Lotti Importex srl (P.Iva 00389450206), in the person of its legal representative Pelatti Enzo, registered office in Poggio Rusco – street Abetone Brennero, 149 – Tel 0386733876 – email email@example.com as Data Controller, (hereinafter, “Data Controller”),
HEREBY INFORMS YOU
in accordance with regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (hereinafter “GDPR”), your data will be processed in compliance with the aforementioned legislation and in the manner and for the purposes specified below:
1 – OBJECT OF THE PROCESSING AND NATURE OF DATA
The Data Controller, in the course of its activity, processes your personal data (in particular, name, surname, tax code, VAT number, email address, telephone number – later, “personal data” or “data”) collected on the occasion of the conclusion of commercial relationships and/or requests for commercial information.
2 – PURPOSES OF DATA PROCESSING
Your personal data are processed for the following purposes distinguished by reference legal basis:
2.1 Execution of the contract – fulfilment of the legal obligation (art.6 lett. b, lett. c).
Your personal data are processed for the following purposes:
2.2 Based on your consent (Article 6 letter a).
Your personal data are processed, for the purpose of sending via sms and/or e-mail information and promotional communications, as well as newsletters from the Data Controller in relation to their own initiatives and/or of their subsidiaries and/or affiliates (Marketing purposes);
2.3 – Legitimate interests (Article 6 letter f – recital 47).
Please note that if you are already our customer, we can send you, always respecting your interests and rights, commercial communications relating to services and products of the Data Controller similar to those you have already used, unless you communicate your disagreement to the contacts indicated in point 7.
3 – RECIPIENTS OR CATEGORIES OF RECIPIENTS
The personal data provided may be disclosed to third parties, in order to comply with contracts or related purposes. More precisely, the data may be disclosed to recipients belonging to the following categories:
Subjects belonging to the aforementioned categories carry out the function of Processor, or work completely independently as separate Controllers. The list of possible Processors is constantly updated and available at the headquarters of the Data Controller.
4) PROCESSING METHOD
The processing will be carried out with manual and/or computerized and telematic tools as well as with organization and processing logics strictly related to the aforementioned purposes and in any case in such a way as to guarantee the security, integrity, availability and confidentiality of personal data.
In compliance with the provisions of art. 5 paragraph 1 letter e) of the Reg. EU 2016/679, the personal data collected will be stored in a form that allows identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
5– PROVISION OF DATA
Please note that, taking into account the purposes of the processing specified in point 2.1, the provision of data is mandatory and any failure thereto, partial or incorrect provision may have, as a consequence, the inability to perform the professional service
6 – DATA TRANSFER TO A THIRD COUNTRY AND/OR AN INTERNATIONAL ORGANIZATION
The personal data provided are not transferred outside the European Union.
7 – DURATION OF THE PROCESSING
Personal data is kept for the entire duration of the contractual relationship and, in the case of revocation and/or other type of termination of the aforementioned relationship, within the terms established by law for the fulfilment of tax obligations, for example.
For the marketing purposes, the data will be retained until consent is revoked or for the period established by the regulations or by Measures issued by the Control Authority.
You can, at any time, exercise the rights expressed by articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, and in particular:
You can exercise your rights by sending a request to the following Data Controller’s contacts:
I declare that I have read this privacy statement and in particular that I have read point 2, relating to the purposes of the processing, and point 8 on the rights of the Data Subject.
Note:If the person providing the data is under the age of 16, the processing is lawful only if and to the extent that such consent is given or authorized by the holder of parental responsibility for which the identification data and copy of the identification documents are acquired.
MARKETING: I consent to the processing of my personal data for the sending, by sms and / or e-mail, of information and promotional communications, as well as newsletters by the Controller in relation to its own initiatives and / or of its subsidiaries and / or affiliates