PRIVACY POLICY
OWNER AND DATA CONTROLLER
Degrea spa, in the person of its acting legal representative, with VAT n. 00227210283, registered office in Padova Via A.Verolin Cazzato, 1, phone +39 042599922 email degrea@degrea.com as owner and data controller, (hereinafter called “The Owner”),
INFORMS THAT
Pursuant to Regulation (EU) 2016/679 related to the protection of individuals with regard to the processing of personal data (hereinafter called, “GDPR”), your data will be treated in compliance with the above regulation and with the modalities and the purposes below specified:

1 – SUBJECT OF DATA PROCESSING E NATURE OF DATA
The Owner, in his capacity, processes your personal data (name, surname, fiscal code, vat number, e-mail, phone number, in particular – hereinafter, “personal data” or even “data”) collected on the occasion of a voluntary inclusion of the above-mentioned personal data in the form of this website.

2 – PURPOSES OF PROCESSING
Your personal data are processed according to the following purposes distinguished for the relevant legal basis:
2.1 Performance of the contract – compliance with a legal obligation (art.6 lett. b , lett. c).
Your personal data are processed for the following purposes:
a) fulfil your pre-contractual, contractual, accounting and administrative obligations
b) comply with a legal requirement, of a regulation, Community legislation or by an order of Authority.
2.2 On the basis of your consent (art.6 lett. a).
Your personal data are processed, for the purposes to send information and promotional notices by sms and/or e-mail, as well as any newsletter from the Owner with reference to own initiatives and/or from subsidiaries and/ or sister companies (Marketing purposes);

3 – RECIPIENTS OR CATEGORIES OF RECIPIENTS OF THE DATA
Personal data provided could be communicated to third party recipients, in order to comply with contracts or related purposes. More specifically, the personal data could be communicated to the recipients belonging to the following categories:
 Legal, fiscal and employment professional and consultants;
 Banking institutions;
 Competent authorities for compliance with a legal obligation and/or a provision laid down by the public authorities (The Revenue Agency, etc.);
 External parties that manage / support / assist, even occasionally, the Owner to manage the information system and the telecommunication network (including e-mail);
The entities belonging to the above categories act as Responsible for processing the data, or act in complete independence as distinct data controllers. The list of any persons in charge is constantly updated and available at the Owner’s premises.

4 – METHODS OF PROCESSING
The data processing will be carried out both with hand-held instruments and/or computers and IT enabled tools following organizational procedures and modes strictly related to the purposes indicated and by the way in order to ensure the security, integrity, availability and confidentiality of personal data.
In accordance with Art. 5 par. 1 let. e) of Regulation (EU) 2016/679, personal data collected will be stored in a form allowing the identification of the persons concerned for a period of time no longer than the purposes for which the persona data are processed.

5 – PROVIDING PERSONAL DATA
We inform you that, taking into account the purposes of the processing as specified in point 2.1, providing personal data is mandatory and a failure, partial or incorrect providing could have the consequence to be unable to carry the performance.

6 – DATA TRANSFERS TO A THIRD COUNTRY OR TO ANY INTERNATIONAL ORGANIZATION
Personal data collected shall not be transferred or made available to a third country.

7 – DURATION OF PROCESSING
Personal data shall be stored during the whole duration of the contract and, in the event of withdrawal and/or any other kind of termination of the aforementioned contract within the periods laid down by law, e.g. to compliance with fiscal obligations.
For marketing purposes personal data shall be stored as long as the consent will be withdrawn or during the period laid down by Regulation or Provisions issued by competent Data Protection Authority.

8 – THE RIGHTS OF THE USERS
You can exercise the rights as expressed in the articles 15, 16, 17, 18, 19, 20, 21, 22 of Regulation (EU) 2016/679 at any time, and in particular:
 to access to your personal data;
 to obtain the rectification, the erasure or to restrict the processing of your data;
 to object to the processing and portability of your data;
 to withdraw consent: the withdrawal of consent shall not affect the lawfulness of processing based on consent given before its withdrawal;
 to lodge a complaint with the competent Data Protection Authority

Any requests to exercise your rights can be directed to the Owner through the following contact details:
Degrea SpA – via Chiaroni 1241 45030 San Martino di Venezze (RO)
degrea@degrea.com
fax +39 0425 99923
+39 042599922