Re: Information note concerning personal data processing – European General Data Protection Regulation no 2016/679 (“GDPR”)/L. Decree no 196 dated 30.6.2003
GATTONI RUBINETTERIA SPA with registered office in Pella – fraz. Alzo – Via Pietro Durio 5, within the meaning and pursuant to L. Decree no 196 dated 30 June 2003 and subsequent modifications and integrations (Code regarding personal data protection or Privacy Code) and to the European General Data Protection Regulation no 2016/679 (“GDPR”), concerning the protection of natural persons in relation to personal data processing, as Data Controller of your personal details, hereby informs you that the quoted legislation envisages the protection of individuals and other subjects with regard to the processing of personal data and that the processing it carries out, including through organisational structures providing services to GATTONI RUBINETTERIA SPA, will be governed by the principles of correctness, lawfulness and transparency, protecting your privacy and your rights.
Your personal data will be processed according to the above quoted laws and regulations and the confidentiality obligations they provide for.
a) Data Controller: the Data Controller, pursuant to legislation, is GATTONI RUBINETTERIA SPA – Via Durio 5 – F.ne Alzo – PELLA (NO) represented by its Legal Representative.
b) Data Processor: the Data Processor for GATTONI RUBINETTERIA SPA is Remo Travaini
c) Purpose of the processing: your data will be processed for purposes connected to managing the contractual agreement in place; by way of example but not limited to, the following are included:
- Obligatory legal requirements for tax and accounting purposes
- User record management
- Litigation management
- Quality management
- Electronic payment instruments
For administrative, civil, accounting and tax purposes legislated by laws and regulations, the legal basis consists of the applicable laws – in particular those laid down by the civil code and the consolidated legislation - and the regulations of the Italian state and the European Union.
For other purposes as laid out above, the legal basis consists of the contractual provisions agreed between the parties.
Processing data required to fulfil these obligations is necessary in order to correctly manage the relationship and their provision is mandatory in order to carry out the above quoted purposes.
Furthermore, the Data Controller informs you that the incorrect or omitted communication of any obligatory information may make it impossible for the Controller to guarantee the congruity of said processing.
d) Processing methods: your personal data may be processed according to the following methods:
- Processing entrusted to third parties
- Creating databases
- Data collection by IT or telematic means
- Manual processing by means of paper filing
All processing is carried out in compliance with the above quoted legislation.
e) Potential recipients or categories of recipients of personal data: your data will be stored at our registered office and will be transmitted to those subjects involved in carrying out services necessary to correctly manage the contractual/commercial relationship between the parties.
Your data may be transmitted to third parties, in particular to:
- Public or private subjects to whom communication is mandatory or necessary in order to comply with legal obligations;
- or in any case required to manage the relationship.
- Banks and credit institutions.
f) Dissemination and data transfer: your data will not be disseminated nor will personal details be transferred.
2) ADDITIONAL INFORMATION
a) Data storage: your data may be stored for the time required to fully comply with the rights and obligations deriving from contractual agreements in place, pursuant to the applicable reference standard.
b) Rights: you have the right to obtain from the Data Controller the cancellation, communication, update, rectification, integration of your personal details, as well as in general the rights envisaged by articles 16, 17 and 18 of the European General Data Protection Regulation no 2016/679.
Moreover, you have the right:
to ask the Data Controller for access to your personal data, their rectification or cancellation or the restriction of the processing involved or to oppose their processing, in addition to the portability of the data;
to lodge a complaint with the Data Protection Supervisor, according to the procedures and instructions published on the Data Protection Supervisor’s official website;
exercising these rights is not subject to any formal constraint and is free of charge.
c) Obligatory data communication: providing personal data to the Data Controller is a prerequisite in order to correctly comply with the legal and contractual obligations arising from contractual agreements in place, with the purposes and methods highlighted above. Failure to provide these data will result in the Data Controller’s impossibility to carry out the processing necessary for the above quoted purposes.
d) Special categories of personal data: no special category of personal data will be processed.
Last update date: May 25th 2018.