Pursuant to art. 13 of EU Regulation 2016/679 (“G.D.P.R.”), Cementir Holding N.V. (“Cementir Holding” or the “Data Controller” or “Company”) - with registered office in Amsterdam, the Netherlands - 36, Zuidplein, 1077 XV, and branch and operating office in Rome, Corso di Francia, 200, 00191 - in its capacity as Data Controller, represented by the legal representative, hereby informs you that personal data of those who have requested - by filling in the appropriate form - to receive by e-mail notification of the publication on the corporate website of the Company of financial documentation, press releases or, in general, news related to Cementir Holding and to companies of the Cementir group, they shall be processed by Cementir Holding using mainly automated or sometimes manual tools, with processes strictly correlated with the purposes listed below and, in any event, so as to guarantee data security and privacy.
Identity and contact information of the Data Controller
The Data Controller is Cementir Holding N.V., represented by the legal representative, and may be contacted by registered letter to be sent to the branch and operating office at Corso di Francia, 200, 00191 Rome, or by email to the email address: [email protected].
Source of personal data
Personal data are collected directly from the data subject.
Purposes and lawfulness of the processing
Personal data are processed by the Data Controller pursuant to art. 6 of the G.D.P.R.
The specific purposes of the processing and the relative legal bases are listed below:
| Purpose of the processing | Legal basis of the processing |
| Email notification to all who have requested it to alert on the latest financial documents, press releases or, in general, news published on the Company’s corporate website and relating to Cementir Holding or other Cementir group companies | Pursuit of the legitimate interests of the data controller or third parties1 |
Nature of provision
The provision of data is compulsory to meet legal obligations and for data processed based on the legitimate interests of the Data Controller or third parties.
Categories of personal data recipients
Personal data may be disclosed to the company used by the Data Controller for the hosting and website maintenance services, qualified as 'Data Processors' specifically appointed by Cementir Holding, pursuant to art. 28 of the GDPR.
The data will also be processed by internal parties authorised to process them by the Data Controller. Personal data are not disclosed
Transfers outside the EU
For the pursuit of the processing purpose described above, personal data may be transferred to the recipients specified above in Italy and abroad. In no case personal data will be transferred outside the European Union.
Personal data storage period
The personal data processed shall be stored at the secondary and operational office of the Company until the Data Subject is requested to cancel the Email Alert service. Following this request, personal data will be promptly deleted.
Below, details concerning the time period for which the data will be stored for the purpose described above:
| Purpose of the processing | Category of personal data | Time limits for erasure |
| Email notification to all who have requested it for receiving alerts on the latest financial documents, press releases or, in general, news published on the Company’s corporate website and relating to Cementir Holding or other Cementir group companies | - Name and Surname
- Email address
- Professional qualification | Until the request for cancellation from the Email Alert service |
Rights of the data subject
Pursuant to and in accordance with the GDPR, Data Subject is recognised the following rights which may be exercised with respect to Data Controller:
right to obtain from the Data Controller confirmation as to whether or not personal data of Data Subject are being processed, and, where that is the case, access to the personal data and the information set forth in Article 15 and specially on the purposes of the processing, categories of personal data concerned, recipients or categories of recipient to whom the personal data have been or shall be disclosed, period for which the personal data shall be stored, etc.;
right to have your personal data rectified if inaccurate as well as supplemented when deemed incomplete again in relation to the purposes of the processing (Article 16);
right to erasure of data (“right to be forgotten”), in one of the circumstances set forth in Article 17;
right to restriction of processing, in the cases envisaged in Article 18;
right to data portability pursuant to Article 20;
right to object to processing pursuant to Article 21;
Such rights may be exercised by sending a request by registered letter with advice of receipt to the Data Controller at the following address: Corso di Francia, 200, 00191 Rome, or by email to the email address: [email protected].
Data Subject has the right to submit a complaint to the Personal Data Protection Authority or to another Supervisory Authority pursuant to art. 13, par. 2, letter d) of the G.D.P.R.
Cancellation from Email Alert service
The cancellation from the Email Alert service for no longer receiving alerts can take place at any time via the link in the e-mails that the Data Subject receives.
The Data Controller reserves the right to modify and update this disclosure over time.
1 Interest of the data controller to provide updated information and news on the Company and the Group.
