Privacy information for customers

Information on the processing of personal data pursuant to art. 13 and 14 of EU Regulation 2016/679 and Legislative Decree 196 \ 2003 as amended by Legislative Decree 101 \ 2018

Dear Customer,
in accordance with current legislation on the protection of personal data (EU Regulation No. 679 of 2016), we wish to inform you that as Data Controller,

Proteco s.r.l.
P.Iva 03103050047
Via Neive 77, 12050 Castagnito (CN)
Tel: 0173.210111
E-mail:info@proteco.net

holds and processes personal data protected by the aforementioned Regulation.

We inform you that the updated list of persons appointed as Responsible pursuant to article 28 of the GDPR is available at the company's headquarters and is knowable through a specific request.

In compliance with articles 13 and 14 of EU Regulation 679/2016, therefore, we provide you with the following information:

The Data Controller will process the following personal data

• personal data (name, surname, date and place of birth, residence);
• contact details (email, mobile number)
• payment details
• The data you provide will be processed for the following purposes:
• fulfill the obligations established by law and / or Community legislation
• allow the administrative / accounting management of the company
• allow the sale / invoicing of products and / or the provision of services through direct contact with the customer or via telephone communicationseseguire obblighi derivanti dal contratto tra le parti
• manage any complaints and disputes
• allow the management of marketing activities through newsletters, subject to express consent. The provision of your data for this purpose is purely optional.

For this purpose your data will be kept for a maximum period of 24 months.

It is necessary to inform you that you can withdraw your consent at any time.

The legal basis of the treatment is linked to the fulfillment of the contract between the parties, compliance with the law and the satisfaction of a request by the party concerned, as regards marketing activities the legal basis of the treatment is linked to the expression of a free consent by the interested party.

The provision of data is mandatory for the purposes of opening and managing contracts, and is necessary to satisfy any requests of the interested party (technical, commercial, etc.). Any refusal to provide such data could result in failure or partial performance of the contract, and / or failure to continue the relationship.

Methods of treatment and duration of treatment:

The processing of your data will be carried out by means in writing, electronic and / or telematic means, with logic strictly related to the aforementioned purposes. They are also protected by appropriate security measures that guarantee their confidentiality, integrity, accuracy, availability and updating.

Your data are kept for a period of time no longer than necessary for the purposes for which they were collected or subsequently processed.

Recipients or categories of recipients of personal data:

Personal data processed by the Data Controller may be disclosed to specific subjects considered as recipients of such personal data. Article 4 in point 9) of the Rules defines as the recipient of a personal data "the natural or legal person, the public authority, the service or another body that receives communication of personal data, whether it is a third party or not.”

With this in mind, the following recipients may be able to process the data on behalf of the Data Controller:

• Third parties who perform part of the processing and / or related activities and instrumental activities. These subjects have been appointed as controllers.
• Individuals, employees and / or collaborators of the Owner who is entrusted with specific and / or more processing activities on your personal data. These individuals have been given specific instructions on security and correct use of personal data.
• Subjects, public and private, who can access data under the provisions of law, regulation or community legislation, within the limits set by these rules. For example: social security institutions and institutions, associations of local authorities, administrations and public bodies, associations, foundations, associations or bodies of an associative and / or insurance type.
• Subjects who need access to data for purposes ancillary to the relationship between the parties, within the limits strictly necessary for the performance of ancillary activities, for example: banks and credit institutions, service companies, carriers and companies shipments.

Your data will not be transferred to non-EU countries and will not be disclosed.

Rights of the interested party:

We also inform you that at any time, with regard to personal data, you may exercise your rights under the GDPR 679/2016, within the limits and under the conditions set out in Articles 7 and 15-22. For the exercise of these rights, described below, it is possible to contact the Data Controller at the e-mail address specified above, preferably indicating in the subject "exercise of GDPR rights". This request will be provided with suitable feedback according to the timing established by the GDPR.

By way of example, the interested party has the right to:

• Ask the Owner to access, correct, delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
• To obtain data portability;
• Pursuant to art. 13, paragraph 2, letter d) of Regulation 679/2016, the subjects to whom the personal data refer have the right to propose a complaint to a supervisory authority.