INFORMATION PURSUANT TO ART. 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679

La Chiusetta, VAT number, Data Controller, informs you that your data will be processed in the ways and for the purposes indicated below.

The Data Controller is committed to protecting the privacy and confidentiality of Personal Data in accordance with the principles of fairness, legality, transparency, and safeguarding your rights.

1) TYPE OF DATA PROCESSED

We process personal data provided by you (name, email, business name, phone, etc.) when requests are made spontaneously, and data that are collected autonomously from the website.

  • Data provided by you: personal, identifying, and non-sensitive data you provide to make requests via email, through the contact form, or by phone about our products/services.
  • Data we collect automatically: anonymous data collected using cookies or similar technologies. For more information, please refer to the Cookie Policy below.

Note: Users under 16 years of age may not provide any personal data without the consent of parents or guardians.

 

2) PURPOSES AND LEGAL BASES OF PROCESSING

We will process your personal data:

A) to fulfill our contractual obligations; respond to your information requests; calculate a quote you requested; execute sales contracts for products or assignments for the provision of services; ensure you receive the necessary assistance regarding the purchased products and services.

B) to conduct aggregate statistical analyses on an anonymous basis to improve our services;

C) for administrative purposes and to comply with legal obligations such as those of an accounting, tax nature, or to respond to requests from the judicial authority.

D) in the case of sending a curriculum vitae, exclusively for selection purposes.

 

3) IS THE PROVISION OF DATA MANDATORY?

The provision of your data is always optional, but failing to provide it may make it impossible to carry out certain processes, such as those strictly related to the fulfillment of a contract or the provision of the requested services.

4) LOCATION, METHODS OF PROCESSING, AND RETENTION TIMES

The processing of your personal data is carried out through the operations indicated in art. 4 of the Privacy Code and in art. 4 no. 2) of the GDPR, specifically: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion, and destruction of data.

Your personal data are stored at the Data Controller’s premises and are subject to processing both in paper and electronic and/or automated form, with logic strictly related to the indicated purposes and in any case in a manner that ensures the security and confidentiality of the data. The data you provide are not saved on our website.

The Data Controller will process personal data for the time necessary to fulfill the purposes mentioned above and, in any case, for no longer than 10 years from the termination of the relationship for the purposes in point C and for no longer than 38 months from the collection of data for the purposes in point B.

5) ACCESS TO DATA

Your data may be made accessible for the purposes indicated in point 2:

  • to employees and collaborators of the Data Controller, in their capacity as internal processors and/or system administrators;
  • to third-party companies or other entities (website providers, cloud providers, e-payment service providers, suppliers, technical staff for hardware and software assistance, shippers and carriers, banks, professional firms, etc.) that carry out outsourcing activities on behalf of the Data Controller, in their capacity as data processors.

 

6) DATA TRANSFER

The data will not be disclosed, sold, or exchanged with subjects other than the data controller, processors, and appointees without your express and explicit consent.

7) YOUR RIGHTS

You have the right to know what personal data is being processed. In particular, you have the right of access, rectification, cancellation, as well as the right to data portability, the right to restrict processing, and the right to object to processing, if the conditions exist.

Below we provide a brief illustration of the rights you are entitled to concerning the processing of your personal data.

  • The right of access allows you to obtain confirmation of whether or not your personal data is being processed by the Data Controller and, if so, to access such data and the information related to it;
  • The right of rectification allows you to obtain the correction of inaccurate personal data concerning you without unjustified delay and, taking into account the purposes of the processing, to obtain the integration of incomplete personal data;
  • The right to deletion allows you to obtain the deletion of your data without unjustified delay (e.g., when your personal data are no longer necessary in relation to the purposes for which they were collected), subject to the exceptions provided for by applicable law (e.g., when the retention of your data is necessary for compliance with legal obligations applicable to the data controller). Deletion will be carried out within the technical timelines provided;
  • The right to data portability allows you, in certain circumstances provided for by applicable law, to receive your personal data in a structured, commonly used, and machine-readable format. You may transmit this data to another data controller, provided that this right is recognized to you under applicable law and provided that there is no risk of infringing upon the rights and freedoms of others;
  • The right to restrict processing allows you, in certain circumstances provided for by applicable law, to obtain restriction of the processing of your personal data. In such cases, the Data Controller may continue to process your data only in certain situations, for example, for the exercise of the right of defense or to protect the rights of another natural or legal person;
  • The right to object to processing allows you, in certain circumstances provided for by applicable law, to object to the processing of your personal data unless there are legitimate prevailing reasons, rights, or freedoms that allow the Data Controller to continue processing;

For more information about the processing of your personal data or to exercise your rights, please contact us.

 

8) CHANGES TO THE INFORMATION

This Information may be subject to changes. Therefore, it is advisable to regularly check this Information and refer to the most updated version.

Last update: October 2024

 

Back To Top