PRIVACY DISCLOSURE - Regulation EU 679/2016

INTRODUCTION
DE RIGO REFRIGERATION srl
, with headquarters at 10 Via G. Buzzatti, 32036 Sedico BL - Italy, Tax Code and VAT No. 00063550255 (hereinafter the “Controller”), in the capacity of Data Controller, informs you pursuant to art. 13 of Regulation EU no. 2016/679 (hereinafter the “GDPR”) that your data will be processed with the following modalities and for the following purposes:

1) Subject of the processing
The Controller processes personal, identifying and non-sensitive data (in particular, name, surname, tax code, VAT number, e-mail address, telephone number - hereinafter "personal data" or even "data") communicated during registration on the website of the Controller and/or when subscribing to the newsletter service offered by the Controller or directly during trade fairs and/or by e-mail and/or by telephone for requests on our products. In the case of spontaneous submission of CVs by candidates, the processing of special data may be necessary, that is of personal data suitable for detecting racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of political parties, trade unions, religious or philosophical, political or trade associations or organisations, health status and sexual life (hereinafter special data).

2) Purpose of the processing
Personal data are processed: 

2A) Without your express consent (art. 6 letters b, e of the GDPR), for the following purposes:

3) Modality of the processing
The processing of your personal data is performed by means of the operations indicated in art. 4, no. 2) of the GDPR and more precisely: collection, registration, organisation, retention, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data. Your personal data are subjected to both paper and electronic and automated processing.

The Controller will process the personal data for the time necessary to fulfil the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the Purposes of Service and no later than 2 years from the collection of data for Marketing Purposes.

4) Access to data
Your data may be made accessible for the purposes referred to in art. 2.A):

5) Data communication
Without the express consent of the data subject (art. 6 letters a), b), c) of the GDPR), the Data Controller may communicate the personal data for the purposes referred to in art.  2.A) to the Supervisory Bodies, Judicial Authorities and to all other persons to whom the communication is mandatory by law for the accomplishment of said purposes. The data will not be disseminated.

6) Data transfer
The management and storage of personal data will be carried out on servers located within the European Union and run by the Data Controller and/or third-party companies duly appointed as Data Processors. Currently our servers are located in Italy. The data will not be transferred outside the European Union. In any case, it is understood that the Data Controller, where necessary, will have the right to move the server location to Italy and/or the European Union and/or non-EU countries. In this case, the Data Controller hereby ensures that the transfer of data outside the EU will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection and/or adopting the standard contractual clauses provided by the European Commission.

7) Nature of the provision of data and consequences of refusal to respond
The provision of data for the purposes referred to in art. 2.A) is mandatory. In their absence, we cannot guarantee the purposes of art. 2.A). You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material concerning the Services offered by the Data Controller. In any case, you will continue to be entitled to the Services referred to in art. 2.A).

8) Rights of the data subject
In your capacity as the data subject, you have the rights referred to in art. 15 of the GDPR and precisely the right to:

8.A) Obtain confirmation as to whether or not personal data concerning you exist, regardless of whether they have already been recorded, and communication of such data in intelligible form;

8.B) Obtain specification:

8.C) Obtain:

8.D) Object, in whole or in part:

 

9) Mechanism to exercise rights

You can at any time exercise your rights by sending:

10) Data Controller, Data Processors and Persons in charge of the processing
The Data Controller is DE RIGO REFRIGERATION Srl, with headquarters at 10 Via G. Buzzatti, 32036 Sedico (BL) - Italy. The updated list of Data Processors and persons in charge of the processing is kept at the Data Controller's headquarters.

11) Changes to this Disclosure
This Disclosure may change. It is therefore advisable to regularly check this Disclosure and refer to the latest version.