Privacy Policy

Personal data is processed by Chiattelli Luigi Srl for:

• respond to user requests;
• fulfill the obligations of law, regulation or community legislation to which the company Chiattelli Luigi Srl is subject ;
• send communications of an informative and promotional nature about our creations.

The processing of personal data by Chiattelli Luigi Srl is based on the following legal bases:

• execution of a contract of which the interested party is a party or execution of pre-contractual measures adopted at his request;
• fulfillment of a legal obligation to which the Data Controller is subject;
• consent of the interested party.

The personal data provided by the user will be processed:

• for the time necessary to respond to user requests and/or to provide what has been requested by the same;
• within the limits strictly necessary for the fulfillment of legal obligations to which the company Chiattelli Luigi Srl is subject ;
• until the user’s consent is revoked, when the treatment is based on it (however, the revocation does not affect the lawfulness of the treatment carried out before the revocation).

For the purposes indicated above, the user’s personal data may be communicated to:

• employees and subjects in any capacity included in the organization of Chiattelli Luigi Srl , limited to what is strictly necessary for the performance of their duties;
• subjects, public and private, who can access the data by virtue of the law, regulation or community legislation, within the limits established by these rules;
• third parties, within the limits necessary to carry out their duties on behalf of Chiattelli Luigi Srl , subject to a letter of appointment which imposes the duty of confidentiality and data security, appointed where necessary as data processors;
• any other subjects, to whom the current legal and/or contractual legislation provides for an obligation to notify.

Users’ personal data is not disclosed by Chiattelli Luigi Srl .

Pursuant to articles 15 to 22 of EU Reg. no. 2016/679 – GDPR, the user has the right to:

• revoke the consent given at any time. The withdrawal of consent does not affect the lawfulness of the processing carried out before the withdrawal;
• access your personal data to obtain information on the data processed;
• verify the correctness of the data and request its rectification or updating;
• oppose the processing of your data, when it takes place on a legal basis other than consent. Further details on the right to object are set out in the section below;
• obtain the limitation of the treatment. In this case, the Data Controller will not process the data for any other purpose than their conservation;
• obtain the cancellation of your personal data, when the conditions indicated by the law are met (for example in the case of unlawful processing);
• receive their personal data or have them transferred, where technically possible, to another holder. This right can be exercised when the data are processed with automated tools and the processing is based on the consent of the interested party, on a contract of which the interested party is a party or on contractual measures connected to it;

The user can also lodge a complaint with the Data Protection Guarantor (so-called Privacy Guarantor), who can be contacted at the email address urp@gpdp.it and through the website www.garanteprivacy.it,  or appeal to the judicial authorities.

Details on the right to object

When personal data are processed in the public interest, in the exercise of public powers vested in the Data Controller or to pursue a legitimate interest of the Data Controller, the Data Subject has the right to object to the processing for reasons related to his particular situation. If personal data are processed for direct marketing purposes, the interested party may object to the processing without giving any reason.