Privacy Policy

COMPLETE INFORMATION POLICY FOR THE PROCESSING OF PERSONAL DATA THE FOLLOWING COMPANY

COMPANY NAME VIP GIOIELLI SRL ADDRESS VIA A.VOLTA,38 06135 PERUGIA (PG) e-mail, vipgioiellisrl@gmail.com tel. 075.5990622

IN THE PERSON OF: PONZIANI ANGELO

as Data Controller of personal data pursuant to Legislative Decree no. 196/2003 and subsequent amendments and EU Regulation 2016/679 informs you, pursuant to art. 13 of the Code and the Regulation, which will process1 your personal data manually and/or with the support of IT means for the purposes indicated below. Purpose of the processing, legal basis and any third party recipients of the data Your personal data will be processed for purposes related to the management of ordinary commercial relationships and, precisely, for the compilation of personal data lists, the keeping of customer/supplier accounts, invoicing, the carrying out of communications both by paper and electronic means, the management of the creditor for the satisfaction of all obligations established by current regulations. Your data may be processed for internal statistical and market research purposes; gold buying operations. Furthermore, your data may be communicated to third parties, for technical and operational needs strictly connected to the purposes set out above and in particular to the following categories of subjects: a) bodies, professionals, companies or other structures appointed by us for the processing connected to the 'fulfillment of administrative, accounting and management obligations linked to the ordinary performance of our economic activity, also for credit recovery purposes; b) to public authorities and administrations for purposes related to the fulfillment of legal obligations; c) banks, financial institutions or other subjects to whom the transfer of the aforementioned data is necessary for the performance of our business in relation to the fulfillment, on our part, of the contractual obligations assumed towards you. d) suppliers of installation, assistance and maintenance services of IT and telematic systems and systems and of all services functionally connected and necessary for the fulfillment of the services covered by the Contract. Failure to provide personal data will make it impossible for us to execute contracts and other related obligations, as well as correctly manage mutual commercial relations. We inform you that we may send you commercial and/or promotional communications relating to products and services similar to those which are the subject of the contractual relationship, unless you disagree. Further purposes of processing 1 By processing of personal data we mean any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organisation, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction. VIP GIOIELLI SRL REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 relating to the protection of natural persons with regard to the processing of personal data, as well as on the free movement of such data. Subject to your specific and distinct consent, your personal data may also be processed for each of the following purposes: - sending via e-mail, post, text message, telephone contacts, commercial and/or promotional communications or advertising material on products or services provided by our company or for the detection of the degree of satisfaction with their quality. - transmission of your data to third parties (for example: business partners) for the purpose of carrying out informative, commercial, advertising and promotional activities, including by sending communications through the use of IT or paper means. - profiling2, in particular for the creation of your commercial profile and/or for the analysis of your preferences, habits or consumption choices, also through the cross-referencing of such personal data with other information collected by you through profiling cookies accepted. Your consent for each of these purposes is optional and will not have any interference and/or consequence on the aforementioned purposes connected to the basic contractual relationship. Processing of particular categories of personal data The following particular categories of data (art. 9 of EU Regulation 2016/679) can only be processed with the consent of the interested party: personal data revealing racial or ethnic origin, political opinions , religious or philosophical beliefs, or trade union membership, as well as processing genetic data, biometric data intended to uniquely identify a natural person, data relating to a natural person's health or sexual life or sexual orientation. Both your provision of data and your consent can be freely expressed, but your refusal will make it impossible for us to execute contracts and other related obligations, as well as correctly manage mutual commercial relations. Data retention times Your personal data will be retained for the times strictly necessary to carry out the purposes illustrated above and to fulfill the obligations established by law. Rights of the interested party Pursuant to art. 7 of the Privacy Code and pursuant to articles 13, paragraph 2, and art. 15 to 22 of the Regulation, we inform you that regarding the processing of your personal data you may exercise the following rights: 1. Article 15 Right of access of the interested party: The interested party has the right to obtain confirmation from the data controller that whether or not personal data concerning him or her is being processed; 2. Article 16 Right of rectification: The interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him without unjustified delay; 3. Article 17 Right to cancellation ("right to be forgotten"): The interested party has the right to obtain from the data controller the deletion of personal data concerning him or her without unjustified delay and the data controller has the obligation to delete without unjustified delay the personal data; 4. Article 18 Right to limit processing: in the event that: The interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; The processing is unlawful and the interested party opposes the erasure of the personal data and requests instead that their use be limited; Although the data controller no longer needs them for the purposes of the processing, the personal data are necessary for the interested party for the establishment, exercise or defense of legal claims; The interested party has objected to the processing, pending verification regarding the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party VIP GIOIELLI SRL REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, as well as on the free movement of such data 5. Article 19 Notification obligation in the event of rectification or deletion of personal data or limitation of processing: The data controller communicates to each of the recipients to whom the personal data have been transmitted any rectifications or cancellations or limitations of processing. 6. Article 20 Right to data portability: The interested party has the right to receive the personal data concerning him or her provided to a data controller in a structured, commonly used and machine-readable format and has the right to transmit such data to another data controller without impediment from the data controller; 7. Article 21 Right to object: The interested party has the right to object at any time, for reasons related to his particular situation, to the processing of personal data concerning him pursuant to Article 6, paragraph 1, letters e) of ) of EU Regulation 679-2016, including profiling , in particular in the case where: The processing takes place on the basis of the legitimate interest of the owner, after clarification of the reasons for the opposition; Personal data is processed for direct marketing purposes. 8. Article 22 Automated decision-making relating to natural persons, including profiling : The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling , which produces legal effects concerning him or her or which affects similarly significantly on his person. ( Profiling means “any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of said natural person" (art. 4 of EU Regulation 2016/679). The data controller, if he has made personal data public and is obliged to delete them, he must inform the other owners who process the personal data of the request to delete any link, copy or reproduction of his data. However, it is highlighted that if the data processing was generated by the need to comply with legislative provisions for the exercise of economic/commercial activities, the cancellation can only take place at the end of the period established by the aforementioned legislative provisions for the conservation of administrative/accounting documents. Right to lodge a complaint with the Guarantor for the protection of personal data, following the procedures and indications published on the Authority's official website www.garanteprivacy.it. Right to withdraw consent at any time; obviously with every consequence deriving from the impossibility of being able to comply with legislative or contractual provisions if the processing is established by such provisions. The exercise of rights is not subject to any formal constraints and is free. How to exercise rights The interested party may exercise the rights at any time by sending: - A registered letter with return receipt: see table below - An e-mail to the address: see table below:

COMPANY NAME VIP GIOIELLI SRL ADDRESS VIA A.VOLTA,38 06135 PERUGIA (PG) e-mail, vipgioiellisrl@gmail.com tel. 075.5990622