In accordance with article 13 of the EU general data protection regulazion 2016/679 (“GDPR”) “Contact Form”
Data controller Valsoia S.p.A., with head office located in Via Ilio Barontini 16/5, 40138 Bologna, Tax ID and VAT Reg. No. 04176050377. PEC: firstname.lastname@example.org (“Company”).
Contact details of the Data Protection Officer (DPO)
The DPO can be contacted at the following e-mail address: email@example.com.
Purposes of the processing, legal basis and storage times.
Purpose of the Processing 1: the data you provide when completing the Contact Form will be processed by the Company to provide you with the information on the Company and/or its products and/or services that you request.
Legal basis: performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
How Long We Keep Your Data: Your data will be stored for 12 (twelve) monthsor a longer period of time strictly necessary to achieve the aforementioned purposes. When the above period of time has passed, or the purposes have been served, your data will be destroyed or anonymised in line with the technical processes of our deletion and back-up procedures.
Purpose of the Processing 2: the data you provide when completing the Contact Form will, subject to your prior consent, be processed by the company for marketing purposes: for example to send you - using automated contact methods (such as SMS text messages, MMS picture messages and e-mails) and traditional contact methods (traditional post) - sales and marketing communications regarding products/services offered by the company, to inform you of company events and prize awards, and to carry out market research and statistical analyses.
Legal basis: Consent (optional and revocable at any time).
How Long We Keep Your Data: Until you withdraw your consent.
The required fields in the data collection form are marked with an asterisk (*), indicating that the data requested is required to process your request. If you do not provide this information, the Company will consequently be unable to process your request.
Recipients of the data and subjects authorised to carry out the Processing
Your personal data may be comunicated to:- employees of the Company, who work towards the goals indicated above, expressly authorized to carry out Data Processing and who have received appropriate operational instructions
third parties; this may include data processors, who have received appropriate operational instructions (e.g. insurance companies, Company distributors, companies that carry out activities involving the operation and maintenance of the website, companies that are involved on promotional activities and events)
institutions and authorities, where there is a legal obligation to communicate your Data to such.
Valsoia does not transfer any personal data to non-EU member countries or to international organisations
Rights of the data subject - compliant to the supervisory authority
Data Subjects may contact the Company by e-mail at the address firstname.lastname@example.org to ask the Data Controller for access to the data concerning them, for it to be erased, for it to be rectified where inaccurate, for incomplete data to be completed, for processing of the data to be limited in the cases provided for by GDPR Article 18, and to object to its processing, on grounds relating to their personal situations, in cases where the Data Controller has legitimate grounds.
Moreover, in cases where the processing is based on consent or the contract and is performed using automated means, Data Subjects have the right to receive the data they have provided to the Controller in a structured, commonly used and machine-readable format, and if technically feasible to transmit those data to another Controller without hindrance.
Data Subjects have the right to lodge a complaint with the competent Supervisory Authority in the Member State of their habitual residence, place of work or place of the alleged infringement.
The Data Subject has the right to withdraw their consent for marketing purposes at any time and to object to the processing of their data for said purposes. Data Subjects who prefer to be contacted for the aforementioned purposes exclusively using traditional contact methods continue to have the option of objecting only to receiving communication sent using automated means.