CUSTOMER INFORMATION

INFORMATION ON THE PROCESSING OF PERSONAL DATA

(As per Articles 13 - 14 reg. EU 2016/679 and Italian Legislative Decree 196/2003 in light of Italian Legislative Decree no. 101/2018)

Dear Data Subject,

Below you will find some information which we are required to provide you with, not just to fulfill legal obligations, but also because treating the data subjects with transparency and fairness is a fundamental part of our activity.

The Controller of your personal data is GIANLUCA MECH S.P.A., whose responsibility is the legitimate and fair use of your personal data. Should you require any information or wish to make any request, you may contact the company at the following addresses:

Data Controller: GIANLUCA MECH S.P.A.

Registered office: Via Rodolfo Mech, 80 - 36020 Asigliano VI, IT

Contact details and addresses:

Tel: +39 0444
E-mail: privacy@gianlucamech.com
Website: www.gianlucamech.com

Data Protection Officer (DPO):
dpo@ gianlucamech.com

Data can be collected:

1.      Directly from the Data Subject

2.      From third parties through, by way of example, the sales point and/or a website user who uses the "send a gift" option.

 and processed for the purposes envisaged below together with the legal basis of reference:

Processing: Sales

Purpose

Data processed

Legal Basis

Duration

Promotional activities

Name, address or other personal identifiers; Contact details (telephone numbers, email addresses, etc.)

The data controller's legitimate interest in promoting its goods and services

10 years from the acquisition of data

 

Offering goods and services

Name, address or other personal identifiers; Contact details (telephone numbers, email addresses, etc.)

Data Controller’s legitimate interest to offer goods and services

10 years from the acquisition of data

 

 


Recipients:
Your data may be disclosed to social security and welfare institutions, banking institutions, independent professionals even in associated form, companies or businesses.  Notifications to some of the subjects above may be made only in the presence of a contractual and/or legal obligation.


Processing: Customer Relationship Management

Purpose

Data processed

Legal Basis

Duration

Customer management

Tax ID code and other personal identification numbers; Name, address or other personal identifiers; Contact details (telephone numbers, email addresses, etc.)

Contract

10 years from the year in which the last contract

Category of recipients: Your data will not be transferred to any recipient.


   Processing: Accounting

Purpose

Data processed

Legal Basis

Duration

Keeping accounting records

Tax code and other personal identification numbers; Name, address or other elements of personal identification; Economic, commercial, financial, insurance activities

Legal obligation

10 years from the year the document was drafted

Tax obligations

Tax code and other personal identification numbers; Name, address or other elements of personal identification; Economic, commercial, financial, insurance activities

Legal obligation

10 years from the year the tax document was issued


Category of recipients: Your data may be disclosed to consultants and/or independent or associated professionals.


Processing: Invoicing and DDT

Purpose

Data processed

Legal Basis

Duration

Shipment of goods

Name, address or other elements of personal identification

Contract

10 years from the year the transport document was issued


Category of recipients:
Your data may be disclosed to social security and welfare institutions, banking institutions, independent professionals even in associated form, companies or businesses.  Notifications to some of the subjects above may be made only in the presence of a contractual and/or legal obligation.


Processing: Quality Control

Purpose

Data processed

Legal Basis

Duration

Check on the quality of goods and services

Tax code and other personal identification numbers; Name, address or other elements of personal identification; Certificates of product quality

Data Controller’s legitimate interest to check the goods and services provided and received

2 years from the relevant year


Category of recipients:
Your data will not be transferred to any recipient.


Processing:
Customer Service

Purpose

Data processed

Legal Basis

Duration

Measuring customer satisfaction

Name, address or other elements of personal identification; Tax code and other personal identification numbers; Behavioural data, profiles of users, consumers, taxpayers, etc.; Contact details (telephone number, email, etc.)

Data Controller’s legitimate interest to improve its own reputation on the market

10 years from the acquisition of data


Category of recipients:
Your data will not be transferred to any recipient.


Processing: Management Control system

Purpose

Data processed

Legal Basis

Duration

Internal control services

Tax code and other personal identification numbers; Name, address or other elements of personal identification; Economic, commercial, financial and insurance activities; Job (current, previous occupation, curriculum vitae, etc.); Position in the company

Data Controller’s legitimate interest in the analytical audit of economic and financial management

10 years from the accrual-based accounting year

Category of recipients:
Your data will not be transferred to any recipient.



Processing: Marketing and transfer to Partners

Objective

Data processed

Legal Basis

Duration

Marketing (analysis and market surveys)

Tax code and other personal identification numbers; Name, address or other elements of personal identification; Economic, commercial, financial, insurance activities; Contact details (telephone number, email, etc.); data relating to behaviour, habits, education.

Consent

Until the withdrawal of consent

Sending information or advertising material by telephone or over the Internet

Tax code and other personal identification numbers; Name, address or other elements of personal identification; Economic, commercial, financial, insurance activities; Contact details (telephone number, email, etc.)

Consent

Until the withdrawal of consent

Consolidation of partnerships and finalization of the business offer

Tax code and other personal identification numbers; Name, address or other elements of personal identification; Economic, commercial, financial, insurance activities; Contact details (telephone number, email, etc.)

Consent

Until the withdrawal of consent


Recipients:
Your data may be disclosed to social security and welfare institutions, banking institutions, independent professionals even in associated forms, companies, or businesses.  Notifications to some of the subjects above may be made only in the presence of a contractual and/or legal obligation.

Duration: Besides the time needed for the statute of limitations of mutual rights to mature.

Amendments to the privacy policy herein

The Data Controller reserves the right to amend this privacy policy at any time, notifying data subjects. Should the changes to this privacy policy not be accepted, the data subject may ask the Data Controller to remove his/her Personal Data.

Unless otherwise specified.

Besides the information herein, in order to be sure that his/her data are processed in the fairest and most transparent manner possible, the data subject must know that:

·       Except for purposes based on consent, the provision of your data is necessary, otherwise it will not be possible to supply the goods or service requested

·       you have the right to ask the data controller to access your own personal data and to correct or erase them or to restrict processing of your data or to object to processing

·       if he/she has granted consent for one or more specific purposes, the data subject has the right to withdraw that consent at any time

·       he/she has the right to lodge a complaint with the following Supervisory Authority: the Italian Data Protection Authority.


Asigliano Veneto 17/12/2020
Gianluca Mech S.p.a.