Information on the processing of data ex art. 13 EU Regulation 2016/679

Data Controller

We inform you that, pursuant to EU Regulation 2016/679 (hereinafter: "Regulation"), your Personal Data will be processed by QUERCETTI & C. SPA with registered office in Turin Corso Vigevano 25, in its capacity as data controller ("Data Controller").

Types of data subject to processing

The Data Controller shall process your personal data (art. 4.1 of the Regulations), including, by way of example but not limited to, your name, surname, mobile telephone number, e-mail address and in general your contact details as the Customer's contact person.

Purposes, legal basis and optional nature of processing

Your personal data will be processed for the following purposes:

(a) Execution of the contract and/or pre-contractual measures.
The legal basis of the processing is the performance of a contract to which the data subject is party or the execution of pre-contractual measures taken at the request of the same (art. 6.1.b of the Regulation)

b) Fulfilment of any legal obligations
The legal basis of the processing is the fulfilment of a legal obligation to which the Controller is subject (art. 6.1.c of the Regulation)

c) Control of reliability and solvency
The legal basis of the processing is related to the pursuit of the legitimate interest of the Controller aimed at the administrative and economic management control (art. 6(1)(f) of the Regulation)

d) Litigation management
The legal basis of the processing relates to the pursuit of the legitimate interest of the Controller in defending a right in administrative and judicial proceedings (art. 6(1)(f) of the Regulation).

The provision of your personal data for the above purposes is optional, but without it it will not be possible to execute the contract.
For processing carried out for the purpose of sending its own advertising material or direct sales or for carrying out its own market research or commercial communications in relation to products or services of the Controller similar to those to be purchased, the latter may use, without the consent of the interested party, the e-mail and paper mail addresses pursuant to and within the limits allowed by art. 130, paragraph 4 of Legislative Decree 196/03 and by the provision of the Guarantor Authority for the protection of personal data of 19 June 2008.

The legal basis for the processing of your data for this purpose is Art. 6, paragraph 1, letter f) of the Regulation. You may object to such processing at any time, either initially or in subsequent communications, in an easy and free manner by writing to: privacy@quercetti.it.

If, in any case, you wish to object to the processing of your data for marketing purposes carried out by the means indicated herein, as well as to revoke the consent given, you may do so at any time by contacting the Data Controller at the contact details indicated in this information notice, without affecting the lawfulness of the processing based on the consent given prior to revocation.

The provision of your Personal Data for the above-mentioned purpose is optional; no consequences are foreseen in case of your refusal.
Your Personal Data will also be processed, subject to your specific consent, for the following purposes:

(e) Sending promotional and marketing communications, including the sending of newsletters and market research, through automated (email) and non-automated means (paper mail, telephone with operator); please note that the Data Controller collects a single consent for the marketing purposes described herein, pursuant to the General Provision of the Garante per la Protezione dei Dati Personali "Linee guida in materia di attività promozionale e contrasto allo spam" of 4 July 2013; if, in any case, you wish to object to the processing of your data for marketing purposes carried out by the means indicated herein, as well as to revoke the consent given; you may do so at any time by contacting the Data Controller at the contact details indicated in this notice, without affecting the lawfulness of the processing based on the consent given prior to revocation.

The legal basis of the processing for the purposes referred to in point e) refers to the expression of consent by the data subject to the processing of his/her personal data (art. 6.1.a of the Regulation).

The provision of your Personal Data for the purposes referred to in letter e) is optional; there are no consequences in the event of your refusal.

Recipients and transfer of personal data

Your Personal Data may be shared with:

- individuals authorised by the Data Controller to process Personal Data after signing a confidentiality agreement (e.g. employees and system administrators);

- consultants and credit institutions for accounting-administrative purposes, contracting companies in case of entrusting of works, even partial, to external companies, third parties involved in the management of information systems and web platforms, some of which act as data processors (for a complete and updated list of data processors write to privacy@quercetti.it);
entities, bodies or authorities to which it is mandatory to communicate your Personal Data by virtue of provisions of law or orders of the authorities.

As regards the possible transfer of Data to Third Countries, the Data Controller informs you that the processing will be carried out according to one of the methods allowed by the law in force, such as, for example, the consent of the data subject, the execution of a contract concluded between the data subject and the data controller or the execution of pre-contractual measures adopted at the request of the data subject; the conclusion or performance of a contract entered into between the data controller and another natural or legal person in favour of the data subject; the adoption of Standard Clauses approved by the European Commission, the selection of subjects adhering to international programmes for the free movement of data (e.g. EU-USA Privacy Shield) or operating in the United States. EU-USA Privacy Shield) or operating in countries considered safe by the European Commission. Further information is available, on request, from the Data Controller at the contacts indicated above.

Storage of Personal Data

Your Personal Data will only be kept for as long as necessary for the purposes for which it is collected, respecting the principle of minimisation set out in Article 5(1)(c) of the GDPR. In any case, your Personal Data will be kept for the time necessary for the performance of the services provided for in the contract. This is without prejudice, in any case, to the further storage provided for by applicable legislation including that provided for in Article 2946 of the Civil Code. Further information is available from the Data Controller.

Your privacy rights under Articles 15 et seq. of the Regulation

You have the right to ask the Data Controller, at any time, to access your Data, to rectify or erase them or to request the limitation of their processing, or to obtain in a structured, commonly used and machine-readable format the data concerning you in the cases provided for by art. 20 of the Regulation.
We also inform you that you have the right to oppose ex art. 21 of the Regulation, for legitimate reasons, to the processing of your data, for example you can oppose at any time the sending of direct marketing with automated tools (email) and not (paper mail, telephone with operator); moreover, it is possible to exercise this right in part, that is, in this case, opposing, for example, only the sending of promotional communications made through automated tools.
You may revoke at any time, pursuant to art. 7 of the Regulations, the consent already given, without affecting the lawfulness of the processing carried out before the revocation of consent.
Requests should be addressed in writing to the Data Controller at privacy@quercetti.it.
In any case, you are always entitled to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali), pursuant to art. 77 of the Regulation, if you believe that the processing of your data is contrary to the legislation in force.