1. DATA CONTROLLER
Data Controller: F.lli Amoretti di Lorenzo di Piccardo & Savoré Srl
Registered Office/ Operational Headquarters Address: Via Lucinasco 2 18027 CHIUSAVECCHIA (IM), ITALY
Telephone: 0183.293793 – Fax: 0183.530905
2. TYPES OF DATA COLLECTED
The company collects personal details to identify users (name, surname, tax number, etc.), address, telephone number, email address and any other data necessary to achieve the processing purposes listed in point 3. F.lli Amoretti di Lorenzo does not process special categories of data.
3. PURPOSE OF DATA PROCESSING
The company collects and processes personal data exclusively for the following purposes:
a) to provide a quote for the service the customer is interested in;
b) to finalise, manage and perform the service contract requested by the customer;
c) to organise, manage and perform the service requested by the customer and, specifically, comply with the contractual obligations by performing any act, multiple acts or operations necessary to this end;
d) to perform any obligations connected with or instrumental in performing the contract at all public or private entities;
e) to comply with legal obligations and provide the fiscal documents relevant to the service that the user intends to purchase;
f) to make promotional communications, carry out customer surveys, marketing activities or provide commercial information with the aim of rewarding customers for any purchases, by sending leaflets, promotional material via post, email, sms, mms or newsletter.
4. IS PROVIDING PERSONAL DATA MANDATORY?
The provision of personal data with reference to the purposes in point f) is optional, as data is collected by the company to optimize its activity. Refusing to provide these data does not affect the execution of the contract, however, the user will not be able to take advantage of promotions and discounts offered by our company.
5. LAWFULNESS OF PROCESSING
The lawfulness of the processing of the user’s personal data for the purposes in point f) is based on the consent provided by the user.
6. DATA RETENTION PERIOD
The customer’s data will be retained for the time strictly necessary to achieve the purposes for which they were collected and processed. Specifically, data collected and processed for accounting purposes relevant to the service requested by the customer, will be retained for 10 years from the date of the last registration, in compliance with article 2220 of the Italian Civil Code; in no case the data will be used for other purposes other than saving accounting records.
7. DATA PROCESSORS AND POSSIBLE DATA TRANSMISSION TO THIRD PARTIES
The user’s personal data will be processed at the Data Controller’s registered office and operational base by administrative personnel specifically appointed to process the data, only when necessary to perform their duties and to carry out the operations strictly necessary to perform said duties.
Except for communications and disclosures required to comply with legal or contractual obligations, the data provided will be used only to comply with the law and may be communicated – only for credit protection purposes and to improve the management of the individual business relations – to:
– credit recovery and insurance companies;
– banks for commercial information;
– trade associations for consulting and trade union activities;
– consultants and service companies;
– professionals for tax and accounting purposes.
In compliance with article 43 of the Data Protection Code and article 44 of the GDPR, E. Amoretti di Lorenzo may transfer personal data to countries within the European Union and to Third Parties located in countries outside the European Union or the European Economic Area. In this case, E. Amoretti di Lorenzo ensures that adequate measures will be implemented with the foreign countries receiving the data (such as the inclusion of standard contractual clauses approved by the EU) in order to guarantee the same level of data protection as European regulations.
In any case, personal data will not be disclosed.
8. AUTOMATED DECISION PROCESSES AND PROFILING
E. Amoretti di Lorenzo processes data using a semi-automated decisional process that consists in the Data Controller (or the employees appointed as data processors) entering the data (in electronic format) of customers who have provided their consent to the processing for the purposes in article 3, letter f) above, in a mailing list for marketing and commercial purposes. Said activity consists in sending leaflets, promotional materials by post, email, sms, mms, newsletter to the data subjects in question; however, the company does not carry out any profiling process analysing and categorising customers in groups based on their preferences, behaviour or personal situation.
9. DATA SUBJECT RIGHTS
9.1. RIGHT TO ACCESS AND DATA PORTABILITY
Users, at any time, have the right to obtain confirmation from F.lli Amoretti di Lorenzo as to whether or not their personal data are being processed, in compliance with article 15 of Regulation EU 679/2016 (GDPR).
Users, at any time, have the right to obtain a copy of all their personal data, which may be transmitted to another Data Controller, in compliance with article 20 of Regulation EU 679/2016 (GDPR).
9.2. RIGHT TO RECTIFY
Users, at any time, have the right to obtain the prompt rectification of any inaccurate personal data, in compliance with article 16 of Regulation EU 679/2016 (GDPR).
9.3. RIGHT TO LIMIT THE PURPOSES OF PROCESSING
Users, at any time, have the right to ask E. Amoretti di Lorenzo to limit the purposes for which their personal data are processed, in the following cases:
a. when disputing the accuracy of the data, for a period of time that will allow F.lli Amoretti di Lorenzo to verify that the data are correct;
b. if data is processed unlawfully and the user objects to the deletion of their personal data and requests a limitation of their use; or
c. if F.lli Amoretti di Lorenzo no longer requires the personal data for processing purposes, but the user requires them for the assessment, exercise or defence of legal claims.
9.4. RIGHT TO DELETE
Users have the right to promptly request that their personal data are deleted, in compliance with article 17 of Regulation EU 679/2016 (GDPR), and F.lli Amoretti di Lorenzo shall promptly delete the personal data, when the following circumstances apply:
a. if the personal data are no longer needed for the purposes for which they were collected or processed;
b. if the consent on which the processing is based is revoked, when there is no other legal base for the processing;
c. if the user objects to the processing, in the cases in which it is linked to direct marketing;
d. if the data was processed unlawfully; or
e. if the data must be deleted to comply with a national or European legal obligation.
9.5. RIGHT TO OBJECT
Users, in accordance with article 21 of Regulation EU 679/2016 (GDPR), have the right to object to the processing of their personal data, at any time, for specific personal reasons, in compliance with article 6, paragraph 1, letters e) or f), including profiling based on said provisions.
The Data Controller shall stop processing the user’s personal data unless they can prove they have legitimate reasons for the processing that prevail on the user’s rights and freedoms, or if necessary for the establishment, exercise or defence of legal claims.
In accordance with article 77 of Regulation EU 679/2016 (GDPR), without prejudice to any other administrative or judicial remedy, users may at any time complain with the supervisory authority (Data Protection Authority – www.garanteprivacy.it) about how E. Amoretti di Lorenzo collects and processes their personal data.
I, the undersigned,___________________________________________________ Tax Number: ______________________________________
_______________, on _________________
This policy contains information on how cookies are used on the website www.amorettidilorenzo.it, in accordance with the provision of the Data Protection Authority, of 8 May 2014, “Simplified Arrangements to Provide Information and Obtain Consent Regarding Cookies”, pursuant of Art 13 of the Data Protection Code (Legislative Decree No. 196/2003).