Privacy Policy

GDPR – POLICY ON DATA PROCESSING – Art.13 Reg. UE 679/2016

Torresan Gioielli Srl intends to inform data subjects on the processing of personal data carried out in compliance with EU Regulation 679/2016 by the same company which is the Data Controller.

The privacy policy is dedicated, for the aspects of respective competence, to the following categories of sta subjects: customers, suppliers, visitors of the website. For the latter category, there are also references that refer to other disclosures, such as the cookie policy and the disclosure for job search and applications.

The data controller is: TORRESAN GIOIELLI SRL (C.F. 01999420241) Via Enrico Mattei, 9 Mussolente (Vi)

Tel. +39 0424 577110 – email: info@torresangioielli.it

If this were necessary, the interested party will receive specific information in advance and a request to give specific consent.

WHO IS INTERESTED	DATA WE PROCESS
Customers and Suppliers, for the Management of the Commercial Relationship	Personal details (name, surname, address, telephone number, fax number, tax code, email, VAT number Personal contact data (personal data, company emails and telephone numbers...) of the Supplier/Customer contacts involved (partners, administrators, directors, collaborators, employees, etc.) Bank details (bank and/or postal details, IBAN, BIC/Swift codes) Data and Information specifically referred to commercial transactions
Visitors / Website users who browse the site, and/or apply in the contact section, and/or put us requests (e.g. neswletter subscription)	data closely related to the typical technical methods and parameters of operation of Internet navigation (e.g. IP address, type of browser, parameters of the device used to connect to the site, name of the internet service provider, methods of requesting pages, date and time of visit, etc.). Name, Surname, contact details and all the info whitin the description field of the form
Visitors / Website users who apply for job positions by filling out the form "Work with us"	Name, Surname, contact details and all the info entered in the CV uploaded in the form

PURPOSE OF THE TREATMENT, LEGALITY AND LEGAL BASES

a	Commercial and pre-contractual management relating to the activities that preceded the stipulation of the contract Management of requests received by filling in contact forms (if provided) Management of requests received by who apply for job positions by filling out the form "Work with us"	Article 6 c.1 b) of the GDPR "The processing is necessary for the execution of a contract of which the interested party is a part and for the execution of pre-contractual or post-contractual measures adopted at the request of the same"
b	Contractual, administrative, accounting and tax management (including data entry into the Data Controller's systems) orders, shipments, invoicing Internet navigation parameters and technical cookies strictly necessary for the proper running of the site	Article 6 c.1 b) of the GDPR "The processing is necessary for the execution of a contract of which the interested party is a part and for the execution of pre-contractual or post-contractual measures adopted at the request of the same"
c	Sending of any promotional communications on products and services similar to those already offered in the contractual phase, without prejudice to the right to object on each sending	Article 6 c. f) of the GDPR “The processing is justified by a legitimate interest of the Data Controller, such as sending commercial and/or promotional communications .cp 47 and art.130 c.4 Legislative Decree 196/03”
d	Optional Cookies for statistical, performance and marketing purposes	Article 6 c.1 a) of the GDPR "The interested party has given his consent to the processing of data"

SCOPE OF DISTRIBUTION AND CATEGORIE OF PERSONS TO WHICH MAY BE DISCLOSED DATA, ANY LIABILITY DOMAINS

Personal data collected by TORRESAN GIOIELLI S.R.L. may be disclosed, within the limits and in the forms strictly relevant to the aforementioned purposes, also to the following subjects or categories of subjects:

Subjects to whom communication is required by law, by regulation or by national and community legislation as well as for the performance of contractual or pre-contractual obligations.
Credit Institutions, Insurance Companies and other entities for the execution of contractual or pre-contractual obligations (disbursement of payments, stipulation of compulsory insurance policies, etc.);
External studies and professionals specialized in consulting for the management of accounting and tax aspects for the fulfillment of the law (eg accountant, auditing company, etc)
Companies that carry out any activities of transport and shipment of the goods in relation to the customer's personal details.
Subjects that provide services for the management of the TORRESAN GIOIELLI S.R.L. information system and telecommunications networks (including e-mail and web site management), limited to the management of security profiles for the purposes of data processing operated by TORRESAN GIOIELLI S.R.L.;

For the types of communications to the subjects mentioned above, where as the comunications involves a procession of data on our behalf, TORRESAN GIOIELLI S.R.L. has a contract in place that assigns and regulates the role of responsibility of treatment (so-called Sub-suppliers or data Processors) in accordance with Art. 28 of the GDPR. The updated list is available at TORRESAN GIOIELLI S.R.L. headquarters.

DATA TRANSFER

As a rule, the Data Controller does not transfer personal data to third countries or to international organizations.

The undersigned also reserves the right to use services in cloud; in which case, the service providers will be selected among those who provide adequate guarantees, as required by art. 46 GDPR 679/16

PROVISION OF DATA AND CONSEQUENCES OF FAILURE TO COMPULSORY / NON-COMPULSORY PROVISION

The provision of data must be considered mandatory with regard to the processing that the organization must carry out to fulfill its obligations towards the data subject on the basis of the existing relationship (or contract), as well as legal obligations, rules, regulations - see paragraph finality, a) b) - Failure to provide such data may make it impossible for TORRESAN GIOIELLI S.R.L. to proceed with the current relationship.

The provision is not mandatory for all other purposes and, even if conferred, can be revoked at any time by the interested party. In the event of failure to provide consent, the consequences will be assessed from time to time, having regard to the specific case. For the purposes of type c) communications will always be accompanied by an information for the processing of data and will always be given the right to withdraw from communications of a commercial or promotional nature.

DATA CONSERVATION PERIOD / DATA RETENTION

The data are kept only for the period necessary for the purposes for which they are processed or within the terms provided for by national and Community laws, rules and regulations to which the organization must comply (eg accounting and tax regulations, etc.). It is expected that a periodic check will be carried out annually on the data processed and on the possibility of being able to cancel them if no longer necessary for the intended purposes. As regards marketing activities, data are retained until the associated purposes are fulfilled. For non-strictly necessary cookies, the retention period is specified in the cookie policy (see next paragraph).

COOKIES AND OTHER TRACKING TOOLS

This site uses cookies and other tracking tools, in line with the relevant regulatory provisions, and in particular with the provisions of the Italian Privacy Authority - Cookies and Other Tracking Tools Guidelines - June 10, 2021 (Published in the Official Gazette No. 163 of July 9, 2021).

In particular, we use:

- technical cookies necessary for the operation of the site - your consent is not required for their use;

- analytical, performance and marketing cookies, including third-party cookies, necessary to offer you services in line with your interests - your consent is needed for use.

Learn more in our Cookie Policy.

JOB SEARCH AND SELECTION

Processing related to the search and selection of personnel and collaborators, also carried out through this website or social media, is detailed in the dedicated privacy policy. Learn more.

RIGHTS OF DATA SUBJECTS

The Data Controller undertakes to provide the interested party with feedback on any requests in relation to the processing of data, within 30 days and, in the event of impossibility to comply with these deadlines, to justify any extension of the deadlines. The response will be free of charge, except in cases of groundlessness or excessive requests for which a fee may be charged that is not higher than the costs actually incurred for the research carried out.

In particular, please note the rights of the data subject to access, rectification or deletion of data, and those to the limitation or opposition to processing, as shown in the tables below.

Access

(Art.15)

- Confirmation of the data processing

of the data subject by the Data Controller.

- Access to personal data by the data subject proces-

sed by the Data Controller.

- Information on purposes, categories of processed data, recipients of any communications (especially if in third countries), expected retention period and origin of the data collected from third parties.

- Information on the existence of the right to rectification or deletion of data and limitation or opposition to their processing and to lodge a complaint with the Guarantor.

- Possible existence of an automated decision-making process or profiling, information on the logic used and the consequences of such processing.

Request sent to the Data Controller

Correction

(Art. 16)

- Correction by the Owner, without unjustified delay, of the incorrect personal data concerning the interested party and

- integration of incomplete personal data.

Request sent to the Data Controller

Cancellation

(Art.17)

In cases of:

- data no longer necessary for the purposes for which they were collected;

- withdrawal of consent, if there is no other legal basis for the processing;

- opposition to treatment, if there is no legitimate overriding reason;

- unlawful processing;

- legal obligation;

- and finally, in cases related to the consent of minors, with regard to the provision of information society services.

Request sent to the Data Controller

Limitation

(Art. 18)

Temporary regime of abstention from processing in cases of:

- contestation of accuracy,

- opposition to cancellation in case of unlawful processing,

- data no longer necessary for the Data Controller but necessary for the data subject to exercise a right,

- opposition to processing

Pending the conclusion of the investigations, the Data Controller is required to retain the data and performs any other processing only under certain conditions.

Request sent to the Data Controller

Portability

(ART. 20)

As regards processings based on consent or on a contract, the data subject is entitled to receive from the Data Controller his personal data in “common” electronic format in order to transmit them to another Data Controller (also directly from the Data Controller to the Data Controller)."portable"personal data are those that the subject has provided directly and explicitly to the Owner, but also those collected during the provision of the service, such as, for example, traffic or navigation data (for network service providers)

Request sent to the Data Controller

Opposition

(Art. 21)

Opposition to the processing of personal data based on the criteria of lawfulness of the exercise of public interest or of the legitimate interest of the Owner, including direct marketing or any profiling.

The Data Controller refrains from processing, except for legitimate reasons that prevail over the interests, rights and freedoms of the interested party, or for verification, exercise or defense of a right in court.

The Data Controller is obliged in any case to stop processing for direct marketing purposes if the data subject opposes the use of their data for this purpose.

Request sent to the Data Controller

Complaint

(Art. 77)

Right to propose a complaint to a Supervisory Authority (Privacy Guarantor), where the interested party considers that the processing that concerns him / her violates the Regulation

Request sent to the Data Controller

Right to propose a complaint to a Supervisory Authority (Privacy Guarantor), where the interested party considers that the processing that concerns him / her violates the Regulation

To exercise these rights, you can contact the following contact details

TORRESAN GIOIELLI SRL

Via Enrico Mattei, 9

36065 MUSSOLENTE (VIi

Tel +39 0424 577110

Email: info@torresangioielli.it

P.IVA 01999420241