Privacy Notice pursuant to EU Regulation 679/2016

Mondial Forni S.p.A. VAT no. and Tax Code 02230990232) in the person of the legal representative with registered office at 1 Via Dell'Elettronica, 37139 Italy (hereafter the "Controller"), as Data Controller of personal data pursuant to articles 4, no. 7) and 24 of EU Regulation 2016/679 of 27 April 2016 on the protection of individuals with regard to the processing of personal data (hereafter the "Regulation") and Articles 4 and 28 of It. Legislative Decree of 30 June 2003, no. 196 - Privacy Code (hereafter the "Code") informs pursuant to art. 13 of the Regulation and 13 of the Code that it will process personal data referring to customers or persons who request information (if they are natural persons).

  1. Subject of the processing
    The data processed are: personal data; contact information such as telephone number, e-mail address, references and specific requests. Personal data will be processed exclusively for the provision of information as requested by the customer and for all activities related to this, including the purposes of the establishment and management of contractual relationships of any kind, as defined by industry legislation. The provision of the requested data is essential to carry out the service and any refusal to provide such data implies the failure to satisfy the request; processing will be carried out both manually and through the use of IT procedures; data will not be disseminated.
  2. Purpose of the processing
    Il trattamento dei dati verrà effettuato per permettere lo svolgimento delle attività connesse all’instaurazione e alla gestione del servizio richiesto dal Cliente al Titolare.
    Gli stessi dati verranno trattati in modo lecito, secondo correttezza e con la massima riservatezza, principalmente con strumenti elettronici e informatici e memorizzati sia su supporti informatici che su supporti cartacei che su ogni altro tipo di supporto idoneo, nel rispetto delle misure minime di sicurezza così come previste dal Codice e dal Regolamento.
    Solo se espressamente autorizzato mediante apposito flag sul check box relativo i dati verranno utilizzati per l’invio di informazioni commerciali, newsletter, inviti, ecc
  3. Methods of the processing
    The processing of personal data is carried out by means of the operations indicated in art. 4 no. 2) of the GDPR and art. 4 of the Privacy Code, namely: collection, registration, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.    Personal data are subjected to paper and electronic and/or automated processing. The Data Controller will process personal data for the time necessary to fulfil the aforementioned purposes and in any case no later than 5 years from the request for information or from the last contact. In case of consent to the processing for sending commercial information, the email that will be included in the sending list will be used for the above mentioned purposes until cancellation by the user and in any case no later than 5 years from the date the last email containing commercial information is sent.
  4. Access to data
    The Data Controller may provide access to personal data to the following parties (for purposes of fulfilment of obligations related to the relationship established or for purposes of data retention security):

    • to employees and collaborators of the Data Controller in their capacity as authorised persons and/or DPOs and/or system administrators, all formally appointed or assigned;
  5. Data communication
    The Data Controller may communicate the data for the purposes referred to in art. 2 to Supervisory Bodies, Judicial Authorities and to all the other parties to whom the communication is mandatory by law for the accomplishment of the purposes established by law.  The aforementioned data will not be disseminated.
  6. Data storage and transfer
    The management and storage of personal data will be carried out on servers located within the European Union owned by the Data Controller and/or third-party companies assigned and duly appointed as Data Processors. Currently the servers are located in Italy and/or in the EU.
  7. Rights of the data subject
     The customer in his/her capacity as a data subject has the rights set forth in art. 7 of the Privacy Code and art. 15 of the EU Regulation and namely:

    1. The data subject has the right to obtain confirmation of the existence or not of personal data concerning him/her, even if not yet registered, and their communication in intelligible form.
    2. The data subject has the right to obtain the indication:
      a) of the origin of personal data;
      b) of the purposes and methods of the processing;
      c) of the logic applied in the event of processing carried out with the aid of electronic instruments;
      d) of the identifying details of the data controller, the data processors and the representative;
      e) of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the territory of the State, managers or agents.
    3. The data subject has the right to obtain:
      a) the update, rectification or, when interested, integration of data;
      b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is not necessary for the purposes for which the data were collected or subsequently processed;
      c) certification that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except for the case where such fulfilment proves impossible or requires the use of means clearly disproportionate to the right being protected.
    4. The data subject has the right to object, in whole or in part:
      a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
      b) to the processing of personal data concerning him/her for the pursuit of purposes not contemplated by art. 2. Where applicable, the data subject also has the rights set forth in articles 16-21 of the GDPR (Right of rectification, right to be forgotten, right of limitation of processing, right to data portability, right of opposition), as well as the right of complaint to the Data Protection Authority.
  8. Method of exercising rights
    The customer at any time may exercise the rights referred to in the previous article by:

    • email address:
    • registered letter with return receipt to:
      Mondial Forni Spa
      Via Dell’Elettronica 1
      37139 Verona Italy