a) Who are the Co-Owners of the treatment? How to contact them?
The co-owners of the treatment are:
- Valcucine S.p:a. tax code 00407160936, contactable at the address: privacy@italiancreationgroup.com with registered office in via Luciano Savio ,11 33170 Pordenone (PN)
- FontanaArte S.p.a. tax code 09632850963, who can be contacted at the address: privacy@italiancreationgroup.com
- Driade S.r.l., tax code 09712410969, who can be contacted at the address: privacy@italiancreationgroup.com
- Italian Creation Group S.p.a., tax code 08210880962, who can be contacted at the address: privacy@italiancreationgroup.com
all with registered office in Alzaia Trieste, 49 20094 Corsico (MI)
below together the "Co-owners" and each individually the "Co-owner".
b) For what purposes are the data processed? On what legal basis? And how long are they kept?
Below we indicate the purposes of the processing, the legal basis that legitimizes the processing and the retention time of your personal data:
| Purpose | Legal basis | Storage |
| Customer management: for the management of contracts or requests for information, services, assistance, and the related contractual and/or pre-contractual relationships, for the management of complaints and reports as well as for managing orders and purchases. | Execution of pre-contractual and contractual obligations | The data will be kept for the ordinary limitation period of rights for accounting and/or tax reasons except for the additional storage time required by law or, in the event of a dispute, until its conclusion. |
| Sending of newsletters: only on the basis of your specific subscription request, with the possibility of unsubscribing at any time. | Execution of contractual obligations | The data will be kept for the ordinary limitation period of rights for accounting and/or tax reasons except for the additional storage time required by law or, in the event of a dispute, until its conclusion. |
c) Is it mandatory to provide data? What if it doesn't provide them?
The provision of your personal data for the purposes (1) Customer management and (2) Sending of newsletters is a requirement for the conclusion of the contract and the provision of the requested services. Failure to provide data for these purposes will make it impossible to conclude the contract or provide you with the services you have requested.
d) Is the data transferred outside the EU?
Some of your personal data may be transferred abroad to locations outside the European Union. This transfer will in any case be carried out in compliance with the guarantees prescribed by the GDPR for this type of activity (Articles 45 to 49). In particular, for example: towards companies located in countries for which the existence of data protection guarantees comparable to those of the GDPR is recognized (Countries in the White List), or towards companies with which specific contractual clauses have been signed protection of personal data or binding company rules approved by the Guarantor Authority. For more information, you can contact one of the Co-Owners of the treatment.
e) Who can know your data? To whom do we communicate your data?
The personal data relating to the treatments in question, for the aforementioned purposes, may be communicated or disclosed:
- to those who within the organization of each Co-Owner need it due to their job or hierarchical position. These subjects are the persons authorized to process under the direct authority of the Co-Owner;
- Public Administrations, security and inspection authorities and, more generally, subjects whose right to access the data is recognized by specific provisions of the law or by a provision issued by an authority legitimated by the law.
- to subjects whose activity is necessary for the execution of the contracts of which you are a part or to fulfill requests before the conclusion of the contract (e.g.: delivery companies of the transporting goods, law firms, etc.) who act as independent holders;
- to third parties who carry out processing on behalf of one or more Co-Owners, related to the processing and the purposes described above, such as for example administrative, accounting, tax, information system management services. These subjects are authorized to process them as Data Processors in accordance with the provisions of Article 28 of the GDPR.
f) What are your rights as an interested party?
The GDPR recognizes the following rights in relation to your personal data which you can exercise within the limits and in compliance with the provisions of the law:
- Right of access to your personal data (art. 15);
- Right of rectification (art. 16);
- Right of cancellation (right to be forgotten) (art. 17);
- Right to limitation of treatment (art. 18);
- Right to data portability (art. 20);
- Right to object (art. 21); the interested party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him based on legitimate interest, including profiling on the basis of it. The Co-Owners refrain from processing unless they demonstrate the existence of compelling legitimate reasons to proceed with the processing which prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court judicial;
- Right to oppose a decision based solely on automated processing (art. 22);
- Right to revoke the consent given at any time, without prejudice to the lawfulness of the processing based on the consent given prior to the revocation.
You can exercise these rights by sending a written request addressed to one of the Co-Owners to the postal address or by e-mail, as indicated in point a) above. Furthermore, you have the right to lodge a complaint with the Guarantor Authority for the protection of personal data (www.garanteprivacy.it), if you believe that the processing of your data is contrary to the legislation in force (Article 77) or to act in court (Article 79).
g) How is personal data protected?
Personal data will be processed both with electronic tools and without the aid of electronic tools, using technical and organizational security measures appropriate to the nature of the data to ensure their integrity and confidentiality and protect them against the risks of illicit intrusion, loss, alteration , or disclosure to third parties not authorized to treat them.