Privacy Notice pursuant to Articles 13 and 14 of EU Regulation 2016/679
Dear Customer
Golfera in Lavezzola S.p.A., acting as Data Controller or Data Processor, wishes to inform you that EU Regulation 2016/679 provides for the protection of individuals and other entities with regard to the processing of personal data.
In accordance with the aforementioned regulation, the processing of personal data provided by you or otherwise collected will be based on the principles of fairness, lawfulness and transparency, and the protection of your privacy and your rights.
Pursuant to Articles 13 and 14 of the Regulation, we therefore provide you with the following information:
Identity and contact details of the Data Controller.
The Data Controller is Golfera in Lavezzola S.p.A., in the person of its pro-tempore legal representative, with registered office at Via dell’Industria 6/8, Lavezzola – VAT No./Tax Code: IT00699130399.
Contact details of the Data Protection Officer
Golfera in Lavezzola S.p.A. has appointed a Data Protection Officer who can be contacted at the company’s registered office or by email at privacy@golfera.it
Purposes and legal basis of the processing
The data you provide will be processed for the following purposes:
– performance of the services/orders requested;
– accounting and administrative management of contractual relationships;
– activation of any insurance cover;
– statistical analysis;
– commercial communications and/or updates regarding the products and/or services requested;
– institutional communications
Any processing of special categories of personal data pursuant to Article 9 of EU Regulation 2016/679 will be carried out only if strictly necessary for specific services requested.
For the purposes in question, the provision of data is optional, but constitutes a necessary and indispensable condition for the provision of the requested services/products.
Possible categories of recipients of personal data.
The data provided may be subject to any other appropriate processing operations relating to the achievement of the aforementioned purposes, including through:
– specifically appointed persons such as consultants, employees and other authorised collaborators for the processing necessary or connected to the purposes in question;
– third parties who perform or provide specific services strictly necessary for the purposes in question, such as marketing consultancy firms, IT service providers, suppliers of software solutions, web applications and storage services (including those provided via cloud computing systems), insurance companies, professionals and credit institutions, all in compliance with the relevant legal provisions on data security.
Retention periods for personal data.
Personal data provided or otherwise acquired will be stored in the information systems and/or paper archives of Golfera in Lavezzola S.p.A. for the entire duration of the services requested and, in any event, for no longer than the periods required by applicable civil and tax legislation.
Rights of the Data Subject.
You may at any time access your personal data, request its rectification or erasure in accordance with Articles 15, 16 and 17 respectively of EU Regulation 2016/679.
Pursuant to Articles 18, 20 and 21 of the same Regulation, you also have the right to request the restriction of processing, the portability of your data (where applicable) and to object, on legitimate grounds, to their processing.
The above rights may be exercised directly with Golfera in Lavezzola S.p.A., in relation to the processing carried out by the company in its capacity as Data Controller, by means of:
email to the address: privacy@golfera.it
post: Golfera in Lavezzola S.p.A. Via dell’Industria 6/8 Lavezzola – 48017 Ravenna
Further information, including the contact details of any data processors, may also be requested using the same contact details.
Articles 15 to 23 of the EU Regulation can be consulted at this link: http://eur-lex.europa.eu/legal-content/IT/TXT/HTML/?uri=CELEX:32016R0679&from=IT
Complaint to a Supervisory Authority.
If no response is received to a request in which the data subject has exercised one or more of the above rights within one month of the data subject submitting the request, or if the response is not satisfactory, the data subject may assert their rights before the courts or by contacting the Data Protection Authority.
