In compliance with Regulation (EU) 2016/679 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of the same (hereinafter GDPR), of Legislative Decree 196/2003, we wish to inform you that Pugi RGSrl (cf. 01934440486) with registered office in Viale Guglielmo Marconi 50/15, 59100 Prato (PO), IT, and operational headquarters in Via Garibaldi, 33B, 51037 Montale (PT) (hereinafter Pugi RG ) in the person of his pro tempore legal representative, is the Data Controller of the personal data supplied by you and ensures that they will be subject to treatment based on compliance with the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
The Data Controller specifies that this information relates only to treatments carried out for marketing purposes by sending emails via the MailChimp platform. For general information regarding the complex of treatments implemented by the company through the website, please refer to the dedicated privacy policy.
Given the above, we hereby inform you of the following information on the treatment:
| Category of data processed | Purpose of the treatment | Legal basis | Storage time | |
| 1 | Name, surname, e-mail address, country/state, company name, company sector | Commercial communication, also via newsletter, of our company’s products through the use of automated and traditional tools | Consent of the interested party (art.6, par.1, letter a) GDPR | 24 months from the collection of consent, unless revoked or opposed by the interested party by writing an email to info@pugirg.it or by clicking the unsubscribe button that you will find at the bottom of each communication. |
| 2 | Name, surname, e-mail address, country/state, company name, company sector |
Commercial communications by e-mail of products similar to those already purchased | Legitimate interest of the owner (art.6, par.1, letter f, art.130 c.4 privacy code) consisting in the desire to keep interested parties updated on products and services similar to those already requested or purchased | 6 months from the date of the last purchase, unless objected by the interested party or by clicking on the unsubscribe button which you will find at the bottom of each communication. |
| 3 | Name, surname, e-mail address, country/state, company name |
User profiling based on the following criteria: type of relationship with the company, language, company sector |
Consent of the interested party (art.6, par.1, letter a) GDPR) | 24 months from the collection of consent, unless revoked or opposed by the interested party by writing an email to info@pugirg.it or by clicking the unsubscribe button that you will find at the bottom of each communication. |
The provision of data, in relation to the treatments described above, is optional; in case of your refusal or failure to communicate the requested data, it will not be possible to proceed with the treatment. The withdrawal of consent will not affect the lawfulness of the treatment based on the consent given up to that moment.
How are your data processed?
The data collected will be processed using paper and electronic tools, limited to the realization of the purposes for which they were collected. Taking into account the state of the art and the costs of implementation, as well as the nature, object, context and purposes of the processing, the owner has implemented the technical and organizational measures aimed at guaranteeing an adequate level of security of the processing to risk, yes as required by Article 32 of the regulation.
The sending of commercial and/or advertising communications will be managed with automated tools through MailChimp, a communication platform for sending newsletters. Following your consent to the sending of communications, your identification data will be stored on their servers, for further information in this regard, please consult the Mail Chimp privacy policy.
To whom may your data be disclosed?
The data may be communicated
-
to employees and collaborators of Pugi RG in their capacity as authorized to process or, where appropriate, to expressly designated natural persons;
-
to third-party companies or other subjects who carry out outsourcing activities on behalf of Pugi RG and subjects who provide services for the management of the information system and telecommunications networks, including e-mail, newsletters and website management. These third parties, in their capacity as external data processors, may process personal data only to the extent strictly necessary to provide their services in favor of the Data Controller. The list of persons appointed as data processors will be provided, upon your request, by the Data Controller by writing to the following email address: info@pugirg.it.
Will your data be transferred to a third country or to an international organization outside the EU?
The Data Controller protects personal data by adopting security measures and respecting the principles established by the GDPR. User data will not be disseminated or divulged to indeterminate subjects in any way. For strictly operational needs connected with the management of the mail marketing service, Pugi RG will communicate your identification data to the MailChimp platform, of the operator Rocket Science Group, an American company. Pugi RG and the supplier have signed the standard contractual clauses, incorporated in the agreement on the processing of personal data, an integral part of the services contract.
Which Supervisory Authority can I appeal to?
The interested party always has the right to lodge a complaint with the Personal Data Protection Authority based in Rome, following the link to the relevant section of the website https://www.garanteprivacy.it/home/docweb/-/ docweb-display/docweb/4535524 .
What are your rights?
The Regulation provides for and regulates a list of rights belonging to the interested party and which you can exercise at any time. In particular: Art. 15 – Right of access: request confirmation of the existence of personal data processing in progress and obtain access; Art.16 – Right of rectification: request and obtain the rectification if the interested party believes that the data processed are inaccurate, in the presence of the legal conditions; Art.17 – Right to cancellation (right to be forgotten): request the cancellation of data, without unjustified delay if they are no longer necessary with respect to the purposes of the processing, if the interested party has revoked the consent, if he has opposed the treatment, or in the case of unlawful treatment or, even if the data must be canceled to fulfill a legal obligation; Art. 18 – Right to limitation of treatment: in the event that the interested party disputes the accuracy of the data, if the treatment is unlawful or, although the owner no longer needs it for the purposes of the treatment, the data are necessary for the interested party to the ascertainment, exercise or defense of a right in court, Art.20 – Right to portability, or the right to receive data concerning an interested party that he has provided to the owner, in a structured format, of use common, readable by automatic device, or the right to ask the owner that the data be transferred directly to another owner Art.21 – Right to object: right to oppose the treatment at any time, for reasons connected to the particular situation of the interested party, based on article 6, par1. lit. e) and f), Art.
What is the method of exercising the rights?
Where you intend to exercise one of the rights listed above, you must address your request directly to the data controller, by sending a communication to the e-mail address info@pugirg.it or by contacting the Data Controller at the addresses published on the site.