PRIVACY POLICY

PERSONAL DATA PROCESSING DISCLOSURE

Crivelli Srl, with registered offices in Viale Dante, 24, 15048 Valenza (AL), Italy, Tax Code and VAT No. 01389670066 (hereinafter the “Controller”), as the data controller, hereby informs you — pursuant to art. 13 of Regulation (EU) 2016/679 (the GDPR) — that your personal data shall be processed through the methods and for the purposes described below.

  1. Data Subject to Processing

The Controller processes the personal data that you provide to us when entering into contracts regarding the services offered by the Controller. Such data include, but are not limited to, the following examples: name, surname, company name, address, telephone number, email address, banking and payment details (hereinafter, the “Personal Data”).

  1. Purposes of Data Processing

Your Personal Data are processed exclusively with your specific and express consent, in accordance with art. 7 of the GDPR, for the following marketing purposes:

  • To send commercial communications and/or advertising material regarding products or services offered by the Controller, via email, post, SMS or telephone.
  • To gauge customer satisfaction with the services offered through market surveys.
  1. Methods of Processing

Your Personal Data are processed by means of the operations indicated in art. 4 point 2) of the GDPR, including: collection, recording, organisation, storage, consultation, processing, alteration, selection, extraction, alignment, use, combination, blocking, communication, erasure and destruction of the data. Processing shall be both paper-based and electronic/automated.

Personal Data shall be processed for the length of time strictly necessary to achieve the purposes for which they were collected, and in any case for no longer than 10 years after the end of the relationship for service purposes, and no longer than 2 years after being collected for marketing purposes.

  1. Access to the Data

Your Personal Data may be made accessible, for the purposes indicated above, to:

  • Employees and collaborators of the Controller, as well as third-party officers and/or processors and/or system administrators.
  1. Communication of the Data

Your Personal Data shall not be disclosed or revealed to third parties.

  1. Transfer of Data

Personal Data are stored on servers located in the Netherlands (NL), within the European Union. However, if necessary, the Controller also reserves the right to transfer data outside of the European Union. In such cases, the Controller ensures that the transfer shall take place in compliance with the applicable regulations, through the stipulation of the standard contractual clauses adopted by the European Commission to guarantee an adequate level of data protection.

  1. Nature of the Provision of Data and Consequences of Refusal

Provision of Personal Data is mandatory for the purposes set forth in the second point of clause 2. In the event of your refusal, it will not be possible to perform the services you have requested.

Provision of Personal Data for marketing purposes (sending commercial communications), on the other hand, is optional. In the event of your refusal, or if you later object, you will not receive newsletters or advertising material but will retain the right to receive the services requested.

  1. Rights of Data Subjects

As a Data Subject, you have the rights set out in articles 15-22 of the GDPR, specifically:

  • To obtain confirmation of the existence or otherwise of Personal Data regarding you, even if not yet recorded, and their communication in intelligible form;
  • To obtain indication of: a) the origin of the Personal Data; b) the purposes and methods of processing; c) the logic applied to processing with electronic tools; d) the identifying details of the Controller, the processors and the designated representatives; e) the subjects to whom the Personal Data can be communicated;
  • To obtain the updating, rectification or supplementation of Personal Data, as well as the erasure, anonymisation or blocking of data processed in breach of the law;
  • To object, in whole or in part, to the processing of Personal Data for legitimate reasons or to processing for direct marketing purposes, including the use of automated call systems without an operator, via email, telephone, post or SMS.

You also have the right to:

  • Request the restriction of processing, data portability, or to be forgotten, where applicable.
  • To lodge a complaint with the Data Protection Authority.
  1. How to Exercise your Rights

You can exercise your rights at any time by sending a request to:

  • Postal address: Crivelli Srl, Viale Dante, 24, 15048 Valenza (AL), Italy.
  • Email address: info@crivelligioielli.com
  1. Data Controller, Processors and Officers

The Data Controller is Crivelli Srl, with registered offices in Viale Dante, 24, 15048 Valenza (AL), Italy.

The up-to-date list of processors and data processing officers is available at the registered offices of the Data Controller, where it can be consulted upon request.