INFORMATION ON PERSONAL DATA PROTECTION, PURSUANT TO ART.13 GDPR 2016/679

Dear Sir/Madam,

We wish to inform you that European Regulation no. 2016/679 (GDPR) provides for the subject who processes personal data must inform the data subject (in other words, the person the data refers to) regarding some elements qualifying processing, which must be carried out correctly, lawfully and transparently, protecting the confidentiality and rights of the data subject. Pursuant to Art. 13 of the aforementioned Regulation, we hereby provide you with the following information.

General principles of processing

Data will be collected, registered, organised, filed, consulted, processed, modified, selected, extracted, compared, used, interconnected, blocked, communicated, cancelled and destroyed and all this will be carried out by the data controller, its managers and directors and subjects authorised to process such data. Data will be processed in a lawful, correct and transparent manner; it will be collected for pre-determined, explicit and legitimate purposes and processed using methods compatible with such purposes; it will be appropriate, pertinent and limited to what is necessary for the purposes for which it was processed, exact and updated; it will be processed with maximum confidentiality, mainly using electronic and computerised tools and stored on both computer and paper supports, as well as on any other type of appropriate support, in full compliance with the principles dictated by the European Regulation on matters relating to personal data protection, the provisions issued by the Supervisory Authorities and, in any case, in such a way as to guarantee appropriate security, including protection, using appropriate technical and organisational means, from non-authorised or illegal processing or from even accidental loss. Data shall be retained in such a way as to permit the identification of the data subject for the time strictly necessary to fulfil the purposes for which it was collected and processed.

1. The data controller is La Galvanina S.p.A. located in Rimini (RN) at 2, Via della Torretta, VAT no. 00142010404. In order to exercise the rights provided for by the Regulation and for any request relating to your personal data, please contact the data controller by writing to the following email address: provacy@galvanina.com

2. Purposes

The data is collected and processed for the following purposes:

a) to sending information and promotional and/or commercial communications concerning new products or updates and news on existing products and/or promotional events organised by La Galvanina S.p.A. even by sending newsletters.

3. Processing methods

The data collected shall be processed exclusively by authorised subjects using both automated tools and others, adopting methods designed to guarantee the security and confidentiality of the data and for the time necessary to achieve the purposes for which it was collected. For the purposes described above, providing the said data is optional. Any refusal to provide your personal data, either in total or in part, or failure to grant consent to processing could imply the impossibility for La Galvanina S.p.A. to provide the services indicated under “Purposes”. Personal data pursuant to this information sheet is not processed using automated decision-making processes.

4. Type of data collected

The data collected for the purposes mentioned above is common personal data such as: name, surname, email address, company name.

5. Recipients or categories of recipients of personal data

The personal data the undersigned company comes into possession of is not subject to disclosure. It may be subject to communication within the Company itself and may come to the knowledge of the authorised data processors and data processors appointed by La Galvanina S.p.A. Data may also be communicated to:

6. Period of retention of personal data

The personal data you provided will be retained by the undersigned company for 24 months and in any case, in compliance with the provisions of existing applicable legislation concerning civil, fiscal and administrative matters on the retention of data. A longer period of storage of personal data may be determined by requests made by the Public Administration or by another judicial, governmental or regulatory body or by the participation of the undersigned company in legal proceedings that involve the processing of personal data provided by you. Data will be used for marketing purposes for a maximum period of not more than 24 months.

7. Transfer of personal data to third countries

La Galvanina S.p.A. will not transfer your personal data to third countries outside the European Union.

In any case, should this occur, La Galvanina S.p.A. guarantees that the aforementioned transfer will be:

Any exceptions to the above may only be made in compliance with Art. 49 of the GDPR.

8. Rights of the data subject

The data subject has the right to obtain access to personal data from the data controller. In particular, the data subject has the right to obtain information on: a) the origin of personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out using electronic instruments; d) the updating or rectification of data; e) the cancellation or limitation of the processing of relevant data (transformation into anonymous form, blocking of data processed unlawfully, including data whose retention is not necessary for the purposes for which the data was initially collected or subsequently processed). The data subject also has the right to data portability. The data subject has the right to revoke consent to the processing of personal data where provided for. In any case, the revocation of consent to processing does not affect the lawfulness of processing based on the consent granted prior to revocation.