INFORMATION PURSUANT TO ART. 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679
Laboratori Baldacci, VAT number, Data Controller, informs you that your data will be processed in the manner and for the purposes indicated below.
The Data Controller undertakes to protect the privacy and confidentiality of Personal Data in compliance with the principles of correctness, lawfulness, transparency and protection of your rights
1) TYPE OF DATA PROCESSED
We process personal data communicated by you (name, email, company name, telephone, etc.) in the event of requests sent spontaneously and data that are collected independently by the website.
- Data provided by you: personal, identifying and non-sensitive data communicated by you to make requests via email, through the contact form or by telephone on our products/services
- Data we collect automatically: anonymous data collected using cookies or similar technologies: for further information, see the Cookie Policy below.
N.B.: Users under 16 years of age cannot provide any personal data without obtaining consent from their parents or legal guardian.
2) PURPOSE AND LEGAL BASIS OF THE PROCESSING
We will process your personal data:
A)to fulfill our contractual obligations; provide a response to your requests for information; calculate a quote you requested from us; execute contracts for the purchase and sale of products or assignments for the provision of services; guarantee you the necessary assistance with respect to the products and services purchased.
B)carry out aggregate statistical analysis on an anonymous basis to improve our services;
C)for administrative purposes and for the fulfillment of legal obligations such as those of an accounting or tax nature, or to process requests from judicial authorities.
D)in the case of sending a CV, exclusively for selection purposes.
3) IS THE PROVISION OF DATA MANDATORY?
The provision of your data is always optional, but failure to provide it could make it impossible to proceed with some treatments, such as those strictly connected to the fulfillment of a contract or the provision of the services you have requested.
4) PLACE, METHODS OF PROCESSING AND STORAGE TIMES
The processing of your personal data is carried out by means of the operations indicated in the art. 4 Privacy Code and art. 4 no. 2) GDPR and precisely: collection, recording, organisation, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking,
communication, cancellation and destruction of data.
Your personal data are stored at the Data Controller’s headquarters and are subjected to both paper and electronic and/or automated processing with logic strictly related to the purposes indicated and in any case in such a way as to guarantee the security and confidentiality of the data themselves. The data you send is not saved on our website.
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the Purposes in point C and for no more than 38 months from the collection of data for the Purposes in point B.
5) ACCESS TO DATA
Your data may be made accessible for the purposes indicated in point 2:
- to employees and collaborators of the Data Controller, in their capacity as internal data processors and/or managers and/or system administrators;
- to third-party companies or other subjects (website providers, cloud providers, e-payment service providers, suppliers, hardware and software support technicians, shippers and carriers, credit institutions, professional firms, etc.) who carry out outsourced activities for account of the Data Controller, in their capacity as data controllers.
6) DATA TRANSFER
The data will not be disclosed, sold or exchanged with parties other than the owner, managers and appointed persons without your express and explicit consent.
7) YOUR RIGHTS
You have the right to know which personal data are being processed. In particular, you are granted the right of access, rectification, cancellation as well as the right to data portability, the right to limit processing and the right to object to processing, if the conditions exist.
Below we provide you with a brief illustration of the rights that are recognized to you with reference to the processing of your personal data.
- The right of withdrawal allows you to obtain confirmation as to whether or not your personal data is being processed by the Data Controller and, if necessary, access such data and the information relating to them;
- The right of rectification allows you to obtain the modification of inaccurate personal data concerning you without unjustified delay and, taking into account the purposes of the processing, to obtain the integration of incomplete personal data;
- The right to cancellation allows you to obtain the cancellation of data concerning you without unjustified delay (e.g. when your personal data are no longer necessary in relation to the purposes for which they were collected), subject to the exceptions provided for by the applicable legislation ( e.g. when the storage of your data is necessary to comply with legal obligations applicable to the data controller). The cancellation will be carried out within the expected technical times;
- The right to data portability allows you, in certain circumstances provided for by applicable legislation, to receive the personal data concerning you that you have provided in a structured, commonly used and machine-readable format. You will be able to transmit these data to another data controller, provided that this right can be recognized in light of the applicable legislation, and without prejudice to the case in which an infringement of the rights and freedoms of others may result;
- the right to limitation of processing allows you, in certain circumstances provided for by applicable law, to obtain the limitation of the processing of your personal data. In such cases the Data Controller may continue to process your data only in some cases, for example to exercise the right of defense or to protect the rights of another natural or legal person;
- The right to object to processing allows you, in certain circumstances provided for by applicable law, to object to the processing of your personal data unless there are prevailing legitimate reasons, rights or freedoms such as to allow the Data Controller to continue processing;
To obtain more information on the processing of your personal data or exercise your rights, please contact us.
8) CHANGES TO THE INFORMATION
This information may be subject to change. We therefore recommend that you regularly check this Policy and refer to the most updated version.
Latest update: August 2024