PRIVACY NOTICE FOR THE PROCESSING OF PERSONAL DATA

As a “Data Subject,” i.e. the individual to whom the processed data refers, we inform you of the essential elements of data processing pursuant to Article 13 of EU Regulation 2016/679 (hereinafter “GDPR”) and applicable national legislation.

Purpose of Processing

Personal data is collected and processed for the following purposes:

• Compliance with legal obligations, including tax, fiscal, and anti-money laundering regulations;
• Establishment and execution of contractual relationships;
• Activities strictly related and instrumental to the initiation of such relationships, including pre-contractual information gathering;
• Management of customer relationships, including administration, accounting, orders, shipping, invoicing, services, and dispute management;
• Customer satisfaction analysis and internal statistical purposes.

Processing is carried out in accordance with the principles of fairness, lawfulness, transparency, and protection of your privacy and rights.

Personal data will be processed for the duration of the contractual relationship and, subsequently, for the fulfillment of legal obligations and possible future commercial purposes.

Methods of Processing

Data processing is carried out using both automated (electronic or digital) and non-automated (paper-based) methods, in compliance with applicable security and confidentiality regulations.

Place of Processing

Data is processed and stored at our headquarters:
Via Gaffarello 73A – 30036 Santa Maria di Sala (VE), Italy.

It may also be processed on our behalf by professionals or companies providing technical, development, administrative, or accounting services.

Nature of Data Provision

Some data is necessary for establishing or executing contractual relationships, while other data is optional.
Providing data required by law or contract is mandatory.

Consequences of Refusal

Failure to provide mandatory data may prevent the execution or continuation of the contract.
Where data provision is optional, refusal will not have such consequences but may limit the execution of related activities.

Data Disclosure

Without prejudice to legal obligations, your data may be disclosed to:

• Professionals, consultants, factoring companies, banks, debt collection agencies, credit insurance companies, commercial information providers, and transport companies;
• Public and private entities following inspections or checks (e.g., tax authorities, judicial authorities, labor inspectorates, social security institutions, Chambers of Commerce, etc.);
• Parties authorized by law to access such data.

Personal data is stored on servers within the European Union and will not be publicly disclosed or transferred.

If necessary, data may be transferred outside the EU in compliance with applicable laws and subject to standard contractual clauses approved by the European Commission.

Data Retention

Data will be stored as follows:

• For administrative, accounting, and contractual management purposes: 10 years, as required by Article 2220 of the Italian Civil Code;
• For contractual and commercial purposes: until the end of the contractual relationship.

Rights of the Data Subject

You may exercise your rights under Articles 15–22 of the GDPR at any time, including the right to:

• Access your personal data;
• Request rectification or erasure;
• Restrict processing;
• Obtain data portability;
• Object to processing, including for direct marketing purposes;
• Object to automated decision-making, including profiling;
• Withdraw consent at any time;
• Lodge a complaint with a supervisory authority.