Privacy notice regarding the processing of personal data, pursuant to Article 13 of Regulation (EU) 2016/679, as amended
Pursuant to Article 13 of Regulation (EU) 2016/679 (hereinafter referred to as the “GDPR”) as amended, Galletti S.p.A. (hereinafter referred to as the “Company”), acting in its capacity as Data Controller, hereby informs you that the personal data you have provided will be processed in a relevant and transparent manner, in accordance with the principles of lawfulness and necessity, and in compliance with the relevant regulations.
Data Controller
The Data Controller is Galletti S.p.A., whose registered office is located at Via Luciano Romagnoli 12/A, 40010 Bentivoglio (BO), with tax code 03230760377, VAT number 00605791201, and e-mail address info@galletti.it
Pursuant to Article 37 of Regulation (EU) 2016/679, the Data Controller has appointed a Data Protection Officer (DPO) who can be contacted by e-mail at dpo@galletti.it
Purposes of processing
We inform you that your personal data will be processed for the following purposes connected with, or necessary for, the activities carried out by Galletti S.p.A.:
a) to perform the contractually agreed services;
b) to carry out the assignment or appointment entrusted to you by the company;
c) to comply with legal obligations, including accounting and administrative obligations, arising from points (a) and (b);
d) to carry out marketing activities in the legitimate interests of the data controller.
Legal basis for processing
The legal basis for processing your data is the specific legal relationship established between us, as well as compliance with the associated legal obligations. Processing your personal data is necessary for the fulfilment of the aforementioned legal relationship, of which you are a party. Failure to consent to processing will make it impossible to execute the contract or fulfil our relationship with you.
GDPR ref.: Art. 6(c)(1)(a) Consent,
Art. 6(c)(1)(b) Execution of a contract
With regard to marketing activities, the legal basis for processing is that set out in Article 6(c)(1)(f): The legitimate interests of the Data Controller.
Methods of data processing
Your personal data will normally be processed using paper-based and/or electronic methods. Appropriate security measures will be adopted to ensure the security and confidentiality of your personal data, in accordance with Article 32 of the GDPR.
Retention period for personal data
In accordance with the principles of proportionality and necessity, data will not be retained for longer than is strictly necessary to fulfil the above purposes and, therefore, only for as long as is required to execute the contract. In all cases, this will be subject to the limits established by the relevant legislation.
Recipients of personal data
The collected data will be processed exclusively for the aforementioned purposes. In accordance with the appropriate security measures implemented by the Data Controller, the data may be disclosed to supervisory authorities designated by law, as well as to other public and private entities, for the fulfilment of legal obligations relating to public contracts and other legislation, including in the areas of taxation, administration and finance.
Regarding marketing activities, the data may be disclosed to communications companies that collaborate with Galletti S.p.A., subject to your explicit consent.
Rights of the data subject (Articles 15 et seq. of the GDPR)
The Privacy Regulation recognises the data subject’s right to exercise the rights set out in Articles 15 to 22 of the GDPR, where applicable. These rights include the right of access to data, the right to have data rectified or erased ("right to be forgotten"), the right to restrict processing, the right to data portability, and the right to object to processing.
You may freely exercise your rights at any time by submitting a written request to the Data Controller, using the contact details provided above.
Pursuant to Article 13(2)(d), we hereby inform you of your right to lodge a complaint with the Italian Data Protection Authority if you believe that your rights as a data subject have been infringed, or in relation to matters concerning the processing of your personal data.
To ensure that your personal data remains accurate, up to date, relevant and complete at all times, please notify us in writing of any changes.
Your data will only be disclosed to third parties with your express consent, unless such disclosure is required by law or is necessary for purposes permitted by law, in which case the data subject’s consent is not required. In these instances, your data may be made available to third parties, who will independently process it solely for the aforementioned purposes (for example, in the case of a request made by the police forces or the courts or other competent bodies).
Any processing of your personal data for a purpose other than the specific one for which you provided it will be clearly indicated in a suitable notice, and will only be pursued after you have given your explicit consent.
The Data Controller
Galletti S.p.A.