holder/data collector the rectification of incorrect personal data that concerns you without undue delay. Taking into account the purposes of processing, the interested party has the right to obtain the integration of incomplete personal data, also providing a supplementary statement.
  • Right of cancellation: Art. 17 of the European Regulation allows you to obtain from the holder/data collector the cancellation of your personal data without undue delay if one of the reasons provided for by the law exists.
  • Right of limitation: Art. 18 of the European Regulation allows you to obtain from the holder/data collector the limitation of treatment when one of the hypotheses provided by the standard occurs.
  • Right of opposition: Art. 21 European Regulation allows you to object at any time for reasons related to your particular situation, the treatment of personal data that concerns you within the meaning of Article 6, paragraph 1(e) or (f), including profiling on the basis of these provisions.
  • Right to portability: Art. 20 European Regulation allows you to receive in a structured format, of common use and readable by automatic device personal data concerning you provided to a holder/data controller and has the right to transmit such data to another holder/data controller without hindrance from the part of the data controller which it has provided in accordance with the conditions provided for by the law.
  • Right of withdrawal of consent: Art. 7 of the European Regulation allows you to revoke your consent at any time. The withdrawal of consent does not affect the lawfulness of the treatment based on consensus before revocation.
  • Right of complaint: Art. 77 European Regulation, if you believe the treatment which relates to you violates the rules, you recognize the right to lodge a complaint to a supervisory authority, in particular to a State member in which you normally reside, work or the place where the alleged violation occurred.

A complete extract of articles of the law referred to above is available at the OMA SpA – IT Office, Via Cagliari 20, 06034 Foligno (PG). This office will provide all the explanations that the interested person/party concerned needs regarding the exercise of their rights; requests can be submitted in writing, accompanied by a valid identification document at the e-mail privacy@omafoligno.it.

INFORMATIVE TEXTS

CONTACT US

Please fill out the quick form

I agree to the Privacy Policy *
* Required Fields