Privacy Policy

This English version is provided for convenience only. In case of discrepancies, the Italian version prevails.

PRIVACY NOTICE FOR CUSTOMERS / SUPPLIERS – INFORMATION PROVIDED PURSUANT TO ARTICLES 13 AND 14 OF EU GENERAL DATA PROTECTION REGULATION 2016/679 (GDPR)

Source of Personal Data

The personal data processed by Manifatture Vallosio s.n.c. di Vallosio G.A. & C. are collected directly from the data subject or at the offices of Manifatture Vallosio s.n.c. di Vallosio G.A. & C.

1. Data Controller

The data controller is Manifatture Vallosio s.n.c. di Vallosio G.A. & C., via I Maggio, 7 – 10087 – Valperga (TO) Italy

2. Purposes of Data Processing

Personal data are processed in the course of the normal activity of issuing and managing payments and collections (as well as related and ancillary activities) and for the following purposes:

• purposes strictly related and instrumental to the management of relations with the data subject (e.g. acquiring preliminary information before entering into contracts, carrying out operations on the basis of the obligations arising from the contract entered into with the data subject, etc.);
• purposes related to obligations arising from laws, regulations and EU legislation, as well as from provisions issued by authorities empowered to do so by law and by supervisory and control bodies;

3. Recipients of Personal Data – Disclosure

In order to carry out part of its activities, Manifatture Vallosio s.n.c. di Vallosio G.A. & C. also relies on external parties. For this purpose, the data subject’s personal data may be disclosed to the following categories of recipients:

• Parties involved in carrying out the work necessary for the performance of the existing relationships with the data subject;
• Parties involved in the control and optimisation of the activities of Manifatture Vallosio s.n.c. di Vallosio G.A. & C. (e.g. auditing firms and consultants), in the control of financial risk and fraud, or in debt collection.

The parties carrying out the above types of activities, to whom the data may be disclosed, will use the data as “processors” pursuant to Article 28 GDPR. The measures designed to guarantee the confidentiality of personal data naturally remain in place. In order to answer and satisfy any customer request and for any technical or organisational communication, a list of these parties is available at the offices of Manifatture Vallosio s.n.c. di Vallosio G.A. & C.;

Subject to explicit consent, for sending informative or promotional communications, including commercial ones, advertising material and/or offers and services by post, fax, internet, telephone, e-mail or SMS by Manifatture Vallosio s.n.c. di Vallosio G.A. & C. or by natural and/or legal persons cooperating in the commercial activities of Manifatture Vallosio s.n.c. di Vallosio G.A. & C. and/or by parent, subsidiary or associated companies;

Subject to explicit consent, for marketing purposes where the user has given specific and free consent (Art. 7 GDPR).

Dissemination of Personal Data

Personal data are not disseminated.

Categories of Data Processed

The data processed by Manifatture Vallosio s.n.c. di Vallosio G.A. & C. are personal data (identification, tax, contact and availability data).

Transfer of Data to a Third Country

The data processed for the purposes indicated above may be transferred to other countries both within and outside the EU.

Data Retention Period

The data processed will be kept for the minimum period necessary to achieve the purposes indicated above. In particular, data relevant for tax purposes will be kept for the period required by current national legislation (currently 10 years);

At the end of this period, the data will be anonymised or deleted where technically possible.

Lawfulness, nature of the provision of data and consequences of refusal

Providing the data is a contractual obligation and is essential to pursue the purposes of the processing indicated above in points II A) B) C). Failure to provide the data subject’s data would make it impossible to fulfil the obligations arising from the contract and from legal provisions. Pursuant to Article 6 GDPR, the processing is aimed at the performance of a contract to which the data subject is party or at the performance of pre-contractual measures taken at the request of the data subject, and at compliance with a legal obligation to which the controller is subject.

Providing personal data is optional for the purposes referred to in points D) and E), and refusing consent has no consequences.

Methods of data processing

In relation to the purposes indicated, personal data are processed, in compliance with the law and with confidentiality obligations, by means of manual processing, IT and telematic tools, with logic strictly related to those purposes and, in any case, in such a way as to guarantee the security and confidentiality of the data (also when remote communication techniques are used).

Rights of the data subject

The data subject has the right to request from the data controller access to their personal data (Art. 15 GDPR), their rectification (Art. 16 GDPR), their erasure (Art. 17 GDPR) and the restriction of their processing (Art. 18 GDPR); they also have the right to object to the processing and to request data portability (Art. 20 GDPR) by contacting: Manifatture Vallosio s.n.c. di Vallosio G.A. & C., via I Maggio, 7 – 10087 – Valperga (TO) Italy [email protected]

The data subject has the right to lodge a complaint with a supervisory authority, the Italian Data Protection Authority (Garante Privacy) www.garanteprivacy.it

No automated decision-making, including the profiling referred to in Art. 22 GDPR, is used.