Privacy Policy
INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (GDPR)
Premise
This information is provided for the website http://www.arcasa.it/ (Site) owned by:
Arcasa S.p.a.
Via Prai 23, 35018
San Martino Di Lupari, PD
Italy
VAT: 02301700288
REA 220533
(Data Controller), in its capacity as Data Controller pursuant to the GDPR.
Profiling
With your consent, the Data Controller may process your personal data for profiling purposes, i.e., for analyzing your consumption choices through the detection of the type and frequency of purchases you have made, in order to send you advertising material and/or newsletters relating to its own or third-party products of specific interest to you.
In compliance with the GDPR, we hereby inform you that the Data Controller will process your personal data under the following conditions.
Art. 1. Purposes and legal basis of the processing. Mandatory or optional provision. Consequences of refusal to process.
The processing of personal data is aimed at achieving the following purposes:
a. to comply with the obligations arising from current laws or regulations, particularly in the administrative, accounting, and public security fields. The legal basis for the processing is the necessity of the Data Controller to take pre-contractual measures adopted at the request of the data subject or to comply with a legal obligation;
b. with your consent, for the processing of your commercial profile, through the detection and processing of your purchase choices and habits, both to monitor customer satisfaction and to send you advertising material, related to the Data Controller and/or third parties, of specific interest to you, by means of systems such as (profiling purposes). The legal basis for the processing is the consent of the data subject;
c. to respond to your requests by email, phone. The provision is optional, but your refusal will make it impossible for the Data Controller to respond to your requests. The legal basis for the processing is the legitimate interest of the Data Controller to respond to the user’s requests. This legitimate interest is equivalent to the user’s interest in receiving a response to communications sent to the Data Controller.
Consent to the processing of your data for profiling purposes is purely optional. Failure to consent will result in the consequences described below.
Failure to consent to the processing of your personal data for profiling purposes will make it impossible for the Data Controller to process your commercial profile by detecting your purchase choices and habits and to send you advertising material related to the Data Controller and/or third parties of specific interest to you.
Notwithstanding the above, it is understood that the Data Controller may still use your personal data solely to properly comply with the obligations provided by current laws and the obligations arising from contractual relationships between you and the Data Controller.
Special or judicial data
The Data Controller does not process special or judicial data.
Art. 2. Processing methods
The processing of your personal data will mainly be carried out with the aid of electronic or automated means, according to the methods and with the tools suitable to guarantee its security and confidentiality in compliance with the GDPR.
The acquired information and processing methods will be relevant and not excessive concerning the type of services rendered. The data will also be managed and protected in environments whose access is under constant control.
Art. 3. Data communication and dissemination
Your data may be communicated:
to all those subjects (including Public Authorities) who have access to personal data by virtue of regulatory or administrative measures
to companies, consultants, or professionals who may be in charge of installing, maintaining, updating, and generally managing the hardware and software of the Data Controller or of which the latter uses for the provision of its services
to all those public and/or private subjects, natural and/or legal persons (legal, administrative, and tax consulting firms, Judicial Offices, Chambers of Commerce, Chambers and Labor Offices, etc.), if the communication is necessary or functional to the correct fulfillment of the obligations deriving from the law.
The data concerning you will not be disseminated, except in anonymous and aggregate form, for statistical or research purposes.
Art. 4. Data Controller
The Data Controller of personal data can be contacted at the following addresses:
Arcasa S.p.a.
Via Prai 23, 35018
San Martino Di Lupari, PD
Italy
Tel: 049 9325305
Email: info@arcasa.it
Or through the contact form on the Site.
Art. 5. Personal data retention
User data will be retained for the time necessary to ensure the correct provision of the services offered and in any case within the terms provided by the law or the provisions of the Personal Data Protection Authority.
In any case, it is understood that personal data will be retained and processed for profiling purposes for the period of time allowed by law and by the provisions of the Personal Data Protection Authority. At the end of this period, the Data Controller may ask the user to renew their consent to the processing of their data for such purposes or to anonymize them and retain them only for statistical or historical purposes.
Art. 6. Rights of the data subject
Pursuant to Article 13 of the Privacy Regulation, the Data Controller informs you that you have the right to:
request access to your personal data and the rectification or erasure of the same or the restriction of processing concerning you or to object to their processing, as well as the right to data portability
withdraw consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal
lodge a complaint with a supervisory authority (e.g., the Personal Data Protection Authority).
The above rights may be exercised by requesting them without formalities from the Data Controller at the above contacts.
Art. 7. Changes
The Data Controller reserves the right to make changes to this information at any time, giving appropriate publicity to users of the Site and ensuring, in any case, adequate and similar protection of personal data. To view any changes, you are invited to consult this information regularly.