Short privacy notice on the processing of personal data pursuant to Art. 13 of EU Regulation 2016/679
We hereby inform you that your personal data are processed by our company. The processing is carried out in compliance with the criteria established by the European Regulation on personal data protection, Regulation (EU) 2016/679 (hereinafter “GDPR”), and any other related national legislation, provisions, or authorizations issued by the competent Authority. According to the aforementioned regulation, processing must be based on principles of fairness, lawfulness and transparency, and on the protection of your confidentiality and rights.
1) The Data Controller is SAVIPLAST SRL, represented by its legal representative pro tempore, with registered office at Via E. Fermi, 33 – 36045 Lonigo (VI), Italy, tel.: +39 0444 83 52 30 – Email: info@saviplast.com.
2) Purpose of processing
The data collected will be used for the following purposes:
-
Sending requested information, for which explicit consent is not required (Art. 6(1)(a) GDPR);
-
Commercial marketing activities, for which explicit consent is required (Art. 6(1)(a) and (f) GDPR).
3) Processing methods
Personal data are processed by the Data Controller and duly appointed data processors for the proper fulfillment of the purposes indicated in point 2), using electronic tools and paper archives, as well as security measures designed to ensure the confidentiality of personal data and prevent unauthorized access.
4) Disclosure of data
Data may be disclosed to duly appointed internal and external parties who carry out activities on behalf of the Data Controller.
No transfer of data to non-EU third countries is envisaged, nor is any public dissemination planned (e.g. social networks, websites, etc.). The Data Controller does not rely exclusively on automated decision-making processes to achieve the purposes described in this notice and does not carry out profiling.
5) Data retention period
The Data Controller will process personal data for the time necessary to fulfill the above purposes and, in any case, for no longer than two years after the termination of the relationship for the purposes indicated.
6) Rights of the data subject
The data subject has the right to request from the Data Controller access to their personal data, rectification or erasure of the same, restriction of processing concerning them, or to object to processing, as well as the right to data portability.
Requests may be made by email, fax, or registered mail with the subject line: “request by the data subject”, specifying the right the data subject intends to exercise (erasure, rectification, portability, right to be forgotten), together with a valid email/PEC address to which the response should be sent.
The Data Controller, or any person appointed by it, will respond within 30 days from receipt of the request. If the response is particularly complex, this period may be extended by an additional 30 days, with prompt notice to the data subject.
If you believe it appropriate to assert your rights, you may lodge a complaint with the competent supervisory authority, namely the Italian Data Protection Authority (Garante per la protezione dei dati personali), located at Piazza Venezia, 11 – 00187 Rome, Italy, email: garante@gpdp.it
