INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF (EU) REGULATION 2016/679 (“GDPR”)
|
DATA CONTROLLER |
Elica S.p.A. |
|
|
DATA PROTECTION OFFICER (DPO) |
DPO can be contacted at: dpo@elica.com |
Elica S.p.A., as Data Controller, pursuant to article 13 of the GDPR, provides you, as a data subject, with information regarding the processing of personal data (hereinafter referred to as "Data") collected following your request to subscribe to the newsletter service on this web site (hereinafter referred to as " Web Site").
PERSONAL DATA PROCESSEDData includes, but is not limited to:
|
PURPOSES OF DATA PROCESSING |
LEGAL BASIS OF DATA PROCESSING |
DATA RETENTION PERIOD |
|||
|
Data will be used by the Company to e-mail commercial communications on offers, discounts, promotions and news about the Company's products, as well as customer’s satisfaction questionnaires and to conduct market research. |
Consent by the data subject, pursuant to art.6.1 lett. a) of GDPR. |
Data is processed for 5 years, unless consent is revoked. |
|||
After the expiry of the aforementioned retention periods, Data will be destroyed or rendered anonymous, subject to technical deletion and backup procedures.
PROVISION OF DATAThe provision of Data for processing purposes based on the consent by the data subject is optional. However, refusal to provide such Data will make it impossible for you to receive emails with the commercial communications requested. |
SUBJECTS AUTHORIZED TO DATA PROCESSINGData may be processed by the employees of the company departments responsible for pursuing the above-mentioned purposes, who have been expressly authorised to do so and who have received adequate operating instructions. |
DATA RECIPIENTSData may be communicated to independent data controllers and processed by subjects designated by the Company as data processors, which provide the Company with services related to the purposes of underlying document. |
TRANSFER OF PERSONAL DATA TO EXTRA- EUROPEAN UNION COUNTRIESData shall not be transferred to third countries and/or international organisations which are not within the European Union. |
RIGHTS OF THE DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITYThe data subject may exercise the rights in Articles 15-22 of GDPR and, in particular, may request to access their own Data for deletion, amendment of inaccurate data, integration of incomplete Data and limitation of data processing in the cases provided for by Article 18 of GDPR. The data subject may lodge a complaint with the competent supervisory authority (Art. 77 GDPR) and take legal action (Art. 79 GDPR)., as well. |
1 Pursuant to Article 18 of the GDPR, the data subject is entitled to obtain a limitation of data processing from the data controller, in one of the following cases:
(a) the data subject disputes the accuracy of personal data, for the period necessary to the controller to verify accuracy of such personal data;
(b) data processing is unlawful and the data subject opposes the cancellation of personal data and instead requests to limit the use of the same;
(c) although the data controller no longer needs the personal data for processing purposes, such personal data is necessary to the data subject to ascertain, exercise or defend one of their rights in a Court of Law;
(d) the data subject opposed to data processing pursuant to Article 21(1), pending the verification as to whether the legitimate grounds of the data controller prevail over those of the data subject.
Should data processing be limited as pursuant to paragraph 1, such personal data shall, except for storage, only be processed with the consent of the data subject or to ascertain, exercise or defend one of their rights in a Court of Law or to protect the rights of another natural or legal person, or for reasons of substantial public interest of the European Union or of a Member State.
A data subject who obtained a limitation in data processing pursuant to paragraph 1, shall be informed by the data controller before such limitation is canceled.