Elica S.p.A.
Via Ermanno Casoli, n.2, 60044 Fabriano (AN)
PEC: elicaspa@sicurezzapostale.it
Phone: +39-07326101
(hereinafter referred to as “Company” or “Data Controller”)

DPO can be contacted at: dpo@elica.com

PERSONAL DATA PROCESSED

Data includes, but is not limited to:

• Personal data, such as first name, last name, place and date of birth;
• Contact data, such as address, telephone number, e-mail address;
• Registration data and access to the reserved area also obtained through the so-called "social login": You can register in the reserved area also using the credentials provided by the social network ‘Facebook’.

Specifically, the Company wishes to inform you about the interactions between the Web Site and the social login platform used by you for authentication. Authentication via Social Login is a useful and quick method for creating accounts for the purpose of registering and/or accessing the Web Site. The information associated with the account chosen by you to access the Web Site will be transmitted to the Company by the relevant social platform only upon your express and specific consent and will only include the following Data:
Facebook: name, profile picture (the Company does not use this Data), e-mail address

Data processing is necessary for meeting some specific requests made by the data subject. The legal basis for the processing is therefore the implementation of pre-contractual or contractual measures in which the data subject is a party, pursuant to Art. 6.1 lett.(b) GDPR.

Data provided will be stored for the time which is strictly necessary for the achievement of the purposes indicated herein. In any case, such duration shall not exceed 10 years.

Data processing is necessary for meeting some specific requests made by the data subject. The legal basis for the processing is therefore the implementation of pre-contractual or contractual measures in which the data subject is a party, pursuant to Art. 6.1 lett.(b) GDPR.

Data is processed for 10 years, unless consent is revoked upon request by the data subject.

Consent by the data subject, pursuant to art.6.1 lett. a) of GDPR.

Data is processed for 5 years, unless consent is revoked.

Data shall be processed for the whole duration of any litigation and within the enforceability term of appeals.

PROVISION OF DATA

Provision of requested Data in the fields marked with an asterisk (*) is necessary in order to meet the requests of the data subject and to use the services available on the Web Site. Therefore, refusal to provide such Data will make it impossible to register to and therefore access the Reserved Area of the Web Site . On the contrary, the provision of Data not marked with an asterisk (*) is purely optional, therefore, their partial or incorrect provision does not preclude the use of the services requested. Nevertheless, it is possible to proceed with the purchase even without Registration. It is understood that the provision of Data for processing purposes based on the consent by the data subject is optional. However, refusal to provide such Data will make it impossible for you to receive emails with the commercial communications requested.

DATA RECIPIENTS

Data may be communicated to independent data controllers and processed by subjects designated by the Company as data processors, which provide the Company with services related to the purposes of underlying document.

SUBJECTS AUTHORIZED TO DATA PROCESSING

Data may be processed by the employees of the company departments responsible for pursuing the above-mentioned purposes, who have been expressly authorised to do so and who have received adequate operating instructions.

TRANSFER OF PERSONAL DATA TO EXTRA- EUROPEAN UNION COUNTRIES

Data shall not be transferred to third countries and/or international organisations which are not within the European Union.

RIGHTS OF THE DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITY

The data subject may exercise the rights in Articles 15-22 of GDPR and, in particular, may request to access their own Data for deletion, amendment of inaccurate data, integration of incomplete Data and limitation of data processing in the cases provided for by Article 18 of GDPR.
Furthermore, should data processing be based on a consent or contract and performed by automated tools, the data subject has the right to receive the Data in a structured, commonly used and machine-readable format, and, if technically possible, to transmit it to another controller without any hindrance.
The data subject is entitled to oppose to the processing of their Data at any time, in a simple manner and free of charge, for reasons concerning a specific situation in the case of legitimate interest of the Data Controller
The data subject is entitled to revoke consent, at any time, by requesting unsubscription from the newsletter service by clicking on the unsubscribe link at the bottom of each email.
Such rights may be exercised by sending an email to the Data Controller at: privacy@elica.com .
Should data subjects intend to exercise their rights, then the Company may ask them to identify before handling their request.
The data subject may lodge a complaint with the competent supervisory authority (Art. 77 GDPR) and take legal action (Art. 79 GDPR)., as well.