Personal Data Processing Policy

DATA CONTROLLER

Alltrad sas di Daniela Panero & C., with registered office in Turin (To), Corso Regina Margherita 95, is the Data Controller of personal data collected on this website pursuant to and due to the effects of the EU Regulation 2016/679 of 27 April 2016 (General Data Protection Regulation, GDPR).

In line with the commitment and care that Alltrad sas di Daniela Panero & C. dedicates to the protection of personal data, we hereby inform you with regard to the methods, purposes and scope of communication and dissemination of personal data and your rights, in accordance with Arts. 13 e 14 of the GDPR.

1. CATEGORIES OF PERSONAL DATA PROCESSED BY THE DATA CONTROLLER

In order to provide the services envisaged by its website, Alltrad sas di Daniela Panero & C. (hereinafter Alltrad), as Data Controller, must process certain personal data necessary for provision of the services.

This data may be implicitly provided by the tools used to access and use the services or may be explicitly provided by you.

Alltrad may process the following categories of personal data of users:

technical browsing data, relating to the IP address, identification codes of the devices used by the user for use of the website or services, browser characteristics, access times and other browsing data;
common identification data provided by the user (e.g. name, surname, email, telephone number, etc.) for use of the products and services.

2. PROCESSING PURPOSES AND LEGAL BASIS

The data and cookies received from you will be processed by Alltrad exclusively with the methods and procedures necessary to provide the services requested and for the additional purposes for which you have provided your consent.

Purposes of contract conclusion and pre-contractual negotiations

The data provided by you will be used for the performance of a contract to which you are party or for execution of the pre-contractual measures at your request.

Entry of data is optional but necessary to process your request.

Purposes of selection of personnel and freelance collaborators

The data provided by you will be used for personnel selection procedures and any subsequent recruitment or establishment of collaboration relationships.

Entry of data is optional but necessary to process your request.

Marketing purposes

Only with your express consent, the data may be used for statistical analyses, market surveys, promotional activities via social media and sending commercial information on Alltrad products and promotional initiatives.

The consent may be revoked at any time by request addressed to the Data Processor at the following addresses:

Alltrad sas di Daniela Panero & C. Corso Regina Margherita 95 Turin (To)
amministrazione@alltrad.it.

3. DISSEMINATION, COMMUNICATION AND PARTIES THAT ACCESS THE DATA

Your personal data will not be disseminated, but may be communicated where necessary for provision of the service to third parties (such as third party technical service providers and tax consultants, lawyers, mail couriers, banks, insurance companies, hosting providers, IT companies, professionals to whom an assignment has been given, entities of various kinds to which the data must be communicated by law) appointed, where necessary, as Data Processors by Alltrad for the technical or organisational tasks instrumental to provision of the services.

Access to data is also allowed by categories of Alltrad persons in charge of data processing within the organisation (administrative, commercial, marketing and customer service personnel, system administrators, employees who have been given an assignment for execution of a service).

The updated list of the Data Processors can always be requested from the Data Controller.

4. TRANSFER OF DATA ABROAD

Your personal data will be processed by Alltrad within the territory of the European Union.

Should, for reasons of a technical and/or operational nature, it be necessary to make recourse to parties located outside the European Union, or should it be necessary to transfer some of the data collected to technical systems and services managed in the cloud, located outside the area of the European Union, the processing will be regulated in accordance with the provisions of Chapter V of the Regulation and authorised on the basis of specific EU decisions. All necessary precautions will therefore be adopted to ensure the most complete protection of personal data by basing such transfer:

a) on decisions of adequacy of the third country recipients expressed by the European Commission;

b) on adequate guarantees expressed by the third party recipient pursuant to Art. 46 of the Regulation.

5. DURATION OF PROCESSING AND RETENTION OF PERSONAL DATA

Alltrad, in accordance with Art. 5.1 of the GDPR, will process your personal data for the time strictly necessary to achieve the purpose for which it was provided.

In detail:

personal data processed for the purpose of providing the service and contractual obligations will be retained for the time strictly necessary for the pursuit of the aforementioned purpose. In any case, since such personal data is processed to provide the services, the Data Controller may retain it for a longer period, in particular as may be necessary in order to protect Alltrad’s interests against any liability relating to the services;

personal data processed for marketing purposes will be retained until the consent granted by the data subject is withdrawn;

personal data processed for direct marketing purposes will be retained until the data subject objects to the processing via the link at the bottom of each email address;

personal data processed for the purpose of fulfilling legal obligations will be retained for the period provided for by specific legal obligations or applicable legislation.

6. RIGHTS OF DATA SUBJECTS

Alltrad guarantees the ability to exercise the rights provided for by the GDPR at any time. In particular, you have the right to:

a) know if the Controller is holding and/or processing personal data relating to your person and to have full access to it, including obtaining a copy (Art. 15 Right of access);

b) rectification of incorrect personal data or the right to have incomplete personal data completed Art. 16 (Right to rectification);

c) erasure of personal data in the possession of the Controller, where there is one of the reasons laid down by the GDPR (Art. 17 Right to Erasure);

d) ask the Controller to restrict the processing to certain personal data only, where there is one of the reasons laid down by the Regulation (Art. 18 Right to restriction of processing);

e) request and receive all the personal data processed by the Controller, in a structured, commonly used and machine-readable format or to request transmission to another controller without hindrance (Art. 20, Right to Portability);

f) object, in whole or in part, to personal data processing for the purposes of sending advertising material and market surveys (so-called Consent) (Art. 21 Right to object);

g) object, in whole or in part, to personal data processing in an automatic or semi-automatic manner for profiling purposes (so-called Consent).

These rights may be exercised by communication to the Data Controller whose contacts are indicated in the specific section of this policy.

Furthermore, you always have the right to lodge a complaint with the Personal Data Protection Authority, which you can contact at the address garante@gpdp.it or via the website http://www.gpdp.it.