INFORMATION NOTICE REGARDING THE PROCESSING OF PERSONAL DATA

PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 ("GDPR")

 

Elica S.p.A. (hereinafter also referred to as the “Data Controller” or the “Company”), with the following information notice provides information regarding the processing of personal data provided by users (hereinafter also referred to as the “Data Subjects”) by filling the forms “Techincal Assistance” and/or “Contacts” included within the website https://www.elica.com/GB-en.

It should be noted that the personal data provided will be shared with Dr Cooker Hoods (hereinafter also referred to as the “Retailer”), 2 Alpha RD, Aldershot, GU12 4RG, 01252351111, as the official retailer of Elica S.p.A.

With regard to this activity, the Retailer must be considered as an autonomous data controller and it will provide to the Data Subjects its own information notice concerning the processing of personal data pursuant articles 13 and 14 of the GDPR.

 

DATA CONTROLLER

Elica S.p.A.
Address: via Ermanno Casoli, n.2, 60044 Fabriano (AN), Italy

Phone number: 07326101

E-mail address: elicaspa@sicurezzapostale.it

DATA PROTECTION OFFICER (“DPO”)

The Data Protection Officer can be contacted at the following e-mail address: dpo@elica.com

 

CATEGORIES OF PERSONAL DATA PROCESSED

The personal data (hereinafter also referred to as the “Data”) being processed are: name, surname, e-mail address, country and post code (which can be qualified as “Common Data”).

 

PURPOSES OF THE PROCESSING

LEGAL BASIS FOR THE PROCESSING

DATA RETENTION PERIOD

Provide feedback to requests for information and/or technical assistance submitted by Data Subjects via dedicated online forms. These requests will be shared with the Retailer, who will manage them autonomously and independently.

The condition that makes processing lawful is the performance of a contract pursuant art. 6 (1) lett. b) of the GDPR.

The Data will be retained for a maximum of 3 (three) months.

If necessary, to establish, exercise or defend the Data Controller's rights in court.

The condition that makes processing lawful is the legitimate interest of the Data Controller, pursuant art. 6 (1) lett. f) of the GDPR.

In the case of judicial proceedings, throughout the duration of the litigation, until the time limits for appeal actions have expired.

Once the aforementioned retention periods have expired, the Data will be destroyed, deleted, or anonymized, in accordance with the technical procedures for deletion and backup.

 

PROVISION OF PERSONAL DATA

The provision of Data highlighted with an asterisk (*) in the data collection form is mandatory in order to allow the proper processing of the request for information and/or technical assistance; therefore, failure to provide such Data will not allow the Retailer to provide a reply.

The provision of Data not highlighted by an asterisk (*) in the data collection form is entirely optional.

  

SUBJECTS AUTHORIZED TO THE PROCESSING

The Data may be processed by employees in the Company’s departments deputed to the pursuit of the aforementioned purposes, who have been expressly authorized for processing and have received adequate operational instructions.

 

DATA RECIPIENTS

In order to ensure the proper fulfillment of requests for information and/or technical assistance, the Data will be communicated to the Retailer, which will autonomously and independently manage the requests thus acting as autonomous data controller.

In the cases provided for by law, the Data may also be communicated to subjects, entities or authorities acting as autonomous data controllers.

The Data may also be processed, on behalf of the Company, by external parties designated as Data Processors pursuant to Article 28 of the GDPR, to whom appropriate operational instructions are given. These subjects are essentially included in the category of providers of services related to the transmission of electronic communications (e-mail).

 

TRANSFERS OF PERSONAL DATA TO NON-EUROPEAN COUNTRIES

Where Data is transferred to countries outside the European Union (EU) or the European Economic Area (EEA) that have not been deemed adequate by the European Commission, the transfer mechanisms set forth in Article 46 of the GDPR (such as standard contractual clauses) will be applied, with consideration given to whether "additional measures" are provided to ensure a level of protection substantially equivalent to that required by EU law.

 

RIGHTS OF THE DATA SUBJECTS – RIGHT TO LODGE A COMPLAINT TO THE SUPERVISORY AUTHORITY

By sending an e-mail to privacy@elica.com the Data Subjects can contact the Data Controller, in order to request:

  • access to personal data concerning them (art. 15 of the GDPR);
  • their rectification and/or integration (art. 16 of the GDPR);
  • the erasure of their data (art. 17 of the GDPR);
  • the restriction of the processing (art. 18 of the GDPR);
  • to object to the processing in cases of legitimate interest of the Controller (art. 21 of the GDPR);
  • the receipt of the Data in a structured, commonly used, machine-readable format, as well as, if technically feasible, to transmit it to another owner without hindrance (“data portability”, art. 20 of the GDPR).

Data Subjects also have the right to lodge a complaint with the competent Supervisory Authority, in accordance with art. 77 of the GDPR, if they believe that the processing of their Data is in violation of the applicable legislation.