PERSONAL DATA PROCESSING NOTICE
ARTICLE 13 EU REGULATION 2016/679 (GDPR)
Pursuant to Article 13 of EU Regulation 679/2016 on the protection of personal data (GDPR), we inform you that the personal data you provide may be processed in accordance with the following.
1. IDENTITY AND CONTACT DETAILS
Data controller Rimadesio S.p.A.
VAT number 00685930968
via Furlanelli 96 – 20833 Giussano (MB)
[email protected] | Tel: +39 0362 3171
2. PURPOSE OF PROCESSING AND LEGAL BASIS
Subject to acquisition of your express consent (art. 6 paragraph 1 letter A GDPR), your personal data may be used for the purpose of sending you informative and commercial materials illustrating Rimadesio S.p.A. products and services.
In the event that you request a quotation, your personal data may also be processed in order to handle and manage such request. The processing in question is lawful for the purpose of processing pre-contractual measures taken at the request of the Data Subject (Art. 6 paragraph 1 letter B GDPR).
The data resulting from filling in our forms or obtained from the estimates requested, from interest shown in our products and from the type of your purchases, could be used, subject exclusively to your free, optional, specific and explicit consent (art. 6 paragraph 1 letter A GDPR), also to identify and define your tastes, preferences, habits, needs and consumption choices (so-called ‘profiling’).
3. COMMUNICATION OF DATA TO PARTIES OTHER THAN THE DATA CONTROLLER
Your personal data may be sent to:
A. Processors under the authority of the data controller;
B. Processors designated by the data controller.
Any designated Data Processors will be bound to confidentiality and data security by means of a contract. An updated list of Data Processors can always be requested from the Data Controller.
4. DATA TRANSFER TO THIRD COUNTRIES
It may also be necessary to communicate your personal data outside the European Union, through the guarantee of the adequacy decision (Art. 45 GDPR), or the European Commission’s standard contractual clauses (Art. 46(2)(C) GDPR), which can be obtained from the Data Controller at the contact addresses listed above.
5. DATA RETENTION PERIODS
– Personal data acquired for the purpose of handling your request for a quote will be processed for a period of time not exceeding 12 months.
– Personal data acquired for the purpose of sending informative and commercial materials will be retained until you request to stop using the service and in any case for a period not exceeding 24 months from the acquisition of your consent.
– Personal data processed for profiling purposes will be kept for 12 months from the registration of the data, i.e. until your consent is revoked.
6. RIGHTS OF THE DATA SUBJECT
In order to assert your rights, as stipulated in Article 15 of the GDPR et seq., you may get in touch with the Data Controller or the Data Protection Officer, who can be contacted using the contact details given above, identifying yourself and specifying the nature of your request or problem.
You may exercise your rights of access, rectification, cancellation, restriction, and opposition to the processing of your data.
The data subject has the right to withdraw consent to the processing of his/her personal data at any time, by contacting Rimadesio S.p.A. at the contact data indicated above. Pursuant to Article 7 of the EU Regulation, revocation of consent shall not affect the lawfulness of processing based on consent given before revocation.
You also have the right to lodge a complaint with the relevant supervisory authority (the Garante della Privacy), based in Piazza Venezia 11 – 00186 Rome – Tel. 06.696771 – E-mail: [email protected]
July 01, 2024