INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF (EU) REGULATION 2016/679 (“GDPR”)

DATA CONTROLLER

Elica S.p.A.
Via Ermanno Casoli, n.2, 60044 Fabriano (AN)
indirizzo pec: elicaspa@sicurezzapostale.it
Telefono: +39-07326101
(hereinafter referred to as “Company” or “Data Controller”)

DATA PROTECTION OFFICER (DPO)

DPO can be contacted at: dpo@elica.com

Elica S.p.A., as Data Controller, pursuant to article 13 of the GDPR, provides you, as a data subject, with information regarding the processing of personal data (hereinafter referred to as "Data") collected on the “Contact us” form in the people.elica.com website (hereinafter referred to as " Web Site")

PERSONAL DATA PROCESSED

Data includes, but is not limited to:

  • Personal data, such as first name, last name and nationality;
  • Contact data, such, e-mail address, telephone number.

With regard to the optional fields (such as, "Subject" and "Message"), you are kindly requested to provide only data necessary for the achievement of the purposes specified in underlying document. Therefore, the Company will ignore and immediately delete any unnecessary data provided by you by mistake.

PURPOSES OF DATA PROCESSING

EGAL BASIS OF DATA PROCESSING

DATA RETENTION PERIOD

Any data provided by you in this form will be processed by the Company to respond, either by e-mail or telephone, to your contact/information request.

Data processing is necessary to fulfill specific requests of the data subject. The legal basis for data processing is the implementation of pre-contractual or contractual measures in which the data subject is a party, pursuant to Art. 6.1 lett. b) of GDPR.

Data provided will be stored for the time which is strictly necessary for the achievement of the purposes indicated herein. In any case, such duration shall not exceed three (3) months.

Following the expiry of the aforementioned retention periods, Data will be destroyed or rendered anonymous, subject to technical deletion and backup procedures.

PROVISION OF DATA

The provision of data is necessary to meet the request made by the data subject on the website. Therefore, refusal to provide such data would make it impossible to follow-up on contact requests.

DATA RECIPIENTS

Data may be communicated to independent data controllers and processed by subjects designated by the Company as data processors, which provide the Company with services related to the purposes of underlying document.

SUBJECTS AUTHORIZED TO DATA PROCESSING

Data may be processed by the employees of the company departments responsible for pursuing the above-mentioned purposes, who have been expressly authorised to do so and who have received adequate operating instructions.

TRANSFER OF PERSONAL DATA TO EXTRA- EUROPEAN UNION COUNTRIES

Data shall not be transferred to third countries and/or international organisations which are not within the European Union.

RIGHTS OF THE DATA SUBJECT - COMPLAINT TO THE SUPERVISORY AUTHORITY

The data subject may exercise the rights in Articles 15-22 of GDPR and, in particular, may request to access their own Data, as well as deletion, amendment of inaccurate data, integration of incomplete Data and limitation of data processing in the cases provided for by Article 18 of GDPR 1. Such rights may be exercised by sending an email to the Data Controller at privacy@elica.com . Should data subjects intend to exercise their rights, then the Company may ask them to identify before handling their request.

The data subject may lodge a complaint with the competent supervisory authority (Art. 77 GDPR) and take legal action (Art. 79 GDPR), as well.

1 Pursuant to Article 18 of the GDPR, the data subject is entitled to obtain a limitation of data processing from the data controller, in one of the following cases:
(a) the data subject disputes the accuracy of personal data, for the period necessary to the controller to verify accuracy of such personal data;
(b) data processing is unlawful and the data subject opposes the cancellation of personal data and instead requests to limit the use of the same;
(c) although the data controller no longer needs the personal data for processing purposes, such personal data is necessary to the data subject to ascertain, exercise or defend one of their rights in a Court of Law;
(d) the data subject opposed to data processing pursuant to Article 21(1), pending the verification as to whether the legitimate grounds of the data controller prevail over those of the data subject.
Should data processing be limited as pursuant to paragraph 1, such personal data shall, except for storage, only be processed with the consent of the data subject or to ascertain, exercise or defend one of their rights in a Court of Law or to protect the rights of another natural or legal person, or for reasons of substantial public interest of the European Union or of a Member State. A data subject who obtained a limitation in data processing pursuant to paragraph 1, shall be informed by the data controller before such limitation is canceled.