Personal data protection
Privacy & Cookie Policy
Privacy notice prepared pursuant to Article 13 of Regulation (EU) 2016/679.
Privacy notice
With this notice, prepared pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data (also referred to below as the “GDPR”), Zoccarato Industrial Coatings Srl (also referred to below as the “Controller”) intends to describe how the personal data (also referred to below as “Data”) of users/visitors of the website accessible at www.zoccaratoverniciature.it (also referred to below as the “Site”) are processed.
This notice applies only to the Controller's Site and not to any other websites that the user may visit through links.
1. Data Controller
The Data Controller (also referred to below as the “Controller”) is Zoccarato Industrial Coatings Srl, VAT no. 05225670289, with registered office at via Frattina, 11/A, 35011 - Campodarsego (PD), Italy.
Controller contact details: tel: 049 92 02 150; fax: 049 92 02 159; e-mail address: privacy@zoccaratoverniciature.it.
2. Types of personal data processed
Accessing the Site does not require any registration. However, specific sections of the Site require users to provide their Data in order to use them.
Data voluntarily provided by the user. This means the data entered directly by the user in the fields provided on the Site (for example, to receive information by completing the contact form). Examples of data provided directly by the user include: name, surname, residential/domicile address, e-mail address, telephone number, etc. The optional, explicit and voluntary sending of e-mails to the addresses indicated on the Site results in the subsequent acquisition of the sender's address, which is necessary to respond to requests, as well as any other Data included in the message.
Navigation data. Like all websites, this Site also acquires certain personal data whose transmission is implicit in the use of Internet communication protocols. Navigation Data are acquired by the IT systems and software procedures of this Site for its normal operation. This information is not collected to be associated with identified persons, but by its nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by individual users connecting to the Site, URI (Uniform Resource Identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the server response (successful, error, etc.) and other parameters relating to the user's operating system and IT environment. These data are used only to obtain anonymous statistical information on the use of the Site and to check its correct operation.
Navigation data may also be used to ascertain liability in the event of hypothetical computer crimes against the Site.
3. Purposes and legal basis of processing
Without prejudice to what has been specified regarding navigation data and cookies (technical cookies do not require consent; the third-party tools described in the Cookie policy are used only with the consent the user gives through the banner, Article 6(1)(a) of the GDPR, which can be withdrawn at any time), the Data provided by the User are collected and processed for the purposes indicated below.
A) Performance of pre-contractual measures at the request of the data subject and subsequent performance of the contract. The Data provided by the user are processed for purposes strictly connected with the performance of pre-contractual measures at the request of the data subject (for example through the contact form) and the subsequent performance of the contract, for the provision of the services offered by Zoccarato Industrial Coatings Srl and the management of orders, as well as to follow up on requests for estimates and/or information material. The performance of pre-contractual measures and the subsequent performance of the contract (Article 6(1)(b) of the GDPR) constitute the legal basis for processing the Data.
B) Legal obligations. The Data provided by the user are processed to comply with obligations provided for by national or EU laws and/or regulations that the Controller is required to observe when providing the requested services (for example in tax, accounting and single IT archive management matters, etc.). Compliance with a legal obligation (Article 6(1)(c) of the GDPR) constitutes the legal basis for processing.
4. Nature of providing Data and consequences of refusal
Providing the Data is necessary for the purposes indicated under Article 3 letters A) and B), namely to carry out the sale and delivery of the products and/or services offered by the Controller. Failure to provide the Data will make it impossible to follow up on the user's pre-contractual/contractual request and to perform the contract, as well as to provide any requested services/information.
5. Methods of processing personal data
Personal data are processed using electronic, IT, telematic and/or paper-based tools, with logic strictly related to the purposes indicated above, in full compliance with current legislation and with the principles of lawfulness, transparency, necessity, proportionality and non-excessiveness, and in such a way as to guarantee users' confidentiality. Specific security measures are adopted to prevent the loss of Data, unlawful or improper use of the Data and unauthorized access.
6. Personal data retention period
Your Data will be retained for the performance of pre-contractual measures and of the contract and the related legal obligations, in compliance with the principles of proportionality and non-excessiveness and, in any case, for a period not exceeding the time strictly necessary to achieve the purposes for which they were collected, in compliance with the limitation periods provided for by applicable law. As soon as the Data are no longer necessary for the purposes for which they were collected, Zoccarato Industrial Coatings Srl will delete them.
7. Recipients or categories of recipients of personal data
For the pursuit of the purposes described in this notice, your personal data may be processed by employees, equivalent personnel and/or collaborators of the Controller, who act as persons authorized to process personal data and are specifically appointed as persons in charge of processing.
Personal data communicated by users may also be processed, on behalf of Zoccarato Industrial Coatings Srl, by third parties appointed as Data Processors pursuant to and for the purposes of Article 28 of the GDPR, belonging, by way of example, to the following categories:
- a) service providers for IT system management (web hosting);
- b) the company that manages this Site;
- b) parties that handle administrative and/or tax obligations;
- c) parties that provide legal and/or tax consulting services;
- d) parties used by the Controller for the performance of the contract (for example for shipping and delivery of products), the correct fulfilment of the contractual obligations undertaken, and obligations arising from the law;
- The complete and updated list of Data Processors is available upon request by the user.
- The Data may also be disclosed to the judicial authority and/or police bodies, or to parties to whom there is an obligation of disclosure pursuant to national or EU laws and/or regulations.
8. Dissemination of personal data
Personal data are not subject to dissemination.
9. Transfer of data abroad
Your Data will not be transferred outside the European Union, except as indicated in the Cookie policy for the contact form spam protection and for the third-party tools the user allows, each with the safeguards described there.
10. Rights of the data subject
We inform you that the GDPR grants users, as data subjects, the exercise of specific rights. In particular, at any time, the data subject may obtain:
- a) the right to request and obtain access to personal data, confirmation as to whether or not such data exist, and communication of the data in an intelligible form;
- b) the right to obtain information on the origin of the personal data and to verify their accuracy, request their completion and/or updating, or rectification if inaccurate;
- c) the right to request and obtain the deletion of personal data when they are no longer necessary for the purposes for which they were collected and processed, the transformation of the data into anonymous form, or the blocking of data processed unlawfully;
- d) the right to request and obtain restriction of processing if the personal data are inaccurate, are no longer necessary for the purposes for which they were collected and processed, or in the event of unlawful processing of the data;
- e) the right to object, in any case and on legitimate grounds, to the processing of the data;
- f) the right to receive the data concerning him or her, provided to the Controller and processed by automated means, and to transmit those data to another controller without hindrance from the Controller, as well as, where technically feasible, to obtain the direct transmission of the data from the Controller to whom they were provided to another controller.
- All these rights may be exercised by writing to the Controller's e-mail address indicated above.
- The Controller will take charge of the user's request and provide the user, without undue delay, with information on the action taken regarding the request.
- Any rectifications or deletions of data or restrictions of processing carried out at the user's request, unless this proves impossible or involves disproportionate effort, will be communicated by the Controller to each of the parties to whom the Data have been transmitted.
11. Complaint
Pursuant to Article 13(2)(d) of the GDPR, finally, the data subject may exercise his or her rights by lodging a complaint with the Italian Data Protection Authority, with registered office at Piazza di Montecitorio, 121, 00186 Rome, Italy.
12. Applicable law
This Privacy Notice is governed by Regulation (EU) 2016/679, which ensures that the processing of Data is carried out in compliance with fundamental rights and freedoms, as well as the dignity of the data subject, with particular reference to confidentiality, personal identity and the right to protection of personal data.
13. Review clause
The Controller reserves the right to review, amend or update this notice, in whole or in part, in any manner and/or at any time, without prior notice, also in consideration of changes to laws or regulations on personal data protection. Amendments and updates to this notice will be published on the Home Page of the Site. We therefore ask you to access this section regularly to check the publication of the most recent privacy notice.
The full text of Regulation (EU) 679/2016 - General Data Protection Regulation can be consulted on the website of the Italian Data Protection Authority at www.garanteprivacy.it.