Privacy Policy
Dear user, with reference to Reg. (EU) 679/2016 on the protection of natural persons with regard to the Processing of Personal Data, as well as the free movement of such data, we inform you that:
Data Controller
Following consultation of this site, data relating to identified or identifiable persons may be processed. The “controller” of their processing is the Data Controller, who determines the purposes and means of the processing of personal data. Following consultation of this site, data relating to identified or identifiable persons may be processed and in this context the data controller is PERENZ SRL with registered office in Quero Vas at Via Feltrina n. 4, VAT no. 00793400250 (privacy@perenz.it)
Categories of data processed
Data provided voluntarily by the site user:
The voluntary and explicit sending of e-mails to the addresses indicated in the various sections of the site does not involve a request for consent, and the possible filling in of specifically prepared forms involves the subsequent acquisition of the sender/user’s address and data, necessary to respond to the requests produced and/or provide the requested service. The voluntary sending, by you, of emails to our email addresses does not require further information or requests for consent. On the contrary, specific summary information will be reported or displayed on the pages of the site prepared for particular services on request (forms). The user must therefore explicitly consent to the use of the data reported in these forms in order to send the request.
Automatically collected data (navigation data):
The computer systems and software applications dedicated to the operation of this website detect, during their normal operation, some data (the transmission of which is implicit in the use of Internet communication protocols) potentially associated with identifiable users. The data collected includes the IP addresses used by users who connect to the site, the URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters regarding the operating system, the browser and the computer environment used by the user. The provision of this data is mandatory, as it is directly linked to navigation of the site. The same data is processed, for the time strictly necessary, for the sole purpose of obtaining statistical information on the use of the site and to check its correct functioning.
Cookies used by this site:
Some cookies will be sent by the website to the user’s terminal (computer, tablet, smartphone, notebook, etc.), to be stored and then retransmitted on the next visit. This site does NOT use any profiling cookies.
Use of cookies on this Site:
The user can decide whether or not to accept cookies using their browser settings.
Warning: the total or partial disabling of technical cookies can compromise the use of the site’s features.
For more information on how to manage cookies in your browser: http://aboutcookies.org
For more information on cookies and to manage your preferences on third-party profiling cookies, please visit http://www.youronlinechoices.com
Source of data
The personal data in the possession of PERENZ SRL is collected directly from the data subject (Art. 13 GDPR).
Purpose of data processing and legal basis
The processing of your data is based on the contract or pre-contractual activities.
Data recipients
Your data will not be disseminated in any way within the limits relevant to the indicated processing purposes; your data may be communicated to partners, consulting firms, and private companies, appointed as Processors by the Data Controller or for legal obligations or to fulfill your specific requests. The data will not be transferred to non-EU countries.
Data processing methods
The personal data provided by you will be subject to processing operations in compliance with the aforementioned legislation and the confidentiality obligations that inspire the Controller’s activity. The data will be processed both with computer tools and on paper media and on any other type of suitable support, in compliance with adequate security measures pursuant to Art. 5 par. 1 lett. F of the GDPR.
Retention period
Navigation data will be kept for the technical time necessary for the navigation session. Data provided voluntarily by the data subject will be kept until express revocation by the data subject, including through action on their browser, cleaning cookies, or express request to the Controller. Other specific retention periods are indicated in the information accompanying each form.
Rights of the data subject
Reference is made to some articles extracted from the Regulation of the European Parliament no. 679 of 2016 and following. Amendments in which the rights of the data subject are specified:
Art. 15 – Right of access
The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning them is being processed and, if so, to obtain access to the personal data and information regarding the processing.
Art. 16 – Right to rectification
The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning them without undue delay. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement.
Art. 17 – Right to erasure (right to be forgotten)
The data subject has the right to obtain from the data controller the erasure of personal data concerning them without undue delay and the data controller has the obligation to erase personal data without undue delay if the reasons listed in the same article exist.
Art. 18 – Right to restriction of processing
The data subject has the right to obtain from the data controller the restriction of processing when the hypotheses listed in the same article occur (for example, when the accuracy of the data is contested or when the data is necessary for the establishment, exercise or defense of a legal claim).
Art. 19 – Notification obligation regarding rectification or erasure of personal data or restriction of processing
The data controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The data controller shall inform the data subject about those recipients if the data subject requests it.
Art. 20 – Right to data portability
The data subject has the right to receive the personal data concerning them, which they have provided to a data controller, in a structured, commonly used and machine-readable format and has the right to transmit those data to another data controller without hindrance from the data controller to which the personal data have been provided.
In exercising their right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one data controller to another, where technically feasible.
Art. 21 – Right to object
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them pursuant to Article 6(1), points (e) or (f) (public interest tasks and pursuit of legitimate interest), including profiling based on those provisions.
Art. 22 – Automated individual decision-making, including profiling
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning them or similarly significantly affects them.
Art. 34 – Communication of a personal data breach to the data subject
When the personal data breach is likely to result in a high risk to the rights and freedoms of natural persons, the data controller shall communicate the personal data breach to the data subject without undue delay.
Art 77 – Right to lodge a complaint with a supervisory authority
1. Without prejudice to any other administrative or judicial remedy, every data subject who considers that the processing of personal data relating to them infringes this Regulation shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work or place of the alleged infringement.
2. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy pursuant to Article 78.
To exercise your rights, please send a registered letter with return receipt or a PEC (Certified Email) to the Controller, at the contact point address reported above (privacy@perenz.it). In the event that you believe your rights summarized above have not been recognized or in case of unjustified delay, you have the possibility to lodge a complaint with the Data Protection Authority. On the Authority’s website you will find the form for the complaint (www.garanteprivacy.it)
Enter your location and find the nearest retailers