Customer Privacy Policy
1. Data controller
2. TYPE OF DATA PROCESSED
3. PURPOSE AND LEGAL BASIS OF THE PROCESSING
| PURPOSE OF PROCESSING | CATEGORIES OF PERSONAL DATA | LEGAL BASIS FOR PROCESSING |
|---|---|---|
| a) to execute a contract to which the data subject is a party or to take pre-contractual measures at their request (e.g. responding to requests for contact, quotations and/or commercial information, etc.) and management of the contractual relationship | common personal data of the data subject | necessity for the performance of a contract or pre-contractual measures, for the provision of a service, or in any case the response to a request from the data subject |
| b) necessity for the performance of a contract or pre-contractual measures, for the provision of a service, or in any case in response to a request from the data subject | common personal data of the data subject | necessity for the performance of a contract or pre-contractual measures, for the provision of a service, or in any case in response to a request from the data subject |
| c) to comply with legal obligations to which ELETTRA S.R.L. is subject | common personal data of the data subject | necessity to fulfil the legal obligations to which the data controller is subject |
| d) promotion of the activity of the data controller/ collaborations | common personal data of the data subject | consent of the data subject |
| image of the data subject | consent of the data subject | |
| e) marketing purposes | common personal data | of the data subject consent of the data subject |
| f) asserting or defending, including in court, a right of the data controller | common personal data of the data subject | legitimate interest of the data controller in protecting the company’s assets and ensuring compliance with contractual obligations |
4. MANDATORY OR OPTIONAL NATURE OF THE PROCESSING
5. DATA RECIPIENTS
Data processing will be carried out by ELETTRA S.R.L. internal staff, identified and authorised to process data in accordance with instructions and tasks assigned in compliance with current legislation on privacy and data security. Data may be disclosed to external parties, who will process it as data processors or independent data controllers, as appropriate. Specifically, personal data may be processed by: banks, professionals who provide assistance or advice to the data controller for administrative, accounting, tax or legal protection purposes; judicial authorities; IT service providers such as cloud services, e-mail, hardware and software maintenance services, which may also indirectly access personal data; entities, bodies or authorities to which it is mandatory to communicate data for legal compliance. The data will not be transferred outside the European Economic Area. However, if transfer outside the EEA becomes necessary, it will be carried out in accordance with the appropriate and appropriate safeguards, in accordance with applicable legislation and in particular Articles 44 et seq. of the GDPR.
***
With particular reference to the data referred to in letter d of the previous table: if you decide to consent to the use of your image and personal data, your data will be transmitted to parties external to the Data Controller for the purpose of promoting the business activities of ELETTRA S.R.L. and collaborations between ELETTRA S.R.L. and you, according to the choices you have made. The data may be published on social media, websites, catalogues, leaflets and brochures, promotional and advertising material, and in the press in the event of the publication of articles by/about ELETTRA S.R.L., and may become accessible to anyone who visits the aforementioned channels or views the aforementioned material. Once uploaded to social media channels or the web, your data may be collected on servers outside the EEA, in any case in compliance with Articles 44 et seq. of the GDPR.
6. PROCESSING METHODS – STORAGE PERIOD
The personal data collected will be processed both on paper and electronically. It will be processed and stored by ELETTRA S.R.L. for the period of time strictly necessary to achieve the purposes indicated (generally no longer than 10 years from the date of the contract between the parties), except in cases where storage for a longer period is required by current accounting, tax, civil and procedural legislation, by the competent authorities or by law; in the event of a dispute, the data will be deleted at the end of the dispute.
7. RIGHTS OF THE DATA SUBJECT
You have the right to obtain confirmation of the existence or otherwise of personal data, to know its content, verify its accuracy, access the data, request its origin, correction, integration, deletion, purposes and methods of processing, updating if incomplete, incorrect or collected in violation of the law, as well as to oppose their processing on the basis of the legitimate interest of the data controller and to obtain the limitation of processing; you have the right to block data processed in violation of the law and to data portability. If the processing is based on consent, you have the right to revoke it at any time. Requests should be addressed to the data controller by email at privacy@elettra.it or by registered letter to the following address: ELETTRA S.R.L., Via Lisbona n. 28A/5, Padua, indicating “Privacy” in the subject line.
8. FORMS OF PROTECTION
If you believe that your personal data has not been processed in accordance with current legislation, you have the right to lodge a complaint with the Italian Data Protection Authority, Piazza Venezia, 11 – 00187 Rome, tel. +39 06.696771, certified email address protocollo@pec.gpdp.it, or you may appeal to the judicial authorities.
Megiston