Personal data processing privacy notice

Pursuant to articles 13 and 14 of Regulation EU 2016/679 (hereinafter GDPR) and in relation to the information of a personal nature and for the purposes of protecting the rights of data subjects regarding the processing of personal data Vetrobalsamo S.p.A provides the following information:

1. Personal data
The personal data, as per art. 4 no. 1) of the GDPR, which comes into the possession of Vetrobalsamo S.p.A., will be processed in accordance with this privacy notice and in any case in compliance with current legislation on the protection of personal data.

2. Purpose
The data will be processed for institutional purposes, connected or instrumental to the activity of Vetrobalsamo S.p.a. and in particular:

• A. for purposes strictly related to the management of contractual and commercial relations, the processing of which is necessary and of which the data subject is a party (art. 6 letter. b) of the GDPR), and to the pursuit of a legitimate interest of the Data Controller (art. 6 letter. f) of the GDPR);
• B. to fulfil the obligations provided for by laws or regulations to which Vetrobalsamo S.p.A. is subject (art. 6 letter c) of the GDPR);
• C. to communicate and/or send, including by automated means, advertising material, informative material and commercial information via telephone, TXT, email, fax, the legal basis of which resides in the explicit consent of the data subject (art. 6 letter. a) of the GDPR);
• D. to communicate the data to the business partners of Vetrobalsamo S.p.A. for sending, including using automated means, advertising material by telephone, TXT, email, fax, the legal basis of which resides in the explicit consent of the data subject (art. 6 letter a) of the GDPR);
• E. to identify through electronic processing, including through the use of cookies on the website of Vetrobalsamo S.p.A., propensities and habits and/or to meet specific needs the legal basis of which resides in the explicit consent of the data subject (art. 6 letter. a) of the GDPR).

3. Data communication
The data will be communicated within Vetrobalsamo S.p.A. to the entities in charge of the activities concerning the products/services of Vetrobalsamo S.p.A. and upon explicit request communicated to the competent Authorities for the fulfilment of the obligations imposed by the laws in force.

The data will be communicated to third parties (for example, financial institutions, consulting firms, technical partners, commercial partners) for the purposes of credit risk protection, information, commercial communications, to ensure the provision of products/services and provide the necessary technical and operational support. Such communication is necessary for the execution of the contract and for its performance.

The scope of data communication will be that strictly necessary for the performance of the appointment conferred by us to the aforementioned third parties within the scope of the purposes referred to in paragraphs 2A and 2.B, and for paragraphs 2.C, 2.D and 2.E, following explicit consent from the data subject.

4. Nature of data provision
Consent to the processing of data for the purposes referred to in points 2.A and 2.B of this privacy notice is not necessary pursuant to art. 6 of the GDPR. Failure to give consent (optional) for data processing for the purposes indicated in par.2.C, 2.D and 2.E will prevent Vetrobalsamo from sending direct commercial communications, providing profiling activities and communicating to its partners for indirect and/or third party commercial purposes.

5. Processing methods
The data will be processed in paper form and in electronic and/or automated form, directly and/or through the third parties indicated above using security measures such as to prevent access to unauthorised data by third parties and ensure their confidentiality.

The data may be processed and organized into databases, processed for the time strictly necessary for the execution of contracts and to provide technical and operational assistance.

6. Preservation period
The processing preservation period for contractual purposes coincides with the duration of the contractual agreement, while that related to the fulfilment of legal obligations is prescribed by law and in all other cases for a period of not more than 10 years following the termination of relations between the data controller and the data subject.

In relation to the purposes of direct marketing, business partners and profiling, the processing preservation period coincides with the duration of the contractual agreement and, in any case, the data subject has the right to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation.

7. Data Controller
The Data Controller is Vetrobalsamo Spa with registered office in Viale Sarca 336 - 20126 Milan, in the name of its pro tempore legal representative. For any communication regarding the protection of personal data the email address: gdpr@vetrobalsamo.com is available.

8. Rights of the data subject
The data subject is entitled, at any time, to exercise his or her rights vis-à-vis the data controller in accordance with articles 15 to 22 of the GDPR. In particular, every data subject has the right to:

• A. ask for confirmation of whether or not personal data exists concerning it;
• B. obtain information on the purposes of processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the preservation period;
• C. obtain the portability of data, i.e. to receive them from a data controller, in a structured format, commonly used and readable by automatic device, and to transmit them to another data controller without hindrance;
• D. object to processing at any time and also in the case of processing for direct marketing purposes;
• E. object to an automated decision-making process concerning natural persons, including profiling.
• F. request the data controller to access and rectify or erase personal data or to restrict the processing of personal data concerning it or to object to their processing;
• G. revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given before revocation;
• H. lodge a complaint with the Supervisory Authority for the Protection of Personal Data.

The rights of the data subject may also be exercised by sending a written request, including by email to the address: gdpr@vetrobalsamo.com

Print page