1 DATA CONTROLLER
The data controller of personal data is “Valente srl”, with registered office in Campodarsego (PD), Via Luigi Galvani, 2/4, tax code and VAT number 00257760280, with the following contact details: https://valentepali.com/contacts/
2 CATEGORIES OF DATA PROCESSED AND COLLECTION METHODS
Your browsing on the site and / or entering data in some areas of the same may result in the collection and subsequent processing of your Personal Data on our part. In fact, the IT systems and software procedures set up for their operation provide and / or automatically and indirectly acquire certain information (such as, by way of example, the so-called “cookies” – as specified below) or the data expressly specified in the collection formats , such as name, surname, e-mail address, nationality, address, telephone number, e-mail address, information on the market sector in which you operate and information on products used or on which you are interested).
3 PURPOSE OF THE DATA PROCESSING AND LEGAL BASIS FOR THE PROCESSING
| Purpose of the data processing | Legal basis for the processing | Storage period |
| Management of specific requests sent to the Data Controller through a contact initiated by the data subject | consent | until the request is processed (approximately 2 months) |
| marketing | consent | until consent is withdrawn |
| newsletter communication | consent | until consent is withdrawn |
| marketing and tracking cookies (third parts included) | consent | max 6 months |
| management of regulatory requirements (accounting, administrative, tax, etc.) | legal obligation | 10 years |
| dispute management and any legal disputes | legitimate interest | 10 years |
When your Personal Data are processed based on your consent, such consent may be withdrawn at any time by using the link at the bottom of each promotional email (for marketing and the newsletter) or by sending us an email to the address specified in the contacts above.
The Data Controller ensures that it will not keep your Personal Data for a period of time longer than necessary to satisfy the purpose for which they were processed. The data will be stored for the time allowed or required by law.
4 HOW WE TREAT YOUR DATA
The processing of your Personal Data may include any type of operation including collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
Operations can be performed with or without the aid of electronic or automated tools.
The processing is carried out by the Data Controller and / or by the persons in charge of processing who operate under the direct authority of the Data Controller, following the instructions given or by third parties appointed as external data processors.
5 WHERE WE TREAT YOUR DATA
Your Personal Data are processed mainly at the premises of the Data Controller and in the places where the data processors are located.
If you give consent to the processing for marketing and promotional purposes, some of your Data (name, surname, e-mail address) will be transferred to our partners for the newsletter software that are located all over the world, even outside of European Union.
We inform you that we transfer your Personal Data only to persons who are in countries for which there is a specific decision of the EU Commission that guarantees their adequacy and the guarantee of treatment according to the provisions of Reg. 679/16 (GDPR) or only prior verification of the registration of the person in charge of external processing within the system called “Privacy Shield”.
6 WHO ARE THE RECIPIENTS OF YOUR PERSONAL DATA
Your Personal Information may be disclosed to and processed by:
the. legal or physical persons acting as external processors, carrying out outsourced activities, appointed by the Owner or by the external data controllers of the Data Controller (including subjects who are entrusted with assistance, communication, marketing, advertising, promotions and sales of products and / or services as well as advertisers, advertising agencies, IT service providers, Site / APP managers, electronic platform operators, partners, credit institutions, professional firms);
- employees and / or collaborators of the Controller (including system administrators) who, operating under the direct authority of the latter, will be authorized to process your Personal Data; is
iii. employees and / or collaborators of external data controllers (including system administrators) who, operating under the direct authority of external data controllers, will be authorized to process your Personal Data.
Your Personal Information will not be disclosed to third parties except in the case where your Personal Data should be communicated by the Owner to consultants in order to protect their rights, or disseminated.
7 OBLIGATION TO PROVIDE DATA
The provision of data must be considered mandatory with regard to the processing that the organization must perform to fulfill its obligations towards the data subject on the basis of the relationship (or contract) in place, as well as legal obligations, rules, regulations.
Consent is not mandatory for all other purposes and, even if conferred, can be revoked at any time by the interested party.
8 REFUSAL OF PROVIDING DATA
Failure to provide the data that the person is required to communicate may make it impossible to satisfy your requests or to run a business relationship and contracts that you want to establish with the Owner.
In case of non-provision of non-mandatory data, the consequences will be assessed from time to time, having regard to the specific case and presumably will result in the non-execution of the service linked to such data.
9 RIGHTS OF THE DATA SUBJECTS
The Privacy Policy recognizes you, as a data subject, numerous rights. In particular, you have the right to:
| Right | Description |
| Right of withdrawal of consent (Article 13 paragraph II letter A and article 9 paragraph II letter A GDPR) |
You have the right to withdraw consent at any time for all those treatments whose legitimacy is your consent, as indicated in the table of purposes described above. The withdrawal of consent does not affect the lawfulness of the previous treatment. |
| Right of access by the data subject (Article 15) | You can request a) the purposes of the treatment; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations; (d) where possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period; e) the existence of your right to ask the Data Controller to rectify or delete personal data or limit the processing of personal data concerning you or to oppose their treatment; f) the right to lodge a complaint with a supervisory authority; g) if the data are not collected from you, all available information on their origin; (h) the existence of an automated decision-making process, including the profiling referred to in Article 22 (1) and (4) and, at least in such cases, significant information on the logic used, and the importance and expected consequences of such processing for you. You have the right to request a copy of the personal data being processed. |
| Right to rectification (Article 16) | You have the right to request the correction of inaccurate personal data concerning you and to obtain the integration of incomplete personal data. |
| Right to be forgotten (Article 17) | You have the right to obtain from the Data Controller the deletion of your personal data if personal data are no longer necessary for the purposes for which they were collected or otherwise processed, if you revoke your consent, if there is no legitimate overriding reason to proceed with the profiling treatment, if the data have been processed unlawfully, if there is a legal obligation to delete them; if the data are related to web services to minors without consent. The cancellation can occur unless the right to freedom of expression and information prevails, whether they are kept for the fulfillment of a legal obligation or for the performance of a task carried out in the public interest or in the exercise of public powers, for reasons of public interest in the health sector, for purposes of archiving in the public interest, scientific or historical research or for statistical purposes or for the establishment, exercise or defense of a right in court. |
| Right to restriction of processing (Article 18) | You have the right to obtain from the Data Controller the limitation of processing when you have contested the accuracy of personal data (for the period necessary to the Data Controller to verify the accuracy of such personal data), or if the processing is illegal and you oppose the cancellation of personal data and ask instead that its use is limited, or if you are necessary for the assessment, exercise or defense of a right in court, while the holder is no longer needed. |
| Right to data portability (Article 20) | You have the right to receive, in a structured, commonly used and automatically readable form, personal data concerning you and provided to us and you have the right to send them to another if the treatment is based on consent, contract and if the processing is carried out by automated means, unless the processing necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority and that such transmission does not infringe the right of a third party. |
| Right to propose a complaint to the supervisory authority (Supervisor Authority for the protection of personal data) (Article 77) | Without prejudice to any other administrative or judicial appeal, if you believe that your treatment violates the regulation on personal data protection, you have the right to lodge a complaint with a supervisory authority, particularly in the Member State in which you usually reside. works or the place where the alleged violation has occurred. |
10 MODALITIES OF EXERCISE OF RIGHTS
You may exercise these rights at any time by contacting the Data Controller at the addresses indicated above.
You can submit a claim to the Supervisor Authority following the instructions provided on the website of the Supervisor Authority, in the “Forms” section, under “Complaint” (or by clicking on the following link) (only for Italy).
rev. no. 2.0, last amended: 31 August 2020