Privacy Policy

Privacy Policy pursuant to Article 13 of EU Regulation No. 2016/679 (hereinafter referred to as "GDPR").

The EU Regulation No. 2016/679 is designed to protect the confidentiality of personal data with a view to safeguarding the freedom and rights of data subjects, and as such, imposes a number of obligations on those who "process" personal information referring to other subjects. Among the most important obligations with which the law requires compliance is that of informing data subjects and obtaining their consent to processing the personal data in the cases specified, particularly for processing activities which involve the disclosure of data to other parties.

In light of the above, we would therefore like to inform you, pursuant to Article 13 of the GDPR referred to above, that the undersigned company collects and processes data concerning your company without your express consent (Art. 24 Lett. a), b), c) of the Privacy Code and Art. 6 Lett. b), e) of the GDPR) for purposes linked to the management of ordinary business relations, and specifically, for the compilation of lists of records, for the management of customer/supplier accounts, for invoicing and for creditor management, in order to fulfil all the obligations provided for by the regulations in force.

Your data may also be processed for statistical and market research purposes for internal use only; only with your specific and distinct consent (Articles 23 and 130 of the Privacy Code and Article 7 of the GDPR) will your data be used for the following marketing purposes:
- to send you - by email, post and/or text message and/or via telephone contact - newsletters, commercial communications and/or advertising materials on the products or services offered by the Data Controller, as well as customer satisfaction surveys on the quality of services provided;
- to send you - by email, post and/or SMS and/or via telephone contact - commercial and/or promotional communications from third parties.

The processing of your personal data is carried out by means of the operations referred to in Art. 4 of the Privacy Code and Art. 4 No. 2) of the GDPR, and more specifically: the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal data are processed using both paper and electronic and/or automated means.

The Data Controller shall conserve and process the personal data for the time required in order to fulfil the purposes referred to above, and in any case for no longer than 10 years from the termination of the relationship for administrative/accounting purposes, and for no longer than 2 years from the collection of the data for marketing purposes.

Data processing operations may be carried out using both computerised and manual instruments, taking all the precautions necessary in order to guarantee the security and confidentiality of the information.

Your data may also be disclosed to third parties, exclusively for technical and operational requirements that are strictly related to the purposes specified above, and more specifically, to the following categories of subjects:

a) bodies, professionals, companies or other organisations tasked by us with data processing operations related to the fulfilment of administrative, accounting and management obligations linked to the ordinary conduction of our business activities, including for credit recovery purposes;

b) public authorities and administrative bodies, for purposes related to the fulfilment of legal obligations;

c) banks, financial institutions or other organisations to which the transfer of the aforementioned personal data is necessary for the conduction of our business activities, with regard to our fulfilment of our contractual obligations to you.

In your capacity as data subject, you have the rights set out in Art. 7 of the Privacy Code and Art. 15 of the GDPR, or more specifically, the right to:

i. obtain confirmation as to whether or not personal data concerning you exist, even if these data have not yet been recorded, and to have these communicated to you in a clear, intelligible form;

ii. obtain an indication as to: (a) the origin of the personal data in question; (b) the purposes and methods of processing; (c) the software used, where the data processing is performed with the help of electronic instruments; d) the identification details of the data controller, data processors and the designated representative, pursuant to Article 5, Paragraph 2 of the Privacy Code and Article 3, Paragraph 1 of the GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated, or who may become aware of these data in their capacity as designated representatives in the territory of the State, or as data managers or processors;

iii. obtain: (a) the updating, correction, or where necessary, the integration of the data; b) the deletion, transformation into anonymous form or blocking of data processed in breach of the law, including data which does not need to be kept in relation to the purposes for which this information was collected or subsequently processed; c) a declaration that the operations referred to in points a) and b) have been brought to the attention of those to whom the data have been communicated or disseminated (including with regard to the content thereof), unless this proves impossible or involves a degree of effort that is clearly disproportionate to the right being protected;

iv. object, either in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even where this is relevant to the purposes for which it was collected; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material, or for carrying out market research or sending commercial communications, through the use of automated calling systems without an operator, either by email and/or through traditional marketing methods, i.e. via telephone and/or paper mail.

Please note that the data subject's right to object to data processing - as set out in point b) above - for the purposes of direct marketing by automated methods also extends to traditional marketing, and in any case, the data subject's right to object may also be exercised in part. Accordingly, the data subject may decide to receive only communications by traditional means, only automated communications, or neither of the two aforementioned types of communication.

Where applicable, you also have the rights set out under Articles 16-21 of the GDPR (Right to rectification, Right to be erasure (or the "right to be forgotten"), Right to restriction of processing, Right to data portability, Right to object), as well as the right to complain to the Data Protection Authority.

How to exercise your rights: you may exercise your rights at any time by sending:
- a registered letter with recorded delivery to GARANTE DELLA PRIVACY (Data Protection Authority)
- an email to the address: This email address is being protected from spambots. You need JavaScript enabled to view it.

The data controller is BOLDRINI CATUSCIA, with registered office in Via Cò de Bruni Levante 28, 46019 VIADANA Fraz. CICOGNARA (MN).

The updated list of data processors and persons tasked with data processing operations is stored at the registered office of the Data Controller.