Information for the processing of personal data

The company PICCHI SRL, with registered office at (25065) Lumezzane (BS), Via Ruca, n. 318, registered in the Brescia Companies Register R.E.A. n. BS - 300690, C.F. 01492950173 and VAT No. 00632680989, in the person of the legal representative pro tempore, Mr. Damiano Bugatti, (hereinafter, Picchi), as data controller (hereinafter, the Data Controller), informs, pursuant to art. 13 EU Regulation n. 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of that data (hereinafter, the GDPR) that your data will be processed as indicated below.


Subject of the processing

The Data Controller processes your personal and identification data (name, surname, address, company name, registered office, tax code, VAT number, registration in the Business Register, telephone, email) (hereinafter, the Personal Data) communicated in case of:

• Access to its premises;
• Request of information through the website;
• Stipulation of contracts;
• Professional contacts.

Purpose of the processing

The processing of your Personal Data is carried out for purposes connected or instrumental to the execution of activities of:

• Access control to its premises;
• Answers formulation to the requests for information through the website;
• Stipulation of contracts;
• Establishment of commercial relations.

The provision of your Personal Data is mandatory for the pursuit of the purposes, as per the previous article 2.1 of this information. Therefore, in case of your refusal to provide Personal Data, the Data Controller will not be able to proceed with you to your premises access or to the stipulation of contracts or to the establishment of commercial relations.


Processing modalities

The processing of Personal Data means any operation or set of operations carried out with or without the aid of automated processes, referred to in the Article 4, n. 2) GDPR, namely the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction. Your Personal Data are subject to both paper and electronic processing.

In order to fulfill the purposes referred to the article 2 of this information, the Data Controller will process his Personal Data indefinitely, guaranteeing the rights referred to the article 8 of this information, including the cancellation. In case of a cancellation request, your Personal Data will be destroyed and made anonymous.


Access to data

Your Personal Data may be made accessible to employees and collaborators of the Data Controller, as appointees and / or internal processing managers and / or system administrators.


Data communication

Without the need of an expressed consent pursuant to Article 6, b) and c) GDPR), the Data Controller may communicate your Personal Data to those individuals, to whom the communication is mandatory pursuant to the law (for example, Judicial Authority). These individuals will process the Personal Data as independent data controllers. Outside of the aforementioned obligations, your Personal Data will not be communicated to third parties separate from the Data Controller or from individuals to whom the access is guaranteed pursuant to article 4 of this information.


Rights of the involved person

The Data Controller grants you the following rights, i.e.,

• the right to obtain confirmation of the existence or not of your Personal Data, even if not yet registered, and their communication in an intelligible form;
• the right to obtain the indication of the origin of your Personal Data, of the purposes and methods of the processing, of the logic applied in case of treatment carried out with the aid of electronic instruments, of the identification details of the Data Controller, of the data processors and of any representative appointed pursuant to article 3, paragraph 1, GDPR, of the individuals or categories of individuals to whom your Personal Data may be communicated or who may come to know of it as appointed representatives in the territory of the State , of managers or appointees;
• the right to obtain 1) the updating, rectification that is, when interested, the integration of your Personal Data, 2) the cancellation, anonymization or blocking of your Personal Data processed in violation of law, including those for which conservation is not necessary in relation to the purposes for which they were collected or subsequently processed, 3) the attestation that the operations, referred to in numbers 1) and 2), have been brought to the attention, also with regard to their content of those to whom your Personal Data have been communicated or disseminated, except the event in which such fulfillment becomes impossible or requires the use of means manifestly disproportionate with respect to the protected right;
• the right to oppose, in whole or in part, for legitimate reasons to the processing of your Personal Data, even if pertinent to the purpose of the collection.

Where applicable, he may also exercise his rights of oblivion, of the limitation of processing, of the portability of your Personal Data as well as the right to complain to the Guarantor Authority.


Modalities of exercising his rights

In order to exercise his rights, he may at any time send a communication through registered letter to PICCHI SRL, with registered office at (25065) Lumezzane (BS), Via Ruca, n. 318, or by PEC at the address picchisrl@legalmail.it.


Data controller, responsible and appointees

The Data Controller is Picchi Srl. The updated list of data managers and data appointees is preserved in the Data Controller's registered office.


Changes to this information

This information may be subject to changes. It is your responsibility to check regularly your possible updates.


Lumezzane, 24th May 2018

Information for the processing of personal data

The company PICCHI SRL, with registered office at (25065) Lumezzane (BS), Via Ruca, n. 318, registered in the Brescia Companies Register R.E.A. n. BS - 300690, C.F. 01492950173 and VAT No. 00632680989, in the person of the legal representative pro tempore, Mr. Damiano Bugatti, (hereinafter, Picchi), as data controller (hereinafter, the Data Controller), informs, pursuant to art. 13 EU Regulation n. 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of that data (hereinafter, the GDPR) that your data will be processed as indicated below.


Subject of the processing

The Data Controller processes your personal, identification and not sensitive data (name, surname, address, company name, registered office, tax code, VAT number, registration in the Business Register, telephone, email) (hereinafter, the Personal Data) communicated during the registration on the website of the Data Controller or/and the stipulation of commercial contracts.


Purposes of the processing

Your Personal Data are processed by the Data Controller without the need of express consent (art. 6 letter b-e GDPR) for the following purposes:

• registration on the website;
• management and maintenance of the website;
• fulfillment of pre-contractual, contractual and fiscal obligations deriving from existing relationships;
• fulfillment of the obligations established by law, by a regulation, by EU legislation or by an order of the Authority;
• prevention or detection of fraudulent activity or malicious abuse of the website;
• exercise of rights pertaining the Data Controller, for example the right of defense in court.

Processing methods

The processing of your Personal Data is carried out through operations indicated in the art. 4, n. 2) GDPR i.e. collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.


Your Personal Data are subject to electronic and / or automated processing.

In order to fulfill the purposes referred to in the previous article 2 of this information, the Data Controller will process your Personal Data, for an indefinite period, guaranteeing you your rights, as per in the article 8 of this information, including the cancellation. In case of cancellation request, your Personal Data will be destroyed or made anonymous.


Access to data

Your Personal Data may be made accessible to employees and collaborators of the Data Controller, as appointees and / or internal processing managers and / or system administrators.


Data comunication

Without the need of an expressed consent pursuant to Article 6, b) and c) GDPR), the Data Controller may communicate your Personal Data to those individuals, to whom the communication is mandatory pursuant to the law (for example, Judicial Authority). These individuals will process the Personal Data as independent data controllers. Outside of the aforementioned obligations, your Personal Data will not be communicated to third parties separate from the Data Controller or from individuals to whom the access is guaranteed pursuant to article 4 of this information.


Data transfer

The management and storage of your Personal Data will take place on servers located within the European Union of the Data Controller and / or third party companies duly appointed and nominated as data processors. Currently the servers are located in Lumezzane (BS), Via Ruca, n. 318. Your Personal Data will not be transferred outside the European Union. In any case, it is established that the Data Controller, if necessary, will have the right to move the location of the servers in Italy and / or in the European Union and / or in Extra-EU countries. In this case, the Data Controller assures from now ,that the transfer of your Personal Data to Extra-EU countries will take place in accordance with the provisions of the GDPR.


Nature of data provision and consequences of refusal

The provision of Personal Data for the purposes referred to in Article 2.1, lett. a) of this information is mandatory. Otherwise, the Data Controller cannot guarantee the registration on the website or the stipulation of commercial contracts.


Rights of the involved person

The Data Controller grants you the following rights, i.e.,

• the right to obtain confirmation of the existence or not of your Personal Data, even if not yet registered, and their communication in an intelligible form;
• the right to obtain the indication i) of the origin of your Personal Data, ii)of the purposes and methods of the processing, iii) of the logic applied in case of treatment carried out with the aid of electronic instruments, iv)of the identification details of the Data Controller, of the data processors and of any representative appointed pursuant to article 3, paragraph 1, GDPR, v) of the individuals or categories of individuals to whom your Personal Data may be communicated or who may come to know of it as appointed representatives in the territory of the State , of managers or appointees;
• the right to obtain i) the updating, rectification that is, when interested, the integration of your Personal Data, ii) the cancellation, anonymization or blocking of your Personal Data processed in violation of law, including those for which conservation is not necessary in relation to the purposes for which they were collected or subsequently processed, iii) the attestation that the operations, referred to in numbers i) and ii), have been brought to the attention, also with regard to their content of those to whom your Personal Data have been communicated or disseminated, except the event in which such fulfillment becomes impossible or requires the use of means manifestly disproportionate with respect to the protected right;
• the right to oppose, in whole or in part, i) for legitimate reasons to the processing of your Personal Data, even if pertinent to the purpose of the collection.

Where applicable, he may also exercise his rights of oblivion, of the limitation of processing, of the portability of your Personal Data as well as the right to complain to the Guarantor Authority.


Modalities of exercising his rights

In order to exercise his rights, he may at any time send a communication through registered letter to PICCHI SRL, with registered office at (25065) Lumezzane (BS), Via Ruca, n. 318, or by PEC at the address picchisrl@legalmail.it.


Minors

The website and the services of the Data Controller are not intended to people under the age of 18 and the Data Controller does not intentionally collect personal information referred to minors. If information on minors is unintentionally registered, the Data Controller will cancel them.


Data controller, responsible and appointees

The Data Controller is Picchi Srl. The updated list of data managers and data appointees is preserved in the Data Controller's registered office.


Changes to this information

This information may be subject to changes. It is your responsibility to check regularly your possible updates.


Lumezzane, 24th May 2018