PRIVACY NOTICE PURSUANT TO ARTICLE 13 OF EU REGULATION NO. 679/2016

(concerning the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data)

Dear Customer/Supplier/Visitor,
SACCHETTO S.P.A., headquartered at Via Avogadro, 12/A – 10121 TURIN (TO), VAT No. 02449810015, in its capacity as Data Controller, pursuant to Article 13 of EU Regulation No. 679/2016, wishes to inform you that your data will be processed in accordance with the principles established by the GDPR (General Data Protection Regulation EU 679/2016), namely the principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity, and confidentiality.

SUBJECT OF DATA PROCESSING
The data subject to processing include:
– Browsing data;
– Personal, identifying, and contact data.

SOURCE OF PROCESSED DATA
The Controller processes browsing data and personal data voluntarily provided by the data subject in the following circumstances:
– Visits to the company’s premises or telephone calls;
– Requests for quotations or submission of offers;
– Previous transactions;
– Interactions through the company website (including filling out the online registration form or the “Contact” form).

PURPOSES AND LEGAL BASIS OF PROCESSING
The personal data voluntarily provided by you will be processed for the following purposes:

For browsing data:
– To allow users to browse the Data Controller’s website;
– To conduct research/statistical analyses on aggregated or anonymous data, without the possibility of identifying the Visitor, to measure the website’s performance, traffic, and interest;
– To fulfill legal obligations to which the Data Controller is subject.

For personal, identifying, and contact data:
In execution of the contract between the data subject and Sacchetto S.P.A. or in execution of pre-contractual measures adopted upon request of the data subject:
– To perform administrative and accounting activities strictly related and instrumental to tax and bureaucratic obligations and the organizational management of the requested services;
– To exchange information, including pre- and post-contractual activities;
– To provide the requested goods and services and to protect the credit positions arising therefrom;
– To formalize requests for information, prepare quotations or offers, manage negotiations, and pre-contractual relations;
– To process or fulfill received requests.

COOKIE POLICY
This application uses cookies. For more information and to view the detailed policy, Users can refer to the privacy notice directly in the cookie banner available on the website.

DATA DISCLOSURE AND COMMUNICATION
The personal data processed by the Controller will not be disclosed or made available to undetermined parties in any form, including by making them available or granting consultation access.

The data will be communicated only to recipients strictly necessary for the purposes stated above. They may be communicated to employees working under the Controller, specifically those authorized to process personal data within the scope of their responsibilities and in accordance with instructions given. Additionally, the data may be communicated, where strictly necessary, to external parties collaborating with the Controller and to third parties who, for the purposes of fulfilling purchases, service requests, or service transactions related to a contract or relationship with the Controller, must provide goods and/or perform services. The data may also be communicated to entities legally entitled to access them by virtue of laws, regulations, or EU directives.

Furthermore, data may be disclosed to third parties in the following categories:
– Providers of IT system management services and website functionality;
– Freelancers, professional firms, or companies providing tax and labor law consulting services;
– Credit institutions;
– Competent authorities for compliance with legal obligations and/or public authority requirements.

DATA TRANSFER
The Data Controller does not transfer personal data to third countries or international organizations. However, the company reserves the right to use cloud services. In such cases, service providers will be selected from those offering adequate guarantees, as required by Article 46 of GDPR 679/16.

METHODS OF PROCESSING AND DATA RETENTION
Processing will be carried out in automated and/or manual form using tools and methods ensuring maximum security and confidentiality, by individuals specifically appointed for this purpose in compliance with Article 4 and the accountability principle of the GDPR.

The Data Controller retains and processes personal data for the time necessary to fulfill the indicated purposes or to process the requests received. Subsequently, the data will be stored but not further processed, for the period established by civil and tax regulations.

RIGHTS OF THE DATA SUBJECT
Under GDPR 679/2016, the data subject has the following rights:
– Right of access (Article 15);
– Right to rectification (Article 16);
– Right to erasure (Article 17);
– Right to restriction of processing (Article 18);
– Right to data portability (Article 20);
– Right to object (Article 21);
– Right to object to automated decision-making (Article 22).

To exercise these rights, the data subject may contact the Data Controller, specifying the nature of the request, the right to be exercised, and attaching a copy of an identity document verifying the legitimacy of the request, at the following address:

SACCHETTO S.P.A.
Via Avogadro, 12/A
10121 – TURIN (TO)
Email: sacchetto@sacchetto.it

WITHDRAWAL OF CONSENT AND COMPLAINTS
Under Article 6 of GDPR 679/16, the data subject may withdraw consent at any time, except for mandatory legal communications to third parties required by law, which, if not provided, could impact service delivery.
The data subject also has the right to lodge a complaint with the data protection authority of their country of residence.

REFUSAL TO PROVIDE DATA
The data subject cannot refuse to provide the Data Controller with the personal data necessary to comply with legal requirements regulating commercial transactions and taxation. Providing additional personal data may be required to enhance transaction quality and efficiency. Refusing to provide legally required data will prevent order fulfillment, while refusing to provide additional data may impact the quality and efficiency of transactions.

AUTOMATED DECISION-MAKING PROCESSES
The Controller does not process data using automated decision-making processes.

DATA CONTROLLER
The Data Controller is SACCHETTO S.P.A., headquartered at Via Avogadro, 12/A – 10121 TURIN (TO). The Data Controller ensures the security, confidentiality, and protection of personal data at all stages of processing.

The updated list of internal and external data processors is available at the Data Controller’s headquarters.

CHANGES TO THIS NOTICE
The Controller reserves the right to modify this privacy notice, in whole or in part, including due to changes in privacy regulations. The updated version will be published on the website and will become binding from that moment. Data subjects are encouraged to regularly check this section.