FULL COOKIE POLICY STATEMENT

Cookie Policy

provided pursuant to art. 13, Regulation (EU) 2016/679 (“GDPR”)

Cookie Policy Cookie Policy

Data Controller and Data Protection Officer (DPO)

The Data Controller is Emilceramica S.r.l. a Socio Unico with registered office at Via Ghiarola Nuova 29, 41042 Fiorano Modenese (Modena) Italy, in the person of its current legal representative (“Data Controller”or “Emilceramica”). 

To exercise your rights, or for any information concerning these and/or this Privacy Policy Statement, you may contact the Data Controller at: privacy@emilceramicagroup.it tel. +39 0536 835111.

The Data Controller has appointed a Data Protection Officer (“DPO”), whom you can contact to exercise your rights, as listed in paragraph 7 below, as well as to receive any information concerning these and/or this Privacy Policy Statement, by writing to: dpo@emilceramicagroup.it.

 

Transfer of personal data outside the EU

The personal data of the User collected using cookies (e.g. third-party cookies) may be transferred to non-EU countries: such transfers are lawful as they are covered by adequacy decisions issued by the European Commission and/or by the prior signing of Standard Contractual Clauses adopted on the basis of the models established by the European Commission pursuant to art. 46, 2, letters c) and d) of the GDPR.

The User may request a copy of the guarantees adopted by writing to the Data Controller at the addresses indicated in art. 1 of this Cookie Policy.

Recipients of personal data

The personal data of the User may come to the knowledge of employees, contract staff and associates of the Data Controller assigned to pursue the aforementioned goals, who shall work in the capacity of authorised data users having received suitable operating instructions.

In addition, to pursue the purposes referred to in paragraph 3 above, the User’s personal data may be processed by third parties belonging, for example, to the following categories:

• providers of technical assistance services for the management and maintenance of the Website;
• advertising agencies;
• providers of statistical processing services on the use of the Website;
• companies that carry out management and maintenance services on the Data Controller’s computer systems;
• business partners;
• companies that own social media websites;
• companies that provide email delivery services or other suppliers of external digital communications platforms;
• supervisory and controlling authorities and bodies and, in general, public or private bodies with a public interest function that may justifiably request such data in accordance with national and European legislation;
companies, associations or professional practices that perform assistance and consultancy activities.

The entities in the aforesaid categories operate in some cases as Data Processors specifically designated by the Data Controller in accordance with article 28 of the GDPR, and in other cases fully independently as separate Data Controllers, in which case your personal data will only be disclosed to the said independent data controllers where legitimately established as per paragraph 3 above.

The complete, updated list of the entities to which your personal data may be disclosed can be requested from the Data Controller using the contacts provided in paragraph 1 of this Cookie Policy.

The data collected using cookies will not be disseminated.

Rights of the data subject

With regard to the data processing described in this Privacy Policy Statement, as data subject you may, according to the conditions set forth by the GDPR, exercise the rights provided by articles 15 – 21 of the GDPR, in particular:

• right of access: right to obtain confirmation of whether or not personal data concerning you are being processed and, if this is the case, to obtain access to your personal data – including a copy of them – and communication, amongst other things, of the information outlined in art. 15 of the GDPR;
• right to rectification: right to obtain, without undue delay, the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data pursuant to art. 16 of the GDPR;
• right to erasure (right to be forgotten): the right to obtain, without undue delay, the erasure of personal data concerning you, in the cases indicated in art. 17 of the GDPR; the right to erasure does not apply to the extent to which the processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or for the establishment, exercise or defence of legal claims;
• right to restriction of processing: right to obtain restriction of the processing, in the cases indicated in art. 18 of the GDPR;
•  right to data portability: right to receive the personal data concerning you, which you have provided to the Data Controller, in a structured, commonly used and machine-readable format and the right to transmit those data to another controller without hindrance, if the processing is based on consent and is carried out by automated means, as indicated in art. 20 of the GDPR. In addition, the right to have your personal data transmitted directly by the Data Controller to the other controller, where technically feasible;
• right to object: right to object to the processing of personal data concerning, you, unless there are legitimate grounds for the Data Controller to continue the processing, pursuant to art. 21 of the GDPR;
• the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal;
• right to lodge a complaintwith a supervisory authority in the Member State of your habitual residence, place of work or place of the alleged infringement.

The above rights may be exercised in relation to the Data Controller using the contacts provided in paragraph 1 above. The Data Controller shall examine your request and provide you, without undue delay and in all cases within no more than one month of receiving said request, with information concerning the action taken with regard to your request.

The exercising of your rights as data subject is free of charge in accordance with art. 12 of the GDPR. However, in the event of requests which are manifestly unfounded or excessive, in particular because of their repetitive character, the Data Controller may charge you a reasonable fee taking into account the administrative costs of dealing with your request, or refuse to act on the request.

Please also note that the Data Controller may request further information necessary to confirm the identity of the data subject.