Information relating to the processing of personal data pursuant to art. 13 of Regulation (EY) 2016/679 (“gdpr”) - Elica Club

DATA CONTROLLER
Elica SpA
Via Ermanno Casoli, n.2, 60044 Fabriano (AN)
pec address: elicaspa@sicurezzapostale.it 
Telephone: +39-07326101
(“ Company ” or “ Owner ”)

DATA PROTECTION OFFICER (DPO)
The DPO can be contacted at the email address: dpo@elica.com

Elica SpA, as Owner, pursuant to art. 13 of the GDPR, provides you, as the subject interested in the processing, the information relating to the processing of personal data (hereinafter the " Data ") collected during your registration in the Reserved Area present in the section of the website www.elica.com (hereinafter the " Site ”). You can register on the Site as: 1) private user (Private); 2) professional (Professional), 3) contact person for a company, shop or point of sale (Point of Sale)

PERSONAL DATA PROCESSED
Data means, by way of example and not limited to:
Personal data, such as name, surname,
Data relating to the user username and password;
Contact data, such as address, postal code, email address, telephone number;
Professional data, such as job title , company name; professional studio and/or company address;

PURPOSE OF THE TREATMENT
a)    Purposes related to registration in the Reserved Area of the Site and instrumental to the receipt of specific services reserved for you depending on whether you have registered as a:

• Private (dedicated services for example: product registration);
• Professional and/or Point of Sale (dedicated services for example: download of 3D product files and technical documentation, online tutorials on installation, training videos on products etc..)

b)    If necessary, to ascertain, exercise and/or defend the rights of the Owner in court.
c)    direct marketing; to send, via email, communications of a commercial nature in relation to offers, discounts, promotions and news on the Company's products and/or services, using automated or telephone contact methods;
d)    profiled marketing; analysis of the interests inferred by combining the Data provided by the interested party to send personalized commercial communications, using automated or telephone contact methods.

LEGAL BASIS OF THE PROCESSING
For the purposes referred to in letter a) the legal basis of the processing is the execution of pre-contractual measures or contractual measures of which the interested party is a party, pursuant to art. 6.1 letter b) GDPR.
For the purposes referred to in letter b) The legal basis of the processing in this case can be found in the legitimate interest of the owner, pursuant to art. 6.1 letter f) of the GDPR.
For the purposes referred to in letter c) the consent of the interested party, pursuant to art. 6.1 letter a) of the GDPR.
For the purposes referred to in letter d) the consent of the interested party, pursuant to art. 6.1 letter a) of the GDPR.

DATA RETENTION PERIOD
For the purposes referred to in letter a) for the time necessary to achieve the purposes and, in any case, until the interested party objects;
For purpose b) the Data will be processed for the duration of any dispute, until the deadlines for appeals have been exhausted.
For the purposes referred to in letters c) and d) personal and contact data will be kept until the consent is revoked and, in any case, until the end of the relationship with the interested party. The data relating to the details of the interested party's interactions with the Company will be retained for 5 years from the collection of the Data relating to the interaction (for example, participation in an event, contact for technical assistance, contact for product registration or extension of the warranty) both for direct marketing and profiled marketing.

Once the retention periods indicated above have expired, the Data will be destroyed or made anonymous, compatibly with the technical cancellation and backup procedures.

PROVISION OF DATA
The provision of data is necessary to allow you to register in the Reserved Area of the site and thus give you access to the dedicated services depending on whether you have registered as a private individual, professional or point of sale. Any refusal to provide such Data would not allow registration on the Site and therefore access to the services made available through the Site itself.

RECIPIENTS OF THE DATA
The Data may be communicated to independent data controllers and processed by subjects designated by the Company as data controllers who provide the Company with services or services instrumental to the purposes indicated in this information, such as, by way of example: the company in charge of the maintenance/management of the site the Company's internet and the electronic and/or telematic tools used by it; the company that manages the sending of commercial communications; the company that manages the sending of commercial communications, as well as the company that supplies and maintains the CRM.

SUBJECTS AUTHORIZED TO PROCESSING
The Data may be processed by employees of the company functions responsible for pursuing the purposes indicated above, who have been expressly authorized for processing and who have received adequate operating instructions.

TRANSFER OF PERSONAL DATA TO COUNTRIES NOT BELONGING TO THE EUROPEAN UNION
The Data is not currently transferred to countries outside the European Union. In any case, where data are transferred to countries outside the European Union (EU) or the European Economic Area (EEA) which have not been deemed adequate by the European Commission, the transfer mechanisms referred to in art. . 46 of the GDPR (such as the standard contractual clauses), evaluating the possible provision of "additional measures" aimed at guaranteeing a level of protection substantially equivalent to that required by European Union law.

RIGHTS OF THE INTERESTED PARTY - COMPLAINT TO THE SUPERVISORY AUTHORITY
To exercise their rights, the interested party can contact the Company at the e-mail address privacy@elica.com.
The interested party may ask the Data Controller for access to the Data concerning him, their cancellation, the rectification of inaccurate Data, the integration of incomplete Data, the limitation of processing in the cases provided for by the art. 18 GDPR.
Furthermore, in the event that the processing is based on consent or contract and is carried out with automated tools, the interested party has the right to receive the data in a structured, commonly used and machine-readable format, as well as, if technically feasible, to transmit them to another owner without impediments.
The interested party has the right to object at any time, easily and free of charge, for reasons related to the particular situation, to the processing of the Data in the hypothesis of legitimate interest of the Owner.
The interested party has the right to revoke the consent given at any time and to oppose the receipt of promotional communications by contacting the Owner or by clicking on the appropriate unsubscribe link at the bottom of each e-mail. 
When the interested party intends to exercise their rights, the Company - in case of reasonable doubts regarding the identity - may ask to identify themselves before proceeding with the request.Finally, the interested party has the right to lodge a complaint with the competent Supervisory Authority in the Member State in which he habitually resides or works or in the State in which the alleged infringement occurred.