Privacy policy ex D.lgs.196/03 and EU Regulation nr. 679/2016

Pursuant to Art. 13 of Legislative Decree no. 196/03 and following the entry into force of EU Regulation no. 679/2016 in accordance with the provisions of Art. 13 of the aforementioned European Regulation, we wish to inform you of the following:

Purpose of the processing

Your personal data, freely communicated and acquired by us due to the activity carried out by: Cristiano Andreoli Via Fabio Filzi 110, 19133 La Spezia SP VAT No.: 01542320112 Tax Code: will be processed lawfully and fairly for the following purposes: Name, surname, email, telephone entered in the contact forms, to be contacted The data processed are updated, relevant, complete and not excessive in relation to the purposes listed above for which they are collected and subsequently processed.

Processing modalities

The data itself will be processed, in compliance with the necessary security and confidentiality, by means of the following methods: collection of data from the data subject, collection and recording for specific, explicit and legitimate purposes, used in further processing operations in terms compatible with those purposes, processing carried out with the aid of electronic and automated tools (collection of data by telematic means, directly from the data subject).

Legal basis of processing

The legal basis for the processing of your personal data is based on your registration on the web portal. Legitimate interests pursued by the Data Controller: The legitimate interests pursued by the Data Controller in the processing of data is the need to respect and honour the contractual obligations entered into between the parties. Pursuant to Art. 6, the lawfulness of the processing is based on the manifestly expressed consent of the data subject, documented in writing. Compulsory or optional nature of the provision of data and consequences of a refusal to answer: the nature of the provision of data by you is compulsory for the data controller to be able to provide the services requested. In the event of refusal, it will therefore be impossible to complete the registration process and the System Controller will not be able to fulfil its contractual obligations.

Disclosure of data to third parties

Your personal data will be processed by the Data Controller, by the Data Processors appointed by him/her and by strictly authorised processors. Your personal data will not be disclosed.

Storage periods

Your personal data will be stored for 10 years from the termination of the service/product supply relationship in Cristiano Andreoli’s computer archives.
Intention of the data controller

The data controller will not transfer your personal data to a third country or international organisation.

Data Controller and Data Processor

The data controller is Cristiano Andreoli. Contact details of the Data Controller, email : The data subject may at any time exercise the rights reserved to him/her, enshrined in art. 7, the full text of which is given below: art. 7 Legislative Decree 196/2003 and art. 15 EU Regulation 679/2016 – Right of access to personal data and other rights – “The data subject shall have the right to obtain confirmation as to whether or not personal data concerning him/her exist, regardless of their being already recorded, and communication of such data in intelligible form. You have the right to be informed: of the source of the personal data; of the purposes and methods of processing; of the logic applied to the processing, if the latter is carried out with the help of electronic means; of the identification data concerning the data controller, the data processor and the representative designated as per Section 5(2); of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing. The interested party has the right to obtain: the updating, rectification, or, when interested, integration of data; the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed; certification that the operations referred to in letters a. and b. have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. The data subject shall have the right to object, in whole or in part: on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys’. In particular, the data subject may at any time request from the Data Controller access to and rectification or erasure of personal data or restriction of the processing of personal data concerning him or her, or object to the processing thereof, as well as the right to data portability. The data subject has the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation and has the right to lodge a complaint with a supervisory authority. The rights may be exercised by writing to the e-mail address