This information relates to the processing of data carried out by Eurotessuti S.r.l with registered office in Via Pilastro 6 – 46019 Cogozzo di Viadana (MN), VAT No. 01862680202, email: firstname.lastname@example.org (hereinafter the “Data Controller”), also in compliance with EU Regulation 2016/679 (hereinafter the “GDPR”).
The Data Controller may process personal data relating to customers and suppliers, agents, consultants, whether data subjects and/or contractors, as defined by current legislation on personal data.
“Personal Data“: shall mean any information relating to an identified or identifiable natural person (“Data Subject”). An identifiable person is any natural person who can be identified, directly or indirectly, by a specific reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his/her physical, physiological, genetic, mental, economic, cultural or social identity. Personal data subject to Pseudonymisation, which could be attributed to a natural person through the use of additional information, should be considered Personal Data.
“Data Processor” means the natural or legal person who processes Personal Data on behalf of the Data Controller.
“Data Controller” means the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of Personal Data.
“Processing” means any operation or set of operations which is performed upon Personal Data or sets of Personal Data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, deletion or destruction.
1. Identity and contact details of the data controller
The data controller is Eurotessuti S.r.l.
As the Controller is established in Italy, no representative has been appointed.
2. Purpose of processing and legal basis of processing
Personal data will be processed for the following purposes:
a. to send direct marketing communications, newsletters, advertising material, by means of traditional contact systems and automated computer systems, including commercial or promotional communications by email or SMS, or for market research and analysis. In this case, the legal basis is the consent, expressed in accordance with this policy;
b. for the purposes related to relevant legal obligations, in this case the legal basis is the legal obligation of the Controller to process such personal data in accordance with the applicable national law.
3. Ways of expressing consent
Consent, where required, may be expressed:
4. Processing methods and logic
5. Source from which personal data originate
Only data provided in accordance with this policy will be processed. Personal data from publicly accessible sources will not be processed.
6. Recipients and possible categories of recipients of personal data
The following categories may be recipients of personal data:
7. Categories of data
Personal data will be processed. In no case may special data be processed pursuant to Article 9 of the GDPR.
8. Data transfer
The Controller intends to transfer personal data to a third country or international organisation. Such entities could be represented, by way of example, by:
The transfer of personal data to such subjects, if established in a third country or an international organisation, is carried out in the presence of an adequacy decision by the European Commission, which has verified that the third country, the territory or one or more specific sectors within the third country, or the international organisation in question guarantee an adequate level of protection of rights. In any case, the Data Controller – should it deem it appropriate – reserves the right to conclude specific separate agreements obliging such parties to adopt adequate security measures, including organisational measures, aimed at offering appropriate guarantees regarding rights. The data may thus be transferred to the following countries: United States of America. In order to obtain a copy of such data or the place where they have been made available, it is sufficient to send such a request to the Data Controller, at the addresses indicated above.
9. Period of retention of personal data
10. Optional nature of consent and consequences of failure to consent
11. Right of objection
The data subject has the right to object in the following terms:
12. Other rights
The Data Controller also wishes to inform of the existence of the following rights:
13. Exercise of rights
Requests for the exercise of the rights indicated in this information notice, including, in particular, the right to deletion and the right to withdraw the consent given should be addressed directly to the Data Controller at the email address email@example.com. Alternatively, you can exercise your rights by sending a registered letter with acknowledgement of receipt to the following address: Via Pilastro 6 – 46019 Cogozzo di Viadana (MN).
14. Accessibility of information
The information is available from the Controller. If expressly requested, the information may also be provided verbally, as long as the identity of the person making the request is proven, by means of a telephone request to the Controller’s addresses.