La società CONTACT ITALIA S.p.A., with reference to the processing of the personal data you have provided in connection with the contract entered into with the Company, wishes to provide you, as the data subject (the “Data Subject”), with the following information pursuant to Articles 13 and 14 of Regulation (EU) 2016/679 (“GDPR”)

1.       DATA CONTROLLER
The Data Controller is CONTACT ITALIA S.p.A. (the “ControllerTax Code and VAT No. 05215040725, with registered office at Via S.P. 157 S.1456, 70022 Altamura (BA), Italy, email: privacy@contactitalia.it
Within its organizational structure, the Controller appoints authorized persons to process personal data and assigns them specific duties and responsibilities through a formal appointment.

2.       DATA PROTECTION OFFICER (DPO)
The Controller has appointed a Data Protection Officer (DPO – Data Protection Officer) pursuant to Articles 37–39 GDPR. If necessary, the DPO may be contacted at: dpo@contactitalia.it


3.       CATEGORIES OF PERSONAL DATA PROCESSED
The personal data (“Data”) processed consist of ordinary personal data, including:

1. Identification and personal details (such as first name and surname);

2. Contact details (address, email address, telephone number and similar information) and any other non-special-category data that may be collected.

 

4.       PURPOSES OF PROCESSING AND LEGAL BASIS
The Controller processes the Data for the following purposes:

1. Management of requests for quotations and information, including analysis of the data subject's needs, preparation and delivery of quotations, and management of communications relating to the request;

2. Subsequent communications related to the request for quotations and information (e.g., clarifications and updates regarding the quotation provided).

The legal basis for such processing is the performance of a contract to which the Data Subject is a party or the implementation of pre-contractual measures at the Data Subject's request, pursuant to Article 6(1)(b) GDPR.

5.       METHODS OF PROCESSING
Personal Data may be processed both in paper and electronic form. The Controller may perform collection, recording, organization, storage, consultation, processing, modification, extraction, comparison, use, interconnection, disclosure, deletion, destruction, and any other operation necessary to ensure confidentiality, security, accuracy, updating, and relevance of the Data in relation to the stated purposes.

6.       DATA RETENTION PERIOD
Data submitted through the contact form are retained for the time strictly necessary to handle the request. In the event that a contractual relationship is established, the Data are retained for ten years following the termination of the relationship, or for such different period as may be required by applicable law or by warranty obligations relating to the supply of goods or services.
Data relating to requests not followed by a contractual relationship are deleted within 12 months from receipt.
In the event of legal disputes, the Data will be retained for the entire duration of the proceedings and until the expiry of all available appeal periods.
After the applicable retention periods have expired, the Data will be destroyed, deleted, or anonymized.


7.       CATEGORIES OF RECIPIENTS OF PERSONAL DATA
For the purposes described above, the Data may be disclosed to categories of parties appointed as Data Processors, including, for example:

• External companies providing email services;

• External companies providing website maintenance services;

• Professional consulting firms;

• Companies belonging to the Eredi Maggi Group.

The Data may also be disclosed to external parties acting as independent Data Controllers, such as supervisory authorities, auditing bodies, companies of the Eredi Maggi Group, and, in general, public or private entities legally entitled to request such Data.
The updated list of independent Controllers, appointed Processors, and recipients of the Data may be requested to the Data Controller by emailing privacy@contactitalia.it


8.       TRANSFER OF DATA OUTSIDE THE EEA
The Data will be processed within the European Economic Area (EEA). Should technical and/or operational requirements make it necessary to use entities located outside the EEA, the processing will be carried out in compliance with the GDPR and appropriate safeguards will be implemented pursuant to Article 46 GDPR.


9.       RIGHTS OF THE DATA SUBJECT
The Data Subject may exercise the rights granted under the GDPR at any time, including:

• Right to withdraw consent (Article 7(3)); 
  
  
• Right of access (Article 15); 
  
  
• Right to rectification (Article 16); 
  
  
• Right to erasure ("right to be forgotten") (Article 17); 
  
  
• Right to restriction of processing (Article 18); 
  
  
• Right to data portability (Article 20); 
  
  
• Right not to be subject to a decision based solely on automated processing (Article 22).
  

These rights may be exercised by contacting the Controller at privacy@contactitalia.it


10.    RIGHT TO LODGE A COMPLAINT
If the Data Subject believes that their rights have been infringed or that the processing of their Data is not compliant with applicable legislation, they have the right to lodge a complaint with the competent Data Protection Authority pursuant to Article 77 GDPR.


11.    EXISTENCE OF AUTOMATED DECISION-MAKING (INCLUDING PROFILING)
The Controller does not currently use solely automated decision-making processes as referred to in Article 22 GDPR. Should such processes be introduced in the future for specific cases, the Data Subject will be informed separately where required by law or through an update of this Privacy Notice.


12.    NATURE OF THE PROVISION OF PERSONAL DATA
The provision of personal data is mandatory insofar as it is necessary for the Controller to fulfill obligations arising from contractual and/or pre-contractual relationships, as well as obligations imposed by laws and regulations. Failure to provide such Data may make it impossible to establish or continue the contractual and/or pre-contractual relationship where the Data are necessary for its performance.