GDPR DOCUMENTATION
NOTICE ON THE PROCESSING OF CLIENTS’ DATA

User personal data processing notice
Your personal data is processed by GILARDONI ARTURO S.r.l., acting as the data controller, in accordance with the principles of personal data protection set out in the GDPR (Regulation 2016/679)

METHODS AND PURPOSES OF DATA PROCESSING

1. Please be informed that your personal data will be processed using the following methods:
  • Digital systems
  • Mixed methods (electronic and paper-based)
For the following purposes:
  • Internal communication and correspondence with counterparties via email
  • Customer management (contracts, orders, shipments, and invoices)
LEGAL BASIS

2. The provision of personal data is mandatory for all activities required by legal and contractual obligations. Therefore, any refusal to provide such data, in whole or in part, may result in the inability to deliver the requested services.

CATEGORIES OF RECIPIENTS

3. Without prejudice to communications made in compliance with legal and contractual obligations, the personal data collected and processed may be shared exclusively for the purposes outlined above with the following categories of recipients:
  • Legal Representative
  • Quality Manager and Commercial Manager; IT Manager
  • Administration Manager
  • Administrative Staff
  • Production Manager
  • IT And Administrative Service Providers
DATA RETENTION PERIOD

4. Personal data required for contractual and accounting purposes is retained for the duration necessary to manage commercial and accounting activities.

For individuals who do not purchase or use products/services but have previously been in contact with company representatives, their personal data will be deleted or anonymized unless its retention is otherwise justified.

That excludes cases where valid informed consent has been obtained for subsequent commercial promotion or market research activities.

The data retention periods are as follows:
  • Customer Records: 10 years
  • Corporate Email Management: 4 years
RIGHTS OF THE DATA SUBJECT

5. Under Regulation (EU) 679/2016 (GDPR) and national legislation, the data subject may, according to the methods and within the limits set by applicable law, exercise the following rights:
  • Request confirmation of the existence of personal data concerning them (right of access);
  • Know the origin of the data;
  • Receive intelligible communication about the data;
  • Be informed about the logic, methods, and purposes of the processing;
  • Request updates, rectifications, integration, deletion, anonymization, or blocking of data processed in violation of the law, including data no longer necessary for the purposes for which they were collected;
  • The right to restrict and/or object to the processing of their data;
  • The right to withdraw consent;
  • The right to data portability;
  • In cases where the processing is based on consent, the right to receive their personal data provided to the data controller in a structured, machine-readable format commonly used by electronic devices.
  • The right to lodge a complaint with the supervisory authority.
6. The Data Controller of Your Personal Data

The data controller of your personal data is GILARDONI ARTURO S.r.l., VAT and tax code 02516770969, represented by the Administration Manager.
  • Email: info@gilarturo.it
  • Certified Email (PEC): gilardoniarturosrlbellagio@pec.it
  • Phone: 031950447