PRIVACY POLICY

pursuant to and for the purposes of Art. 13 of Regulation (EU) 2016/679 on the processing of personal data

 

In compliance with Art. 13 of Regulation (EU) 2016/679 on the processing of personal data (hereinafter also referred to simply as the “GDPR”), we hereby provide you, as data subjects, with the necessary information regarding the purposes and methods for processing your personal data, as well as the scope of communication and dissemination of the same.

1. Processing purposes

Data voluntarily provided is processed for the following purposes:

(a) Complete and proper performance of obligations relating to the contractual relationship concluded with you and ongoing, including fulfilment of obligations towards the financial administration and relations with credit institutions for the payment of any amounts dues;

(b) Pursuit of the legitimate interest of the Data Controller (Art. 130(4) of the Italian Data Protection Act) for the sending of material in electronic form by email, aimed at direct marketing such as information material on the products of Aglatech14 S.r.l., institutional communications and newsletters.

2. Data processing methods

Pursuant to Art. 5 of the GDPR, personal data subject to processing will be processed lawfully and fairly, will not be excessive in relation to the purposes set out in point 1, and will be kept for a period of 5 years from the last provision made, except for any different and longer period established by current legislation, in particular tax law, so as to make it possible to identify the data subject by means of a file containing his or her data. If consent is revoked, the data will be deleted within 3 months of the request, without prejudice to any specific legal obligations on the storage of accounting and administrative records.

Processing is carried out by means of the operations or set of operations set out in Art. 4(2) of the GDPR and more precisely: the collection, recording, organisation, storage, consultation, elaboration, alteration, selection, retrieval, comparison, use, interconnection, blocking, communication, dissemination, erasure or destruction of data, even if not recorded in a database.

The operations may be carried out with or without the aid of electronic or otherwise automated tools and according to logics that are fully in line with the purposes pursued.

The processing of data is carried out by the Data Controller, the Data Processor and/or persons appointed by the Data Controller and/or the Data Processor.

3. Nature of data provision – Legal basis for processing – Refusal to provide data

The provision of data for the purposes set out in point 1(a) is carried out in accordance with Art. 6(1)(b) and (c) of the GDPR and, although optional, is strictly necessary for the purposes of carrying out the activities referred to in point 1(a), and its absence would make it impossible to place and receive orders, to fulfil accounting and tax obligations and, in general, to comply with all the inherent obligations laid down by law, as well as for the purposes of pursuing the legitimate interests of the Data Controller.

In relation to the purpose referred to in point 1(b) above, data processing is carried out in accordance with Art. 130(4) of the Italian Data Protection Act. In this case, under Art. 21 of the GDPR, the data subject may object to the above processing, i.e. he or she may always exercise the right to opt-out of any further future mailings, provided at the bottom of each communication.

4. Scope of data communication

Your data, forming the subject of the processing, may be communicated to: external collaborators, consultants (tax or otherwise), accountants and, in general, to all those subjects to whom the communication is necessary for the correct fulfilment of the purposes indicated in point 1 (such as, for example, companies of the Aglatech14 S.r.l. group, the Financial Administration, insurance companies, professionals and credit institutions). Persons in charge and managers will only process the data if this is necessary for the performance of their assigned tasks. All this without prejudice to the guarantee of protection of the rights of the data subject.

5. Scope of data dissemination

Personal data is not subject to dissemination.

6. Data transfer abroad

Personal data may be transferred to countries within the European Union within the scope of the purposes mentioned in point 1. Furthermore, in the event of using cloud platforms for data storage and/or transfer, the data, in compliance with the provisions of Articles 44 et seq. of the GDPR, could also be transferred to countries outside the European Union, in particular for possible server support. In this case, only services that meet the requirements of the applicable regulations will be used.

7. Rights of the Data Subject

Pursuant to Articles 15, 16, 17 et seq. of the GDPR, you can assert your rights by contacting the data controller. In particular, you can obtain from the controller:

• confirmation of the existence or otherwise of your personal data and its provision in intelligible form;
• information on the origin of the data;
• information on the purposes and methods of processing; 
• information on the logic applied to the processing; 
• information on the identification details of the controller and of the persons to whom the data may be communicated;
• updating, rectification and integration of data;
• ability to file a complaint with the Data Protection Supervisory Authority;
• erasure, transformation into anonymous form or blocking of data processed in breach of the law.

The data subject may object, on legitimate grounds, to the processing of data concerning him or her, even if pertinent to the purpose of collection, as well as withdraw consent to the processing. The right to object, the right to request the restriction of processing, and the right to request the erasure of data are exercisable within the limits of the contractual and legal obligations regarding the storage of accounting and administrative records.

In order to exercise the aforementioned rights, you may contact the Data Controller using the contact details indicated below.

8. Data Controller

The data controller is Aglatech14 S.r.l. (Tax ID No. 08699190966), in the person of its legal representative pro tempore, with registered office in Milan (20123 – MI), Via Meravigli, 16, e-mail: privacy@aglatech14.it

Pursuant to Art. 13 of the GDPR,

• I hereby declare that I have read the Privacy Policy provided by Aglatech14 S.p.A. pursuant to Art. 13 of Regulation (EU) 2016/679 on the processing of personal data.