INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA

(ART. 13 REGULATION (EU) 2016/679) GDPR

Dear Customer,

For the purposes provided by the above-mentioned Regulation (EU) 2016/679, containing the new provisions for the protection of "privacy" and relating to the protection and processing of personal data, please be informed that the processing of personal data already provided by you and acquired to date, as well as those to be provided, will be subject to processing in accordance with the regulations provided by the aforementioned Regulation and the confidentiality and transparency obligations to which the data controller is bound.

a) Data Controller

The data controller is "Ardesia dgl" with registered office in Ferrada di Moconesi (GE) at Via Macaggi 3, 16047 – Tax Code: DNDLSN87H13D969J VAT: 02898230996, on behalf of its legal representative Dondero Alessandro, Tax Code: DNDLSN87H13D969J;

b) Purpose of the processing

The personal data provided are necessary for the purpose of responding to requests or inquiries made by the data subject, resolving issues related to the services offered, and receiving useful advice aimed at improving the services themselves.

c) Processing methods and storage

The processing of the data provided by you is carried out in automated and/or manual form in compliance with Article 32 of the GDPR 2016/679, by specifically authorized subjects and in compliance with Article 29 of the GDPR 2016/679. We inform you that, in compliance with the principles of lawfulness, purpose limitation, and data minimization, pursuant to Article 5 GDPR 2016/679, subject to your explicit and freely given consent expressed at the bottom of this information, your personal data will be stored for the period necessary to achieve the purposes for which they are collected and processed.

d) Scope of communication and dissemination

We also inform you that the collected data will not be disseminated and will not be subject to communication without your explicit consent, except for necessary communications that may involve the transfer of data to public entities, consultants, or other subjects provided for the fulfillment of legal obligations. In addition, the aforementioned data may be known, within the limits of the applicable laws, by employees and/or collaborators expressly appointed and authorized by the Data Controller.

e) Rights of the data subject

At any time, you may exercise, pursuant to Articles 15 to 22 of Regulation (EU) No 2016/679, the right to:

1) request confirmation of the existence or otherwise of your personal data;

2) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be disclosed, and, where possible, the envisaged period of storage;

3) obtain the rectification or erasure of personal data;

4) obtain the restriction of processing;

5) obtain data portability, i.e., receive them from a data controller, in a structured, commonly used, and machine-readable format, and transmit them to another data controller without hindrance;

6) object to the processing of personal data;

7) withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal;

8) lodge a complaint with a supervisory authority.

g) Exercise of rights

The exercise of rights may be exercised by written communication to be sent via certified email to the following address: ardesiadgl@pec.it