Privacy notice for newsletter

Privacy Notice for the Processing of Personal Data of Customers and Suppliers pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council (GDPR)

Data Controller

The Data Controller is: D’Andrea S.p.A., Via Garbagnate, 71, 20045 Lainate (MI), Italy, Email: privacy@dandrea.com, Company phone: +39 02 937532.1

Purpose and Legal Basis of Processing

The personal data provided are collected for the purpose of sending communications, commercial offers and informational material, invitations to events and exhibitions, promotional activities related to D’Andrea products, including ancillary and supporting activities (i.e. administrative, organizational and management activities), as well as for compliance with legal obligations.

Categories of Personal Data Processed

The personal data processed consist of ordinary personal data acquired from the customer for the management of informational material and communications. No processing of special categories of personal data (Article 9 of Regulation (EU) 2016/679) is envisaged.

Categories of Recipients of Personal Data

The processed data may be disclosed to internal company departments and to authorized D’Andrea Distributors appointed to process personal data, as well as to external companies providing IT support services. To the extent necessary, the data may also be disclosed to third-party companies and professionals involved in managing the contractual relationship.

Please note that D’Andrea S.p.A. makes use of cloud computing application services located in EU countries, web platforms, and email service providers whose data centers are situated within the European Economic Area (EEA).

Except where required for specific legal obligations, personal data are not transferred to additional companies or third countries, particularly to countries that do not provide adequate safeguards with regard to personal data protection.

Data Retention Period

The collected data will be processed through electronic or automated instruments, IT and telematic systems, as well as through manual processing methods strictly related to the purposes for which the personal data were collected and, in any case, in a manner ensuring their security at all times. The processing of personal data will last from the establishment of the contractual relationship until the termination of the contract, plus an additional period of ten (10) years, in order to comply with legal, accounting and tax obligations.

The data subject’s fundamental rights are set out in Articles 15 (right of access), 16 (right to rectification), 17 (right to erasure or “right to be forgotten”), and 18 (right to restriction of processing) of Regulation (EU) 2016/679. To exercise these rights, the data subject may submit a written request to: privacy@dandrea.com, Company phone: +39 02 937532.1. The Data Controller shall acknowledge receipt and respond to the request within 72 working hours.

Pursuant to Article 19 of the Regulation, requests concerning the rights referred to in Articles 16, 17 and 18 shall be communicated by the Data Controller and/or the Internal Data Protection Manager, where applicable.

Right to Lodge a Complaint with a Supervisory Authority

The data subject has the right to lodge a complaint with the competent supervisory authority.

Requirement to Provide Personal Data and Consequences of Failure to Do So

Failure to provide the personal data required for the purposes described above will prevent the Data Controller from managing the contractual relationship and from providing the requested information.

Consent I, the undersigned, having read and understood the above Privacy Notice, hereby authorize D’Andrea S.p.A., pursuant to and for the purposes of Articles 13 and 14 of Regulation (EU) 2016/679 and subsequent amendments, to process my personal data for the purposes described in this Privacy Notice.