PRIVACY POLICY

Customer information on the processing of personal data GDPR – EU Reg. 679/2016

The user's personal data are used by MASSIMO RIVETTI SSA, in compliance with the principles of protection of personal data established by Art. 13 of EU Regulation GDPR 2016/679.

Methods and purposes of data processing
Pursuant to Article 4; Art. 6 of EU Regulation GDPR 679/2016

We inform you that the data will be processed with the support of the following means:

a) Paper (registration forms, order forms, etc.)
b) IT (management software, accounting, etc.)
c) Telematics

with the following purposes:

• provision of services requested by the Client and/or proposed by us or available on portals managed by MASSIMO RIVETTI SSA, partner companies or professionals
• newsletters, information material, etc., as well as the conclusion of the contract to which the interested party is a party
• administrative and accounting purposes related to service contracts

Any refusal to allow the processing of data will make it impossible to use the service requested by the user.

Unless explicitly denied by the interested party, the user's data will also be processed for the following purposes:

• sending of proposals and commercial communications by email or SMS or fax, by MASSIMO RIVETTI SSA, partner companies or professionals
• market research and statistics, marketing and references on advertising communications (press, radio, TV, internet, etc.), product preferences

Legal basis
Pursuant to Article 4 of EU Regulation GDPR 679/2016

The provision of data is mandatory for all that is required by legal and contractual obligations and therefore any refusal to provide them in whole or in part may result in the impossibility of providing the requested services. The company processes the optional data of users based on consent, that is, through the explicit approval of this privacy policy and in relation to the methods and purposes described below.

Recipient categories
Pursuant to Article 2 of EU Regulation GDPR 679/2016

Without prejudice to communications carried out in compliance with legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of interested parties:

• Consultants, Collaborators, Outsourcers
• Accounting and administrative
• Suppliers
• Banks and Credit Institutions

Retention period
Pursuant to Article 4 of EU Regulation GDPR 679/2016

Mandatory data for contractual and accounting purposes are retained for the time necessary to carry out the professional and commercial relationship, sanctioned by the acceptance of an economic offer and/or stipulation of a mandate. Administrative and accounting data will be retained for 10 years following the date of commencement of the professional relationship with the client (art. 2200 of the Civil Code).

The data of those who do not purchase or use services, even if they have had previous contact with company representatives, will be deleted or processed anonymously upon explicit request of the customer, where their conservation is not otherwise justified, unless the informed consent of the interested parties has been validly acquired relating to a subsequent commercial promotion or market research activity.

Rights of the interested party
Pursuant to Art. 15 of EU Regulation GDPR 679/2016

Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the interested party may, according to the methods and within the limits established by current legislation, exercise the following rights:

• request confirmation of the existence of personal data concerning him/her (right of access)
• know its origin
• receive intelligible communication about it
• have information about the logic, methods and purposes of the processing
• request the updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected
• in cases of processing based on consent, receive your data provided to the owner, in a structured and readable form by a data processor and in a format commonly used by an electronic device
• the right to lodge a complaint with the Supervisory Authority

Requests should be addressed to the Data Controller: MASSIMO RIVETTI SSA