STATEMENT PURSUANT TO ART. 13 OF LEGISLATIVE DECREE No. 196/2003 and EU Regulation No. 679/2016

Greve Bloc by Greis Tati (headquartered in Vicolo Porta 12, 22072 Cermenate (CO), P.IVA 04148940135 (hereinafter, “Data Controller”), as the data controller, informs, pursuant to Art. 13 of Legislative Decree No. 196/03 and Art. 13 of EU Regulation No. 679/2016 (hereinafter, “GDPR”) that the data will be processed in the following manner and for the following purposes.

1. Object of processing
The data subject to processing are personal, identifying and non-sensitive data (in particular: first name, last name, tax code, VAT number, email, telephone number - hereinafter, “personal data” or also “data”), provided directly by the data subject and collected during the acquisition of the elements necessary for the execution of obligations arising from purchase orders for products and/or services.

2. Purposes of the processing
Your data are processed for the following Purposes:
1. Administrative management and fulfillment of contractual obligations;
2. Keeping of compulsory tax and accounting records, as well as purposes necessary to fulfill an obligation required by law, regulation or EU legislation or legislation on public security;
3. Processing on a statistical basis of turnover volumes and related market analysis;
4. In case of subscription to the newsletter: sending information on future promotions, initiatives and announcements of new services of the Owner similar to those you have already used, subject to the right to unsubscribe.  

3. Processing methods
The processing is carried out through the use of electronic and paper-based tools, and the Data Controller constantly takes the necessary measures to ensure the security of your data.
The Data Controller will process personal data for as long as necessary to fulfill the above purposes and in any case for no longer than 10 years after the termination of the contractual relationship.

4. Access to data
Your data may be made accessible for the Purposes above to third parties and/or companies, such as collaborators, consultants or freelancers who perform work on behalf of the Data Controller.

5. Data communication                             Without the need for your express consent (ex art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR, the Data Controller may communicate your data for the purposes referred to in art. 2 to Judicial Authorities, to insurance companies for the provision of insurance services, as well as to all those subjects to whom the communication is mandatory by Law.
These subjects will process the data in their capacity as autonomous data controllers.
Your data will not be disseminated

6. Data Transfer
The management and storage of personal data will take place on servers located within the European Union of the Data Controller and/or third party companies appointed and duly appointed as Data Processors. Currently, the servers are located in Italy. It is in any case understood that the Data Controller, should it become necessary, will have the right to move the location of the servers to Italy and/or the European Union and/or non-EU countries. In this case, the Data Controller assures as of now that the transfer of data outside the EU will take place in accordance with applicable legal provisions.

7. Rights of the data subject
In your capacity as a data subject, you have the rights under Art. 7 Privacy Code and Art. 15 GDPR and specifically the rights to:
1. obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet registered, and its communication in intelligible form.
2. obtain an indication of:
(a) the origin of the personal data;
b) of the purposes and methods of processing;
c) the logic applied in case of processing carried out with the aid of electronic instruments;
d) of the identification details of the data controller, of the data processors pursuant to Art. 5, paragraph 2, Privacy Code and Art. 3, paragraph 1, GDPR;
e) of the third parties and/or companies to whom the personal data may be communicated or who may become aware of them. 3. ottenere:
a) l’aggiornamento, la rettificazione ovvero, quando vi ha interesse, l’integrazione dei dati;
b) la cancellazione, la trasformazione in forma anonima o il blocco dei dati trattati in violazione di legge, compresi quelli di cui non è necessaria la conservazione in relazione agli scopi per i quali i dati sono stati raccolti o successivamente trattati;
c) l’attestazione che le operazioni di cui alle lettere a) e b) sono state portate a conoscenza, anche per quanto riguarda il loro contenuto, di coloro ai quali i dati sono stati comunicati o diffusi, eccettuato il caso in cui tale adempimento si rivela impossibile o comporta un impiego di mezzi manifestamente sproporzionato rispetto al diritto tutelato.
4. opporsi, in tutto o in parte:
a) per motivi legittimi al trattamento dei dati personali che lo riguardano, ancorché pertinenti allo scopo della raccolta;
b) al trattamento di dati personali che lo riguardano a fini di invio di materiale pubblicitario o di vendita diretta o per il compimento di ricerche di mercato o di comunicazione commerciale.

8. How to exercise your rights
You may at any time exercise your rights by sending a registered letter with return receipt to Greve Bloc by Greis Tati (based in Vicolo Porta 12, 22072 Cermenate (CO)

9. Owner and Manager
The Data Controller is Greve Bloc di Greis Tati. The updated list of Data Processors is kept at the office of the Data Controller.

As of the signing of this information document, the consent to the processing of the data provided will be understood to be given, unless express manifestation of dissent to be sent in writing.