INFORMATION NOTICE PURSUANT TO ART. 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679
INTERNI by Guido Baldissera, VAT no. 01445010323, Data Controller, informs you that your data will be processed in the manner and for the purposes indicated below.
The Controller is committed to protecting the privacy and confidentiality of Personal Data in compliance with the principles of fairness, lawfulness, transparency, and the protection of your rights.
1) TYPES OF DATA PROCESSED
We process personal data provided by you (name, email, company name, telephone number, etc.) through spontaneous requests and data collected automatically by the website.
- Data provided by you: personal, identifying, and non-sensitive data communicated by you to make inquiries via email, through the contact form, or by telephone regarding our products/services.
- Data we collect automatically: anonymous data collected using cookies or similar technologies: for further information, please see the Cookie Policy below.
N.B.: Users under the age of 16 cannot provide any personal data without the consent of their parents or legal guardians.
2) PURPOSES AND LEGAL BASES OF THE PROCESSING
We will process your personal data:
A) to fulfill our contractual obligations; respond to your requests for information; calculate a quote you requested; execute sales contracts for products or service assignments; and guarantee the necessary assistance regarding purchased products and services.
B) to perform aggregate statistical analysis on an anonymous basis to improve our services;
C) for administrative purposes and the fulfillment of legal obligations, such as accounting or tax requirements, or to comply with requests from judicial authorities.
D) in the case of submitting a curriculum vitae, exclusively for selection purposes.
3) IS PROVIDING DATA MANDATORY?
Providing your data is always optional, but failure to provide it may make it impossible to proceed with certain processing activities, such as those strictly connected to the fulfillment of a contract or the provision of requested services.
4) LOCATION, PROCESSING METHODS, AND RETENTION PERIOD
The processing of your personal data is carried out through the operations indicated in Art. 4 of the Privacy Code and Art. 4 no. 2) of the GDPR, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure, and destruction of data.
Your personal data is stored at the Controller’s premises and is subject to both paper and electronic and/or automated processing, with logic strictly related to the indicated purposes and in a manner that guarantees the security and confidentiality of the data. The data you send is not saved within our website.
The Controller will process personal data for the time necessary to fulfill the above purposes and, in any case, for no longer than 10 years from the termination of the relationship for Purposes under point C, and for no longer than 38 months from data collection for Purposes under point B.
5) ACCESS TO DATA
Your data may be made accessible for the purposes indicated in point 2:
- to employees and collaborators of the Controller, in their capacity as authorized persons and/or internal data processors and/or system administrators;
- to third-party companies or other entities (website providers, cloud providers, e-payment service providers, suppliers, hardware and software assistance technicians, shippers and carriers, credit institutions, professional firms, etc.) that perform outsourced activities on behalf of the Controller, in their capacity as data processors.
6) DATA TRANSFER
Data will not be disclosed, sold, or exchanged with parties other than the Controller, processors, and appointed persons without your express and explicit consent.
7) YOUR RIGHTS
You have the right to know which of your personal data is being processed. In particular, you are granted the right of access, rectification, erasure, as well as the right to data portability, the right to restriction of processing, and the right to object to processing, where the conditions are met.
Below is a brief illustration of the rights granted to you regarding the processing of your personal data.
- The right of access allows you to obtain confirmation as to whether or not personal data concerning you is being processed by the Controller and, if so, to access such data and related information;
- The right to rectification allows you to obtain the modification of inaccurate personal data concerning you without undue delay and, taking into account the purposes of the processing, to have incomplete personal data completed;
- The right to erasure (right to be forgotten) allows you to obtain the erasure of data concerning you without undue delay (e.g., when your personal data is no longer necessary in relation to the purposes for which it was collected), subject to exceptions provided by applicable law (e.g., when retention is necessary for compliance with a legal obligation);
- The right to data portability allows you, under certain circumstances, to receive the personal data concerning you that you provided in a structured, commonly used, and machine-readable format and to transmit those data to another controller;
- The right to restriction of processing allows you, under certain circumstances, to obtain the restriction of the processing of your personal data. In such cases, the Controller may only process your data in specific instances, such as for the exercise of legal claims;
- The right to object allows you, under certain circumstances, to object to the processing of your personal data unless there are overriding legitimate grounds for the processing;
To obtain more information on the processing of your personal data or to exercise your rights, please contact us.
8) CHANGES TO THIS INFORMATION NOTICE
This Information Notice may undergo changes. We therefore recommend checking this Notice regularly and referring to the most updated version.
Last updated: March 2026