Privacy Policy

PERSONAL DATA PROCESSING POLICY in accordance with the requirements of Article 13 of EU Regulation 2016/679.

This document ("Policy") contains notification that the Data Processing Rights Holder, as defined further in this document, is obligated to inform you of the purposes and methods of processing the personal data you provide, as well as notify you of your rights provided by EU Regulation 2016/679 regarding individuals and the use of their personal data, as well as the free circulation of such data (GDPR). This document relates exclusively to data related to the website www.poliform.it ("Site").

1. Who is the Data Use Rights Holder. The Data Use Rights Holder is Poliform S.p.A. ("Poliform" or "Holder"), legal address: 22044, Inverigo (Como), Italy, via Montesanto 28.

2. What personal data we process 2.1. General personal data In response to your specific request and for the purposes specified in Article 3 of this Policy, the Data Use Rights Holder processes the following personal data: general and contact information such as name, surname, address, phone number, email address and any additional data that you will provide from time to time through forms on the Site.

2.2. Navigation data The computer systems and computer programs used to operate the Site collect some personal data whose transmission is implied when using internet communication protocols (for example, IP addresses or domain names of computers used by users who connect to the Site, URI (Uniform Resource Identifier) addresses of requested resources, request time, method used when sending the request to the server, size of the file received in response, numerical code of the response status made by the server (successful, error, etc.), as well as other parameters related to the User's operating system and IT environment). Although this information is not collected to connect with identified data subjects, by its nature it may allow identification of data subjects through processing and connection with data stored by third parties. The sole purpose for which this data is used is to obtain anonymous statistical information about Site usage and verify its correct operation. The data is deleted immediately after processing. This data may be used to establish responsibility in case of hypothetical computer crimes against the Site: except for this possibility, contact data is currently not stored for more than seven days.

2.3. Cookies In some cases, Poliform collects personal data using various technologies, including cookies. Cookies are small text files created by some websites and sent to the user's browser when entering the site. This information can then be stored on your computer using a tag that identifies the device, but not the user. Some pages of the Site use cookies sent by Poliform or third parties, and other technologies to ensure the technical functioning of the Site itself for better use and conducting statistical analysis. For more information, refer to the Cookie Use Policy.

3. Purposes and legal bases of processing

3.1. Contract conclusion and fulfillment of legal obligations. Your personal data will be processed by the Holder for purposes strictly related to the contract you signed with Poliform and contributing to its fulfillment, as well as to fulfill obligations established by laws, regulations and/or regulatory acts of the European Community or supervisory and control bodies, as well as other authorized bodies. For processing personal data for the purposes specified in this paragraph, it is not necessary to obtain your consent, since the legal basis for processing is, in accordance with applicable law, contract performance and legal obligations. Your personal data will be processed for the time necessary to achieve the specified purpose, and subsequently stored only for the period of time necessary to comply with legislative requirements.

3.2 Request management. Your personal data will be processed to respond to requests sent through the Site (for example, information requests through the form on the "Contacts" page, registration on the Site). The legal basis for data processing in accordance with applicable law is satisfying your request. Thus, the Holder does not need your consent to perform data processing. Within the framework of satisfying the request, your personal data will be processed for the time strictly necessary to fulfill the above requirement, and in any case will not be stored for a period exceeding [6] months. In case of registration, your personal data will be stored as long as you are registered on the Site. To fulfill legal obligations, your personal data will be processed for the time strictly necessary for the above purposes, and subsequently will be stored exclusively for the period provided by applicable law (including provisions on limitation of rights).

3.3. Marketing Upon request, Poliform may process your personal data to send commercial or advertising messages (newsletter). Such processing requires your consent, which constitutes the legal basis for processing in accordance with applicable law. Data will be processed by the Holder until you decide to withdraw your consent and/or demand cessation of processing. Consent to data processing can be withdrawn at any time. The user has the right to demand cessation of direct marketing activities. For this, it is necessary to contact the Holder at the following address: pr*****@******rm.it.

4. Nature of personal data processing and consequences of refusal Providing personal data is a mandatory condition for the purposes specified in Article 3.1. Thus, your refusal will deprive the Holder of the ability to provide the services you request. Providing personal data is not a mandatory condition for the purposes specified in Article 3.2. In this case, your refusal does not affect Poliform's ability to fulfill your request, but only for the purpose of informing about offers and/or new products and initiatives.

5. Methods of personal data processing Personal data processing is carried out in accordance with the provisions of the General Data Protection Regulation (GDPR) using paper, information and telematic means for the specified purposes and appropriate methods ensuring data security and confidentiality in accordance with the provisions of Article 32 GDPR.

6. Who can access personal data To achieve the purposes described in Article 3, personal data may be communicated to employees, external consultants and Poliform staff who act as persons authorized to process personal data. In addition, Poliform may need to transfer your personal data to third parties of the following categories: entities providing services for managing the Holder's IT systems; entities providing technical services; entities providing logistics or transport services; entities providing professional consulting and financial, legal and judicial assistance; supervisory and control bodies and generally public or private entities performing public functions. Entities belonging to the above categories may in some cases act as data processing rights holders specifically appointed by the Holder in accordance with the provisions of Article 28 GDPR. The user has the right to request at any time a list of persons responsible for data processing by contacting the Holder at the addresses specified in Article 1. Your personal data will not be disclosed.

7. Rights of the interested party Regarding the procedures described in this Policy, the person who provides their personal data may exercise the rights listed below, as provided in Articles 15-21 GDPR. In particular: right of access: the right to receive confirmation about processing/cessation of processing of provided personal data. In this case, you have the right to access your personal data, including their copy, as well as a document containing the following information: purpose of processing, categories of processed data, persons to whom they have been or will be transferred, period of their storage or criteria used to determine such period. Rights of the interested party: correction, deletion, restriction of processing and the right to object to data processing, right to appeal, right to receive information about the source of obtaining personal data if such were not obtained directly from the interested party, right to be informed about the existence of an automatic decision-making process regarding personal data, including profiling. Right to data correction: the right to correct personal data and/or supplement them. Right to deletion of personal data (right to erasure): the right to demand deletion of personal data in the following cases: if this data is no longer required to fulfill the purposes for which it was provided; if data is processed in a way different from the agreed one; if you withdrew your consent and there are no legal grounds for processing your data; if your request to cease processing personal data is accepted; if data was used illegally; if data needs to be deleted for legal reasons; if data was obtained in connection with providing information services, as specified in Article 8, paragraph 1 GDPR. The right to data deletion does not apply to cases where data use is necessary to fulfill legal obligations, for purposes affecting public interests, for purposes related to judicial proceedings or protection of rights. Right to restriction of data use: the right to restriction of data use may be exercised in the following cases: if the interested party disputes the accuracy of personal data; if data is used illegally; if the interested party declares unwillingness to delete data and requires only restriction of its use; if data is necessary for the interested party for judicial proceedings or protection of rights. Right to demand not to process personal data: the right to demand not to process personal data, except for cases provided by law that give the Holder the right to continue processing the provided data. Right to data portability: the right to receive in a structured format, commonly used and readable by automatic device, all personal data provided by you to the Holder, as well as the right to transfer them to another holder without any obstacles, if data processing expires from obtained consent and is performed by automated means. In addition, the right to obtain from Poliform direct transfer of your personal data to another holder, if this is technically possible. Right to file complaints with the Personal Data Protection Guarantor, Piazza di Montecitorio n. 121, 00186, Rome (RM).

To exercise the above rights in relation to the Holder, contact the links specified in Article 1 above.