Web portals privacy policy

Information pursuant to the regulations on the protection of personal data

Dear Customer,

This information is provided following the telephone contact made pursuant to and for the purposes of art. 13 of Regulation (EU) 2016/679 (hereinafter, "GDPR"), relating to the protection of individuals with regard to the processing of personal data.

Purpose and legal basis of the processing

Your personal data are processed:

A) without your express consent, for the following purposes:

• Fulfill your request for a quotation;
• Check your financial solvency;

B) only with your specific and distinct consent, for the following other purposes:

• carrying out, with your express written consent, direct marketing activities, such as the sending - also by e-mail, SMS and MMS - of advertising material and communications with informative or promotional content in relation to products or services provided or promoted by the Data Controller, including gifts and free samples;
• carrying out, with your express written consent, individual or aggregate profiling activities and market research aimed, for example, at the analysis of consumption habits and choices, the processing of statistics or the assessment of the level of products and services satisfaction.

The treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights. Except in the cases indicated above, in which your consent is required, the legal basis of the processing is the need for the pursuit of the aforementioned purposes.

Data retention period

Your personal data will be processed for the time strictly necessary for the pursuit of the aforementioned purposes, after which they will be deleted or made anonymous.

With specific regard to the purposes described in point B), your personal data will be processed for 12 months with reference to Profiling activities and 24 months with reference to Marketing activities, unless your consent is revoked first, which may concern all of them, one or some of them.

Nature of the provision of data and consequences in case of refusal

For marketing and profiling purposes, the provision of data is optional; therefore you may decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive the communications indicated above; it is your faculty to give consent to the sending of the communications indicated above only with traditional methods or only with automated method¹: therefore, any revocation may also concern only one or some of them.

For the other purposes indicated above, the provision of data is mandatory due to legal and contractual obligations and therefore any refusal to provide them in whole or in part will make it impossible for the Company to execute the contract or to carry out correctly all related obligations.

Categories of recipients

Exclusively for the purposes specified above, all the data collected and processed may be disclosed to internal figures authorized for processing based on their respective duties, as well as to the following categories of external subjects:

• commercial agents who manage relationships on behalf of the Data Controller;
• companies or other third parties that carry out outsourced activities;
• credit institutions;
• Public and private bodies, also following inspections and verifications.

These recipients, should they process data on behalf of our Company, will be designated as data processors, with a specific contract or other legal act.

 

Data transfer to a third country and / or an international organization

Your personal data will not be transferred to non-European third countries.

 

Rights of the data subject

You have the right (see articles 15 -22 of the GDPR) to ask our Company to access your personal data and to rectify them if inaccurate, to cancel them or limit their processing if the conditions are met, or to oppose their processing for legitimate interests. Company, as well as to obtain the portability of the data provided by you only if subject to automated processing based on your consent or contract.

You also have the right to revoke the consent given for the processing purposes that require it, without prejudice to the lawfulness of the processing carried out up to the time of revocation.

You also have the right to lodge a complaint with the competent supervisory authority, the Guarantor for the protection of personal data.

 

Subjects of the treatment

The data controller of your personal data is Carraro S.p.A. contactable by writing a specific written request to Carraro S.p.A. with offices in via Conegliano 51 in Susegana (TV) or by writing to the email address privacy@gruppocarraro.it.

 

Data protection officer / data protection officer

The Data Protection Officer (DPO) is Unindustria Servizi & Formazione Treviso Pordenone who can be contacted as such at the following email address dpo@gruppocarraro.it.