Privacy Policy

Information provided pursuant to art. 13-14 of the GDPR (General Data Protection Regulation) 2016/679 The company Edil Lame Srl, with headquarters in via Pisana n. 78 in Barberino Val d'Elsa (FI) - Fiscal Code, VAT number and registration number in the Florence Company Register 01059150522 (hereinafter, "Owner") in the person of its pro tempore legal representative in your capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Reg. 2016/679 (hereinafter GDPR), hereby informs you that the aforementioned legislation provides for the protection of data subjects with regard to data processing personal data and that this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights, in compliance with the provisions of art. 5 of the GDPR. Pursuant to articles 13 and 14 of the GDPR, therefore, we provide you with the following information: Object of the Treatment The Data Controller processes personal identification data (for example, name, surname, telephone number, tax code, email address, user ID and password, etc.), communicated by you or obtained from other sources (in the context of use and navigation of the our portal, it may happen that some personal data are collected automatically through so-called "cookies", such as, for example, in the case of collection of the user's IP address and other information relating to the permanence on the website or the preferences expressed by the user in choosing the services offered by the site. This information and data are collected directly and automatically by the website and as part of its functioning. For further details on the functioning, you can read our Information on cookies). Purpose of the processing and legal basis Your personal data are processed: A) for the following purposes related to the implementation of obligations relating to legislative, contractual or legitimate interest obligations: response to requests, comments and reports sent; formulation of estimates - (legitimate interest); customer assistance and management; exercise of the rights of the Owner (for example the right of defense in court or debt collection and assessment of solvency) - (legitimate interest); use of the site (for access and navigation) detection of the degree of customer satisfaction; fulfillment of obligations established by law, by a regulation, by community legislation or by an order of the Authority; ensure network and information security - (legitimate interest), for direct promotional activities relating to products and/or services similar to those purchased (recital 47 GDPR) - (legitimate interest); fraud prevention - (legitimate interest); the processing for the aforementioned purposes will take place without your express consent pursuant to art. 6 lett. b) and c) and f) GDPR. The Data Controller does not require the interested party to provide data c.d. "particular", i.e., according to the provisions of the GDPR (art. 9), data revealing "racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, data biometrics intended to uniquely identify a natural person, data relating to the health or sex life or sexual orientation of the person". If the processing concerned these data, the same would take place only with your specific and distinct consent. We inform you that, taking into account the purposes of the processing as illustrated above, the provision of data is mandatory and their failure, partial or incorrect provision may have, as a consequence, the impossibility of fulfilling the contractual obligations envisaged. B) only with your specific and distinct consent pursuant to art. 6 lett. a) GDPR, for the following additional purposes: send you (by e-mail, post, sms, telephone contacts, etc., also through specialized companies) newsletters, commercial communications and/or advertising material on products or services other than those offered by the Data Controller, invitations and registrations to events of which you are a part or which organizes the Owner; send you (via e-mail, mail, sms, telephone contacts, etc.) newsletters, commercial and/or promotional communications from third parties (for example other related companies or other commercial partners); elaborate statistical surveys and market research carried out directly by the Data Controller or through the work of specialized companies; detect customer satisfaction with the products and/or services offered in relation to purchasing habits or choices.

The provision of data is optional for you with regard to the aforementioned purposes, and your refusal to process it does not compromise the continuation of the relationship or the adequacy of the treatment itself. Your consent to use your personal data for marketing purposes can be withdrawn at any time. If the person who provides the data is under the age of 14, this treatment is lawful only if and to the extent that consent is given or authorized by the holder of parental responsibility for which the identification data are acquired. 3. Processing methods Your personal data may be processed both with manual and/or IT and telematic tools. Each treatment takes place in compliance with the methods set out in the articles. 6 and 32 of the GDPR and through the adoption of the appropriate security measures envisaged. 4. Data Retention In compliance with the art. 5, co. 1, lit. e) of the GDPR, we will keep your data only for the time necessary to process them for the purposes for which they are processed. If we process the data for multiple purposes, it will be deleted or saved in a format that does not allow any direct conclusions to be drawn as to your identity, as soon as the last specific purpose has been fulfilled. In accordance with the provisions regarding the obligations to keep documents for accounting purposes and the general rules relating to the ordinary limitation period for contractual actions, we will delete the data relating to the contractual relationship after the ten-year term established by law. In the case of treatment for marketing purposes, we will keep the information for a period of time not exceeding the achievement of the purposes for which they are collected and processed. Indicatively, for the majority of treatments carried out, this period of time will be assimilated to the ten-year retention term. 5. Communication, transfer and dissemination Your data will be processed only by personnel expressly authorized by the Data Controller and, in particular, by the following categories of employees: agents, marketing office employees, administration office employees, other duly authorized employees or collaborators in compliance with the provisions of art. 29 GDPR. Your data may be communicated to third parties appointed as Data Processors, in particular to: consultants and freelancers (also in associated form), banks and credit institutions, providers (for website, e-payment service, cloud, etc.), suppliers, hardware and software assistance technicians, shippers and carriers, etc. They can also be communicated to Public Administrations and Bodies to which the communication of data is mandatory by law, by a regulation or by a community legislation. The management and storage of personal data will take place in Europe, on the servers of the Data Controller and/or of third-party companies appointed and duly appointed as Data Processors. The data will not be transferred to non-EU countries. In any case, personal data will not be disseminated. The updated list of managers, persons in charge of processing and subjects to whom the data is communicated is kept at the registered office of the Data Controller.

6. Rights of the interested party As an interested party, you may, at any time, exercise the rights: to. access to personal data (obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form); b. to obtain the rectification or cancellation of the same (right to be forgotten) or the limitation of the treatment that concern him (provided the relative conditions established by law exist); c. to oppose the treatment; d. data portability; And. to withdraw the consent, where foreseen (the withdrawal of the consent does not affect the lawfulness of the treatment based on the consent given before the revocation); f. to lodge a complaint with the supervisory authority (Privacy Guarantor for the protection of personal data; contact details available at: http://www.garanteprivacy.it/web/guest/home/footer/contatti). 7. Contacts and miscellaneous For any requests for information and to exercise your rights, you can contact the Data Controller at the following addresses: • telephone number: 0558078037 • fax number: 0558078174 • by mail by writing to the address indicated at the top of this document We inform you that this Information will be subject to periodic updates of which specific evidence will be given.