Privacy policy

Pursuant to Articles 13 and 14 of Regulation (EU) 2016/ (also referred to hereinafter as the “GDPR”) in relation to personal data processed by the Controller, we communicate as follows:

The Controller is:

GAMBAROTTA GSCHWENDT S.R.L.- Viale Verona 200 - 38123 Trento, Vat No. 01716450224.
Tel +39 0461 920403
Fax +39 0461 933391
E-mail gambarotta@gambarotta.it

Categories of personal data, purposes and legal basis of the processing

DATA SUBJECT CATEGORIES OF DATA PURPOSES OF THE
PROCESSING
LEGAL BASIS OF THE PROCESSING

Customers

Common Data
Company data
Contact data
V.A.T. number
Banking data
Technical & design data
taking steps at the request of the data subject prior to entering into a contract Performance of a pre-contractual obligations
Compliance with contractual obligations performance of a contract
Compliance with tax and accounting obligations compliance with a legal obligation
Controller’s direct marketing Controller’s legitimate interests
Debt collection / Litigation management Controller’s legitimate interests
Suppliers Common data
Company data
Contact data
V.A.T. number
Banking data
Commerce Chamber data
CCIA enrollment certification
ISO 9001 certification
Evaluation and qualification data
Organization data
taking steps at the request of the data subject prior to entering into a contract Performance of a pre-contractual obligations
Compliance with contractual obligations performance of a contract
Compliance with tax and accounting obligations compliance with a legal obligation
Litigation management Controller’s legitimate interests
Visitors Common data
Name/Surname
Company
Compliance with regulatory requirements compliance with a legal obligation
Company’s security Controller’s legitimate interests
Employees and / or collaborators of Customers or Providers Common data
Name/Surname
Contact data
taking steps at the request of the data subject prior to entering into a contract Performance of a pre-contractual obligations
Compliance with contractual obligations performance of a contract
Members, Legal Representatives and / or Administrators of Controller / Customers / Suppliers Common data
Company data
Contact data
Tax Code
Adempimento obblighi di leggeCompliance with contractual obligations compliance with a legal obligation
Compliance with regulatory requirements Controller’s legitimate interests
Debt collection / Litigation management

How we process the personal data

The Controller has taken appropriate security measures in order to preserve the confidentiality, integrity and availability of the personal data of the data subject and imposes similar security measures on third parties and on the Processors. There is no automated decision-making process based on your data, including profiling. The processing of data is done by manual and computer tools, with strictly-related logic to the purposes of the processing.

If the Controller intends to process further your personal data for a different purpose than that for which they were collected, prior to such further processing, he will provide you with informations about this different purpose and any additional relevant information requesting, if necessary, your consent.

In case the Controller uses, for direct marketing purposes, your e-mail coordinates provided by you in the context of the sale of a product or service, it may not require your consent; in any case, you can refuse the processing, initially or during subsequent communications.

Recipients of the personal data

Personal data - which will not be disseminated - may be communicated to: employees or collaborators of the Controller, subjects who provide IT assistance, accounting, administrative, legal, tax and financial consultants, as data Processors; authorities to whom the communication of personal data is mandatory pursuant to legal provisions or orders of the authorities.

Transfers of personal data to third countries or international organisations

The Controller does not transfer the Data in non-EU countries. In the case this transfer will be necessary, it will take place for the performance of the contract or in execution of pre-contractual measures concluded with the Data Subject, as provided in derogation from art. 49 lett. b) GDPR; in this case, the Controller ensures the adoption of adequate guarantees of confidentiality and security.

Periodo of storage

Your personal data will be storaged for a period of 3 years following the offer requests or commercial contacts;

Your rights

You have the following rights:
  • The right to access your personal data;
  • The right to request the rectification of the inaccurate personal data and to obtain the integration of incomplete data, including by means of providing a supplementary statement.
  • The right to request the erasure of the personal data (on the occurrence of one of the conditions indicated in Article 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article)
  • The right to limit the data processing (as indicated in Article 18, paragraph 1 of the GDPR);
  • The right to object to the data processing;
  • The right to lodge a complaint with the Italian supervisory authority www.garanteprivacy.it