INFORMATION ON THE PROCESSING OF PERSONAL DATA
Exenia s.r.l. (hereinafter also “The Company”) wishes to inform you pursuant to art. 13 EU Regulation 2016/679 (hereinafter also “GDPR” or “General Data Protection Regulation”), that your data will be processed in compliance with the privacy legislation according to the indications below.
- 1. Who we are
Exenia s.r.l. based in Calenzano (FI), Via della Chiesa n ° 38. E-mail address – privacy@exenia.eu – is the contact for Data Control.
- Legal basis and purpose of the process
The Company processes the personal data that you will give us by filling in the contact form on our website (name, surname, e-mail address), to follow up on your request to receive the Exenia newsletter. The sending of the newsletter is subject to your specific, free and informed consent (Article 6, paragraph 1, of the GDPR letter) documented through a special check-box (Article 7 paragraph 1 of the GDPR).
- Processing methods
Your data will be processed electronically and on paper in compliance with the provisions of the law to ensure security and confidentiality, as well as the accuracy, updating and relevance of the data with respect to the stated purposes. The processing of your data is carried out by means of the operations indicated in art.4 n.2 of EU Reg. 2016/679 and more precisely: collection, registration, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
Your data will be stored in our archives for the purposes mentioned in point 2 for the period of time necessary to achieve the purposes for which they were collected and in any case in compliance with the terms of the law. If you decide to request cancellation from the newsletter service, your data will be deleted from the systems and archives in which they are present.
- Categories of data recipients
Your personal data will be made accessible, for the purposes indicated in point 2 of this information, to:
- personnel authorised by the Data Controller;
- to third-party companies or other subjects (such as consultants or IT support companies) as independent Data Controllers or Data Processors on behalf of the Data Controller. The list of the names of the Data Processors can be requested from the address of the Data Controller. The personnel authorised by the Data Controller as well as the appointed Data Processors have received specific instructions and the obligation to maintain the confidentiality of your data has been extended to them.
- Transfer of data
Your personal data is stored on servers located in Canada, a country commensurate to European privacy standards. In any case, it is understood that the Data Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller ensures from now on that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.
- Nature of the provision of data and consequences of refusing to respond
The provision of your personal data and the provision of the relative consent are optional. Failure to provide your personal data will make it impossible for Exenia srl to allow your subscription to the Exenia Newsletter and the consequent inability to send you commercial or promotional communications aimed at the dissemination of lighting products.
- Rights of the interested party
In your capacity as an interested party, you have the rights referred to in Articles. 15-22 of the 2016/679 EU Regulation. In particular, it states your right to ask the Data Controller: a) access to personal data and the correction or cancellation of the same; b) the limitation of the processing of data concerning you and to oppose their processing; c) data portability; d) the withdrawal of consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the withdrawal.
You also have the right to lodge a complaint with the Guarantor Authority for the protection of personal data.
- How to exercise rights
You can exercise your rights by sending an e-mail to the e-mail address privacy@exenia.eu to which we will reply within 30 days of receipt.