Digital Transformations to 

Eliminate Your Process Frictions

GDPR Notice

Please take time to read and understand this notice which explains how your personal and company details will be used pursuant to Article 13 of EU Reg. 679/2016:

When you enter information on the form, we will use this to communicate with you and as the initial information required for possible use of software and services. The parties are You, Icon UK and Namirial.

Icon UK will act as the Services Partner to assess any information provided in order to guide You to the best outcome with regard to potential use of the intended services that the interested party wishes to use. This may include a form of free trial or a type of paid service, whether delivered by platform or personal service. Trials and platform use are provided by Namirial. Icon UK and Namirial will act as both Data Controller and Data Processor at times, in order to achieve the best outcome for You.

The information stored may be requested to be deleted at any time, although this may also mean automatic cessation of any product, platform or service provision.

The following Notices describe how this will work in more detail.  

 

DATA PROTECTION NOTICE (ICON UK)

EU REGULATION 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data

Icon UK Limited processes data in compliance with the provisions of EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “Reg. EU 2016/679”).
Pursuant to Articles 13 and 14 of the aforementioned regulation, the following information is provided regarding the identification data of the data controller and data protection officer in relation to the processing of personal data relating to contracts and services provision.

Data Controller is Icon UK Limited with registered office in Griffins Court, 24-34 London Road, Newbury, Berkshire RG14 1JX, United Kingdom.

Data Protection Officer (DPO) is Christopher Jones.

Type of processed data
The data provided and processed by Icon UK Limited are common, personal and sensitive data.

Purpose of processing
We inform you that the personal data, provided directly by you as the interested party and/or collected by fill-in forms on paper and/or available on Icon UK Limited websites, are processed for the purpose of concluding the contract to which the interested subject is a party, and also to perform (directly or via or with our partners, including Namirial S.p.A.) the contractual benefits and to provide the services requested by the Customer or available on the portals managed by Icon UK Limited and Namirial S.p.A. or by intermediaries appointed by the same, as well as for administrative and accounting purposes related to service contracts.

Data provision
The provision of data in the consent (first field) indicated above is mandatory for the conclusion of the contract or for the provision of the requested services. This is a common consent for Icon UK Limited and Namirial S.p.A.

Conditions for data processing and access
Icon UK Limited process personal data in accordance with Article 6 co. 1 lett. A), b), f) of EU Reg. 2016/679 by virtue of its legitimate interests related to the type of activity carried out and the need to implement the existing contracts or pre-contractual measures requested by the data subject.
The data collected by filling in online forms or by signing standard contracts are processed electronically and through information and management systems. Where such data is collected in any paper form, should this be necessary in unusual circumstances, this will be processed both with IT and telematic tools (including transfer of data from paper to digital format). This data may be processed in aggregate form for statistical purposes and to verify the quality standards of assistance and maintenance services, in this case excluding the processing of identification data.

The data shall be accessible only by duly trained officers and informed about their duties and the activities permitted to them on the data collected, acting on behalf of Icon UK Limited and receiving instructions and tasks given by the data controller by means of a letter of appointment.
The data controller will process the data for the purposes indicated above, pursuing his legitimate interests that do not prevail over the interests or rights and freedoms of the data subject.

Scope of communication and possible dissemination of data
We inform you that the data relating to the contract and service activities can be communicated to commercial consultants for administrative and accounting purposes and to lawyers for possible management of litigation.
We also inform you that the data may also be communicated to police or judicial authorities for the purpose of ascertaining or prosecuting crimes committed by users of telematic services, where necessary.

Personal data retention and erasure
Icon UK Limited will retain the data of data subjects in a form that allows them to be identified for a period of time not exceeding the achievement of the purposes for which the data have been collected; they will therefore be retained until the existence of the contractual relationship. Upon expiry of this period, Icon UK Limited will delete the data of data subjects.
The data strictly necessary for fiscal and accounting compliance, which no longer serves the purpose for which they have been collected, will be retained for a period of 10 years as required by the relevant regulations.

The interested party has the right to request, at any time, the modification of the structures regulated by this paragraph through the exercise of the rights referred to in the following paragraph.

Rights of data subject
The data subject may exercise the rights referred to in art. 15 (Right of access by the data subject), 16 (Right to rectification), 17 (Right to erasure), 18 (Right to restriction of processing), 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing), 20 (Right to data portability), 21 (Right to object) e 22 (Automated individual decision-making, including profiling) of EU Regulation 2016/679.
We inform you that the exercise of the data subject’s rights referred to in these articles, such as the right of erasure or object, meets the limits imposed by the tax legislation.

In order to exercise the rights provided for in articles 15 to 22 of EU Reg. 2016/679, the interested party must address a specific written request in both electronic and posted paper form respectively addressed to:

Email: dpa@icon-uk.net

Post: Icon UK Limited, Griffins Court, 24-34 London Road, Newbury, Berkshire RG14 1JX, United Kingdom.
 

 

DATA PROTECTION NOTICE (NAMIRIAL)

EU REGULATION 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data

Namirial S.p.A. processes data in compliance with the provisions of EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “Reg. EU 2016/679”).
Pursuant to Articles 13 and 14 of the aforementioned regulation, the following information is provided regarding the identification data of the data controller and data protection officer in relation to the processing of personal data relating to contracts and services provision.

Data Controller is NAMIRIAL S.p.A. with registered office in Senigallia (AN), ZIP code 60019, Via Caduti sul Lavoro n. 4.

Data Protection Officer (DPO) is Serena Donegani.

Type of processed data
The data provided and processed by Namirial S.p.A. are common, personal and sensitive data.

Purpose of processing
We inform you that the personal data, provided directly by the interested party and/or collected by fill-in forms on paper and/or available on Namirial S.p.A. websites, are processed for the purpose of concluding the contract to which the interested subject is a party, and also to perform the contractual benefits and to provide the services requested by the Customer or available on the portals managed by Namirial S.p.A. or by intermediaries appointed by the same, as well as for administrative and accounting purposes related to service contracts.

Data provision
The provision of data in the consent (first field) indicated above is mandatory for the conclusion of the contract or for the provision of the requested services. This is a common consent for Icon UK Limited and Namirial S.p.A.

Conditions for data processing and access
Namirial S.p.A. process personal data in accordance with Article 6 co. 1 lett. A), b), f) of EU Reg. 2016/679 by virtue of its legitimate interests related to the type of activity carried out and the need to implement the existing contracts or pre-contractual measures requested by the data subject.
The data collected by signing standard contracts in paper form are processed both in the aforementioned format and with IT and telematic tools and may be processed in aggregate form for statistical purposes and to verify the quality standards of assistance and maintenance services, in this case excluding the processing of identification data.
The data collected by filling in online forms are processed electronically and through information and management systems.
The data shall be accessible only by duly trained officers and informed about their duties and the activities permitted to them on the data collected, acting on behalf of Namirial and receiving instructions and tasks given by the data controller by means of a letter of appointment.
The data controller will process the data for the purposes indicated above, pursuing his legitimate interests that do not prevail over the interests or rights and freedoms of the data subject.

Scope of communication and possible dissemination of data
We inform you that the data relating to the contract and service activities can be communicated to commercial consultants for administrative and accounting purposes and to lawyers for possible management of litigation.
We also inform you that the data may also be communicated to police or judicial authorities for the purpose of ascertaining or prosecuting crimes committed by users of telematic services, where necessary.

Personal data retention and erasure
Namirial S.p.A. will retain the data of data subjects in a form that allows them to be identified for a period of time not exceeding the achievement of the purposes for which the data have been collected; they will therefore be retained until the existence of the contractual relationship. Upon expiry of this period, Namirial S.p.A. will delete the data of data subjects.
The data strictly necessary for fiscal and accounting compliance, which no longer serves the purpose for which they have been collected, will be retained for a period of 10 years as required by the relevant regulations.

The interested party has the right to request, at any time, the modification of the structures regulated by this paragraph through the exercise of the rights referred to in the following paragraph.

Rights of data subject
The data subject may exercise the rights referred to in art. 15 (Right of access by the data subject), 16 (Right to rectification), 17 (Right to erasure), 18 (Right to restriction of processing), 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing), 20 (Right to data portability), 21 (Right to object) e 22 (Automated individual decision-making, including profiling) of EU Regulation 2016/679.
We inform you that the exercise of the data subject’s rights referred to in these articles, such as the right of erasure or object, meets the limits imposed by the tax legislation.

In order to exercise the rights provided for in articles 15 to 22 of EU Reg. 2016/679, the interested party must address a specific written request addressed to:

Namirial S.p.A., Via Caduti sul Lavoro n. 4 – 60019 Senigallia (AN)
 – 

[ Informativa Privacy EN – ver. 2019.03.25 ]