PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 CONCERNING THE PROTECTION AND PROCESSING OF PERSONAL DATA (GDPR)
1. IDENTITY OF THE DATA CONTROLLER
The Data Controller is Marazzi Group S.r.l. a Socio Unico, with registered office at Viale Regina Pacis 39, 41049 Sassuolo (Modena) Italy, in the person of its current legal representative (the "Data Controller" or "Marazzi").
The Data Controller has appointed a Data Protection Officer (“DPO”), whom you can contact to exercise your rights, as listed in point 7 below, as well as to receive any information concerning them and/or this Policy Statement, by writing to: firstname.lastname@example.org.
2. PURPOSES AND LEGAL BASIS OF THE PROCESSING AND STORAGE PERIOD
Marazzi will process personal data concerning you, contributed by you directly or collected during browsing of the www.ragnousa.com website (the “Site”), for the following purposes.
2.1. BROWSING THE WEBSITE
As users browse this Site, the IT systems and software procedures which operate it acquire some personal data the transmission of which is implicit in the use of Internet communications protocols, such as the IP addresses or domain names of the PCs and terminals used by users, as well as the URI/URL (Uniform Resource Identifiers/Locators) of the requested resources, the time of the request, the size of the file obtained and other parameters concerning the operating system environment of the user, in order to:
The legal basis for the processing of your data for the purposes referred to in points 1, 2 and 3 is the fulfilment of your request, pursuant to Article 6, first comma, subsection b) of the GDPR; if you were to refuse to contribute these data, you would be unable to use the Site.
2.2. RESPONSE TO REQUEST FOR INFORMATION
The “Contact us” section of the Website and the “Store locator”, contain a specific form via which you may voluntarily contribute some of your ordinary personal data in order to request the information you require. If you decide to make use of this service, the Data Controller will process your personal data only in order to respond to your request for information.
The legal basis for the processing of your data for this purpose is the fulfilment of your request, pursuant to article 6, first comma, subsection b) of the GDPR.
The contribution of your personal data for the above purpose is optional. However, if you decide not to contribute your personal data, you will be unable to obtain the information you need.
For this purpose, the personal data contributed through the website will be stored for the time necessary for the fulfilment of the request.
2.3. DISPATCH OF NEWSLETTERS
By compiling the form in the specific "newsletter" section on the Website, or by flagging the box provided in, "Contact us" section, you may contribute your ordinary personal data (name, surname, email address, professional title, address) in order to subscribe to the Marazzi newsletter and be regularly updated with news of initiatives, activities and projects organised by Marazzi.
The newsletter will be sent to the email address which you provided, in order to fulfil your request.
The contribution of your personal data for the above purposes is optional. However, in the event of refusal to contribute the data, the Data Controller will be unable to fulfil your request to subscribe to the newsletter or to keep you up to date with the latest news from Marazzi.
The legal basis for the processing of your data for this purpose is the fulfilment of your request, pursuant to Article 6, first comma, point b) of the GDPR; therefore, your consent is not necessary to authorise the processing. However, on receipt of any email, you may easily object to the sending of further newsletters by using the “If you are not interested in receiving our newsletter please click here” link or by application to the Data Controller at the contacts provided in point 1 above.
Your personal data will be processed until you decide to cancel your subscription to the Newsletter service.
2.4. MARKETING PURPOSES
Further to the contribution of your personal data for information purposes, (point 2.2), or for subscription to the newsletter (point 2.3), the Data Controller assumes that you are potentially interested in being informed about Marazzi's activities, initiatives and products.
Therefore, given these circumstances, the Data Controller intends to use your personal data (name, surname, telephone number and email address) to send you marketing communications referring to Marazzi's initiatives and products, and invitations to events it has organised. These communications may be sent by traditional means (such as telephone calls) and/or by automated means (such as email, telefax, prerecorded telephone calls, SMS, MMS, instant messaging, etc.).
The processing of your personal data for marketing purposes will require the issue of your specific consent (on the legal basis provided by article 6, first comma, subsection a) of the GDPR), to be given by ticking the box offered to you when the data are contributed. On the other hand, the sending of marketing communications does not require your consent when it takes place using the personal data (e.g. email address) which you contributed during activities relating to the sale of similar products offered by the Data Controller, or if you are acting, as the contact for a legal person, in the context of business relations with the Data Controller; in these circumstances, the processing of your personal data is considered to be based on the prevalent legitimate interest of the Data Controller.
However, on receipt of any email, you may easily object to the sending of further communications by Marazzi, by using the “If you are not interested in receiving our newsletter please click here” in all e-marketing communications, or by contacting the Data Controller at the addresses provided in point 1 above.
2.5. COOKIES AND OTHER TRACKING SYSTEMS
3. PROCEDURES FOR THE PROCESSING OF YOUR PERSONAL DATA
Your personal data will be processed, in compliance with the provisions of the GDPR, by paper, IT and telematic means, for the stated purposes, and in all cases by procedures which guarantee an appropriate level of security and confidentiality, in accordance with the provisions of Article 32 of the GDPR.
The processing of personal data signifies their collection, recording, organisation, storage, treatment, adaptation, alteration, sorting, retrieval, alignment, use, combination, freezing, disclosure, dissemination, erasure or destruction, or the combination of two or more of the aforesaid operations, also via automated tools for the storage, management and transmission of the data, with the aid of measures which guarantee their security and confidentiality.
3.1 USE OF SOCIAL MEDIA
4. RECIPIENTS OF YOUR PERSONAL DATA, AND PARTIES WHO MAY GAIN KNOWLEDGE OF THEM
For the pursuance of the purposes described in point 2 above, the personal data processed will be known to Marazzi's employees, contract staff and associates working in the capacity of authorised data users.
Moreover, for the pursuance of the purposes described in point 2 above, your personal data may be processed by third parties belonging, for example, to the following categories:
In some cases, the entities in the aforesaid categories operate in complete independence as separate data controllers, while in other cases they operate as Data Processors specifically appointed by the Data Controller in accordance with article 28 of the GDPR.
Your consent is not required for the disclosure of your data to entities in the above categories operating in the capacity of independent data controllers, since it is based on the prevalent legitimate interest of the Data Controller, as the said disclosure is necessary for the pursuance of the purposes set out in point 2 above.
5. TRANSFER OF PERSONAL DATA OUTSIDE THE EUROPEAN UNION
For technical and organisational purposes, your data may be transferred to non-European Union member states: this transfer is, in any case, lawful since it is covered by adequacy decisions issued by the European Commission and/or standard data protection clauses based on the models adopted by the European Commission pursuant to art. 46 of the GDPR.
You may request a copy of the safeguards adopted for data transfer outside the EU, and information concerning the places where the data have been made available, by sending a specific request to the Data Controller at the email address email@example.com.
6. YOUR RIGHTS AS DATA SUBJECT
The right to erasure does not apply to the extent to which the processing is necessary for compliance with a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller, or for the establishment, exercise or defence of legal claims.
The above rights may be exercised in relation to the Data Controller using the contacts provided in point 1 above. The Data Controller shall examine your request and shall inform you, without undue delay and in all cases within no more than one month of its receipt, concerning the action taken with regard to your request.
The exercise of your rights as data subject is free of charge in accordance with article 12 of the GDPR. However, in the event of requests which are manifestly unfounded or excessive, in particular because of their repetitive character, the Data Controller may charge you a reasonable fee taking into account the administrative costs of dealing with your request, or refuse to act on the request.
Please also note that the Data Controller may request further information necessary to confirm the identity of the data subject.
ADDITIONAL NOTICE FOR CALIFORNIA RESIDENTS
If you are a California resident, the following provisions apply to our processing of any information that identifies, relates to, describes, is capable of being associated with you, your device, or your household (“California personal information”).
We use the personal information we collect for our operational purposes, which may include the following business purposes:
We may also use the information we collect for our own or our service providers’ other operational purposes, purposes for which we provide you additional notice, or for purposes compatible with the context in which personal information was collected.
Within the last 12 months, we have disclosed the categories of personal information identified in the above categories (A)-(G) for our business purposes.
If you are a California resident, you may have certain rights related to your personal information. You may exercise these rights free of charge except as otherwise provided under applicable law.
Subject to applicable law, we may not discriminate against you because of your exercise of any of the above rights, or any other rights under the California Consumer Privacy Act, including by (a) denying you goods or services; (b) charging different prices or rates for goods or services, including through the use of discounts or other benefits or imposing penalties; or (c) providing you a different level or quality of goods or services.
As required or permitted under applicable law, please note that we may take steps to verify your identity before granting you access to information or acting on your request to exercise your rights. We may limit our response to your exercise of the above rights as permitted under applicable law.
Marazzi Group S.r.l. a socio unico
Last update 04.02.2021