PRIVACY DISCLAIMER

PURSUANT TO REGULATION (EU) 2016/679 (“GDPR”) ARTICLES 13 AND 14 AND SUBSEQUENT NATIONAL ADJUSTMENT RULES

This document (“Information”) intends to provide you with information regarding the processing of the information, as specified below, which will be provided by you or otherwise available at our facility and which will be processed by the same and / or by other subjects identified for the purposes indicated below. The disclosure, in particular, is made pursuant to EU Regulation no. 679/2016 (“GDPR”) and subsequent national adaptation rules (together with the GDPR hereinafter “Applicable Regulations”).
Identity and contact details of the Data Controller
The data controller, pursuant to articles 4 and 24 of Reg. UE 2016/679, is Flavio Prattico as administrator and legal manager of GIPAT Srl, info@polyshaper.eu, in the person of pro-tempore legal representative, in the person of pro-tempore legal representative (hereinafter “Owner”).

Contact details of the Data Protection Officer (so-called “RPD-DPO”)

The Data Controller does not carry out activities that require the designation of the figure of the Data Protection Officer.

Purpose and legal basis of the processing

The Personal Data collected will be processed for the purposes and under the legal bases listed below:

Purpose Legal basis for the processing

point 3, lett. a): for the management of your contractual relationship or to execute pre-contractual measures (such as, for example, the request for information or that of a quote). In this case, you are free to provide your personal data; however, failure to provide it will not allow you to establish the aforementioned relationship and satisfy your request. processing is necessary in relation to the execution of a contract of which you are a party point 3, lett. b): subject to your specific consent, to send them (i) promotional communications relating to the Holders and (ii) communications relating to events organized by the Data Controllers (hereafter “marketing purposes”) your consent Categories of personal data processed (pursuant to art.14) Within the limits of the purposes and methods described in this Policy, they may be process information that can be considered as “Personal Data”, which includes your general information, your contact details (such as, for example, mobile phone number, e-mail address, etc.).

Recipients and categories of recipients

Personal data will not be disclosed, or will not be disclosed to indeterminate subjects. Instead, they may be communicated to well-defined subjects, in full compliance with legal requirements, for purposes strictly related to those previously indicated. Any access to your personal data is limited to the subjects authorized by the owners. The communication to the identified recipients, only if involved and functional, is linked to the achievement of the purposes referred to in point 3 above, therefore the personal data collected and processed may be: used anonymously for statistical purposes; made available to the Data Controller’s collaborators, as Managers or persons authorized to process personal data; disclosed to third parties, natural or legal, public administrations, professionals, law enforcement agencies, government agencies, regulatory bodies, courts or other public authorities authorized by law; if necessary, transferred to another Data Controller according to the provisions of the GDPR, also regarding the right to data portability. The information may also be communicated whenever the communication may be necessary to fulfill requests from the judicial or public security authorities. The collected data will in no case be disclosed. The list of data processors is available at the headquarters of the data controller.

Transfer of data abroad

The data will not be transferred outside the European Union.

Data retention period (determination criteria)

Below is a table containing the indications of the retention times (i.e. the determination criteria) of the Personal Data:

Purposes

Conservation times

point 3, lett. a): contract management for the entire duration of the relationship and subsequently for 10 years (ordinary prescription). point 3, lett. b): marketing purposes 5 years from collection, without prejudice to the possibility for the interested party to modify and / or revoke their will at any time

Data processing methods

The processing of Personal Data will take place through manual, IT or telematic tools, suitable to guarantee its security and confidentiality and will be performed by personnel duly trained to comply with the Applicable Regulations. There is no automated decision-making process. In addition to the cases in which it is necessary to contact you for needs related to the management of your position, where you consent to the processing of your data for the purposes referred to in point 3, lett. b), you can be contacted via e-mail, newsletter, sms, or through any equivalent electronic tool or by paper mail or operator call to all the addresses provided. If you prefer to be contacted only to one or some of these addresses, you can make an express written request addressed without formalities to the Data Controller.

Rights that are recognized to you

We inform you that you can exercise the rights recognized by the Applicable Regulations including, by way of example, the right:
to access their Personal Data and know its origin, purposes and purposes of the processing, the data of the subjects to whom they are communicated, the data retention period or the criteria useful for determining it (art.15);
to request its correction (art.16);
cancellation (“oblivion”), if no longer necessary, incomplete, erroneous or collected in violation of the law (art.17);
to request that the treatment be limited to a part of the information concerning you (art.18);
to the extent technically possible, to receive in a structured format or to transmit to you or to third parties indicated by you the information concerning you (so-called “portability”) or that which has been voluntarily provided by you (art.20); to oppose their treatment based on legitimate interest (art.21);
as well as to withdraw your consent at any time, in the event that this constitutes the basis of the treatment (the withdrawal of the consent does not however affect the lawfulness of the treatment based on the consent carried out before the revocation itself).

The aforementioned rights may be exercised by means of a written request addressed without formalities to the Data Controller at the contacts indicated in point 1.
The Data Controller must proceed in this direction without delay and, in any case, at the latest within one month of receiving the request. The term can be extended by two months, if necessary, taking into account the complexity and the number of requests received from the owners. In such cases, the Data Controller will inform you within one month of receiving your request and will inform you of the reasons for the extension.
We remind you that, where the response to your requests has not been satisfactory in your opinion, you can contact and lodge a complaint with the Guarantor Authority for the Protection of Personal Data (http://www.garanteprivacy.it/) in the ways provided for by the Regulations. Applicable.

Revision May 2018