INFORMATION NOTICE REGARDING THE PROCESSING OF USERS’ PERSONAL DATA IN ACCORDANCE WITH EU REGULATION 2016/679 (“GDPR”) – CONTACT US
DATA CONTROLLER
KUPRAL S.P.A.
Via Calvisano n. 30
Leno (25024 BS)
Tel. +39.030.9038794
indirizzo e-mail: privacy@kupral.com
(The “Company”)
Personal data processed
By way of example, “Data” refers to: first name, last name, residence, VAT no./tax code, telephone numbers, email address, professional category. In response to the social login, social networks will communicate the following data to Kupral name, last name, e-mail and (if necessary) profile image.
| DATA PROCESSING PURPOSES | LEGAL BASIS FOR PROCESSING DATA | DATA RETENTION PERIOD |
|---|---|---|
| Creation of Company CRM personal data. | Execution of a contract or precontractual measures pursuant to art. 6 paragraph 1 letter. b) GDPR | Until request for cancellation from CRM. |
| The data provided by completing the form will be processed by the Company to respond to requests for information on the Company itself and/or its products/services. | Execution of a contract or precontractual measures pursuant to art. 6 paragraph 1 letter. b) GDPR | Until request for cancellation from CRM. |
Once the retention terms indicated above have passed, the Data will be destroyed, deleted or anonymised, in accordance with the technical procedures for deletion and backup and with the accountability needs of the data controller.
DATA PROVISION COMPULSORINESS
The provision of data highlighted with an asterisk (*) or requested verbally is necessary for the creation of the registry in the CRM of the Company and to be able to reply to requests for information; the refusal to provide the aforementioned data does not therefore allow you to use the services, nor does it allow the Company to process your request for information.
DATA RECIPIENTS
Data may be processed by external subjects operating as data controllers such as, by way of example, other companies of the Kupral Group, supervisory and control authorities and bodies and in general subjects, public or private, entitled to request data (eg: loyal installers, sector distributors). The data may also be processed, on behalf of the Company, by external subjects designated as data processors, who carry out specific activities on behalf of the owner, by way of example, a Kupral Group Company. These subjects can essentially be included in the following categories:
- companies that offer e-mail sending services;
- companies that offer website maintenance services;
- companies that offer support in carrying out market studies;
- companies that offer marketing and telemarketing services;
- business partners in sales, co-marketing or event organization activities;
- commercial agencies;
- professional firms.
Data may be communicated to external parties operating as data controllers, for example supervisory bodies and authorities and public or private parties in general authorised to request data.
PARTIES AUTHORISED TO PROCESS DATA
Data may be processed by employees in company departments who are responsible for carrying out the activities outlined above and have been authorised to process the data and have received suitable operating instructions.
TRANSFER OF PERSONAL DATA TO COUNTRIES NOT BELONGING TO THE EUROPEAN UNION
Personal Data will be processed within the European Union and stored on servers located within the European Union. If for technical and / or operational reasons it is necessary to make use of subjects located outside the European Union, or to transfer some of the data collected to systems managed in the cloud and located outside the European Union, the processing will be regulated in compliance with the provisions of Chapter V of the GDPR and authorized on the basis of specific decisions of the European Union. All necessary precautions will therefore be taken in order to guarantee the most complete protection of Personal Data. In particular, the transfer will be carried out on the basis of adequacy decisions of the recipient third countries expressed by the European Commission and of adequate guarantees of the recipient third party or on the basis of standard contractual clauses pursuant to art. 44 and ss. of the GDPR.
DATA SUBJECTS’ RIGHTS- COMPLAINT TO THE SUPERVISORY BODY
By contacting Kupral S.p.A. via e-mail sent to privacy@kupral.com, data subjects can ask the Company for access to personal data, or the correction or deletion of personal data, and also have the right to restrict processing of the data in the cases set out in article 18 of the GDPR, and object to processing in the case of legitimate interests of the controller.
Furthermore, in the case where processing is based on consent or a contract and carried out with automated tools, data subjects have the right to receive the personal data in a structured, commonly used and machine-readable format, and to transmit the data to another data controller without obstruction. Data subjects have the right to withdraw consent at any time in relation to data processed for marketing purposes, and object to data being processed for these purposes. Data subjects have the possibility of stating a preference for being contacted for the aforementioned purposes through conventional methods and objecting to receiving communication through automatic methods only.
Data subjects have the right to lodge a complaint to the competent Supervisory Authority in the member state where they are resident or where they work, or the member state where the alleged breach took place.
Data subjects have the right to withdraw consent at any time in relation to data processed for marketing purposes, and object to data being processed for these purposes. Data subjects have the possibility of stating a preference for being contacted for the aforementioned purposes through conventional methods and objecting to receiving communication through automatic methods only.