Pursuant to art. 13 of the Regulation 2016/679/EU (hereinafter, for the sake of brevity, “Regulation”) Carpigiani Group – Ali Group S.r.l., in its capacity as Data Controller, informs you that your data will be processed in the following ways and for the following purposes.
Nature of personal data
The processing will concern personal data and will be limited to those that are strictly relevant to and necessary for the purposes pursued.
Purpose of the processing
The processing of data will have the following purposes:
- Allow the Data Controller to manage your request to register on the platform
- Allow the Data Controller to process your data to provide you with advanced interactive experiences and personalization of the service (for example, based on inferences made from website usage, activities, interests)
- Allow the Data Controller to send by email, mail, and/or telephone contacts, newsletters, commercial communications and/or information and advertising material on products or services offered by the Data Controller or events promoted or organized by the same
Legal basis of processing operations
The legal basis for the processing is the consent freely given by the data subject.
Nature of data provision and consequences of refusal
The provision of personal data for the purposes referred to in points a) and b) is mandatory, and any full or partial refusal to provide them or the provision of incorrect or false information will make it impossible for the Data Controller to proceed with your registration on the platform .
Where the data provider is under 16 years of age, such processing shall be lawful only if and to the extent that such consent is given or authorized by guardian with parental responsibility.
To the contrary, with reference to the purpose referred to in point c) consent is optional and refusal to do so will result in not being able to use the newsletter service.
Method of processing
The processing of personal data may concern all the operations indicated in art. 4, para. 2 of the Rules. In any case, the limits and principles of correctness, lawfulness, purpose, quality, relevance, non excess and transparency will be respected.
Personal data will be processed with automated tools for the time strictly necessary for the purposes for which they were collected and will be stored in electronic archives.
The processing will be carried out directly by the organization of the Data Controller.
In any case, the data will be processed with logics strictly related to the purposes indicated and with methods that ensure their security and confidentiality, through the adoption of appropriate measures to prevent alteration, deletion, destruction, unauthorized access or processing not allowed or not in accordance with the purposes of collection.
Data disclosure and transfer
The data will be disclosure to third parties such as distributors and/or dealers of Carpigiani machines, as well as companies with which the Owner maintains business relationships.
Pursuant to article 49 letter a) of the Regulation, the data could also be disclosed to partner companies of the Data Controller with registered offices in third countries for which no adequacy decision or other forms of guarantees equivalent to those provided for by the Regulation itself are required.
Duration of processing and storage period
Personal data voluntarily provided by the data subject will be processed by the Data Controller and stored for a period of ten years from the last access to the platform.
With regard to using email, mail, and/or telephone contacts to send newsletters, commercial communications, and/or informative and advertising materials for products or services offered by the Data Controller or events promoted or organized by the same, the data will be processed for as long as the service will be active.
Rights of data subjects
You may at any time exercise your rights:
a) to access to personal data;
b) to obtain their rectification or deletion or to limit their processing;
c) to object to the processing;
d) of data portability;
e) to withdraw consent: the withdrawal of consent shall not affect the lawfulness of processing based on the consent given before the withdrawal;
f) to make a complaint to the supervisory authorities (Privacy Guarantor).
The exercise of all the above rights can be done by sending a request by email to firstname.lastname@example.org
Data controller and processor