Privacy Notice pursuant to Article 13 of EU Regulation 679/2016
Pursuant to Article 13 of Legislative Decree 196/2003 and EU Regulation 679/2016, we hereby inform you that the Processing of your personal data, including sensitive data, is carried out in compliance with your rights, your fundamental freedoms and, in any case, in observance of the minimum security measures required by law. Therefore, pursuant to the aforementioned legislation, we provide you with the following information.
1. Purpose of the processing
Personal and sensitive data that the Company may obtain will be processed exclusively for the proper execution of the sales contract concluded between the parties and for the fulfilment of all accounting, tax and any other obligations provided for by law in relation thereto. The data may also be processed in order to offer you the best after-sales service,
where necessary.
Finally, the data may be processed for marketing purposes to:
a) Send promotional advertising material by email or other indicated channel;
b) conduct opinion surveys and market research anonymously;
c) Send personalised promotional and commercial communications to registered users (communications about products that we believe may be of interest to the user based on the analysis of purchases made and information on the user’s browsing on the Site, such as products viewed or added to the basket);
d) personalise Site content for marketing purposes (we display on the Site information about products that we believe may be of interest to the user based on the analysis of purchases made and information on the user’s browsing on the Site, such as products viewed or added to the basket);
e) analyses and statistical surveys to improve the Site’s commercial offer and services (that is, to make use of the Site easier for users and improve their purchasing experience);
2. Legal basis of the Processing
the Processing is based on your express consent.
Where the data subject is party to a sales contract, the processing is also based on the fulfilment of the obligations related thereto, as well as on compliance with the legal obligations to which the data controller is subject.
3. Source of the data
The data may be collected from the data subject.
4. Automated processes
The Processing does not consist of any automated decision-making process. Where relevant, it is specified that a newsletter concerning the Company’s activities will be sent exclusively to customers who have given specific consent, with the possibility to unsubscribe at any time.
5. Mandatory nature and consequences of refusing the data
The provision of the data and the acquisition of consent, although optional, are necessary requirements for the execution of the contract entered into between the parties or to allow you to benefit from the commercial and promotional initiatives dedicated to you, referred to in point 1 above.
6. Method of Processing
Processing and storage may take place both by electronic and paper means and may be organised in databases or archives, for the time strictly necessary for the purposes of collection. The data will be kept at the Company’s premises and on Amazon Web Services cloud servers. Under no circumstances will user lists containing personal data be disclosed, sold, transferred or rented to
third parties.
7. Retention period
The above personal data will be entered in the Company’s archives and will remain there in accordance with the legal time limits and, where applicable, until a request for amendment or deletion by the data subjects. The Company stores and processes personal data for the time necessary to fulfil the purposes indicated. Subsequently, the personal data will be stored, and not further processed, for the time established by the applicable civil and tax regulations in force.
8. Recipients of the Data (Disclosure)
The data may be disclosed exclusively to subsidiaries, parent companies, affiliates or companies otherwise connected to the Data Controller, including outside the European Union, always for the same Processing purposes indicated in this notice and in compliance with the same privacy policy. In particular, the data may be disclosed to: Officine Gullo INC and Officine Gullo LTD. In addition, the data may be disclosed, exclusively for the proper execution of the sales contract, to area agents selected according to the customer’s place of residence or to installation service providers in the countries where this is envisaged. Under no circumstances may the data be disseminated.
9. Rights of the Data Subject
At any time you may exercise your rights vis-à-vis the Data Controller, pursuant to Article 7 of Legislative Decree 196/2003 and EU Regulation 679/2016; in particular, you may obtain confirmation as to whether or not personal data concerning you exist and access to them, verify their accuracy or request their integration, updating or rectification. Pursuant to the same article, you also have the right to request erasure, anonymisation or blocking of data processed in breach of the law, as well as to restrict or object, for legitimate reasons, to the Processing, by sending an email to info@officinegullo.com or by calling +39 055 656 0324. Likewise, you may also revoke the consent given at any time, and request and obtain the portability of the data themselves.
10. Complaint
You also have the right to lodge a complaint with the Italian Data Protection Authority, in the ways and forms provided for by law, in all cases where you believe you are entitled to do so.
11. The Data Controller
Officine Gullo srl, with registered office at Via Della Torricella no. 29, Bagno a Ripoli (50012-FI), contact details info@officinegullo.com.
12. Data Processors
Dr Andrea Gullo and Pietro Gullo. Contact details info@officinegullo.com.