Controller and contact details

Microlys S.p.A - Via Asti, 4 - 10015 Ivrea (TO) - Italy - Tel. +39.0125.631877 - Fax +39.0125.631940, (hereinafter called “Microlys” or “controller”) is the controller which determines the purposes and means of the processing of personal data.

“Personal data” means any information relating to an identified or identifiable natural person (‘data subject’), included name, email address, home address, contact telephone numbers, work information such as job title and other business or company information.

“Processing” means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Purposes of the processing for which the personal data are intended and legal basis for the processing

The data processing is necessary for the following purposes: to comply with the Microlys contractual obligations with customers and suppliers and to fulfil the legal and tax obligations connected to the contract.

In the event that the data subject is part of the contract with Microlys, the legal basis for the processing is the performance of a contract to which the data subject is party. In the event that the data subject is not part of the contract but he/she is acting on behalf of a Microlys’ customer or supplier, the legal basis of the processing is the legitimate interest of Microlys and of its customers and suppliers to perform the contract between the parties. Accordingly, it is essential to process the personal data of the respective employees and representatives and the failure to provide Microlys with information entails the impossibility to comply with contractual, legal and tax obligations.

In both cases, legal basis is also the compliance with a legal obligation to which the controller is subject.

Automated decision-making

The processing of data shall not be based on automated processing, including profiling, which produces legal effects concerning the data subject or similarly significantly affects him or her.


Personal data shall be processed only by persons acting under the authority of Microlys or by processors, which process personal data on behalf of the controller. They will not process data except on instructions from the controller.

Period for which the personal data will be stored

If the personal data are not necessary for the performance of a contract, the information shall not be retained for no longer than 24 months from their collection.

If the personal data are necessary for the performance of a contract, Microlys will retain the information as reasonably necessary to comply with the establishment, exercise or defence of legal claims connected to the contract or with the legal obligations to which the data controller is subject due to the contract.

Data subject’s rights

The data subject has the following rights:

Right to object

In particular, Microlys brings to the attention of the data subject the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is is necessary for the purposes of the legitimate interests pursued by the controller or by a third party. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.

How to exercise the rights

The data subject can exercise the above mentioned rights by sending an e-mail to:
Please contact Microlys at for any information and clarification on the rights and on the content of this privacy statement.