- Data controller
In accordance with the law and regulation on the protection of individuals with regard to the processing of personal data, namely Regulation (EU) No. 2016/679 (“GDPR”), we inform you that the Data Controller of your personal data is Luppi Intellectual Property S.r.l. (hereafter also LUPPI) with registered office at Viale Corassori, 54, 41124 – Modena.
Phone number: 059/359916 – E-mail: firstname.lastname@example.org.
- Categories of personal data and purposes of the processing
Data communicated by users
Visiting our website does not require you to provide us with any personal data.
LUPPI processes the following personal data:
- contacts or personal data that you provide us with when contacting us for information and/or assistance;
These data will be processed exclusively for the purposes of:
- replying to your requests;
- Managing contacts and forwarding commercial communications or information notices on Italian and foreign regulations and/or procedural updates or related to LUPPI’s participation in trade fairs and organization of related events.
Special categories of personal data
LUPPI does not deliberately collect special categories of personal data, as defined by art. 9 of the Regulation (EU) No. 2016/679, such as data that reveals racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to a person’s health or sex life or sexual orientation.
We suggest you to not provide us with your special category personal data when you contact us, unless if strictly necessary.
LUPPI can process your personal data collected meanwhile you browse our web site. The computer systems and software procedures responsible for the operation of our website automatically acquire certain personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes your IP address or the domain/hostname of the computer used to connect to the web site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the operating system and your computing environment.
These specific data will be processed exclusively for the following purposes:
- to consent the access and browse the web site;
- to derive statistical information about the use of our web site;
- to control the correct functioning of our web site and for improving our business offer and our services.
- Legal basis for the processing
LUPPI processes your personal data if one or more of the following conditions provided for by GDPR exists:
3.1. Processing is necessary for the execution of pre-contractual activities. This basis legitimates the processing of personal data that happens in the following situation:
-to manage of request for quotations or information about the services provided;
Providing your personal data for these activities is not mandatory. You are free to decide if providing or not your data, however without the data requested it will not be possible to execute your requests.
3.2 Processing is necessary for the fulfillment of a legal obligation.
LUPPI may process your data for purposes related to fulfilling and complying with obligations arising from the law or applicable regulations and rules, in particular, in the areas of administration, accounting, taxation and privacy.
3.3 Processing is carried out on the basis of LUPPI’s legitimate interest.
LUPPI will process user data for general assistance activities and to respond to requests of information from users, i.e., to respond to any reports, complaints and/or disputes.
LUPPI has a legitimate interest in responding to requests for information and/or reports and/or disputes and/or complaints from users, which also coincides with the legitimate interest of the Site users themselves who, in response to a request, expect a response from LUPPI. The legitimate interest of LUPPI thus identified may be deemed to prevail over the fundamental rights and freedoms of the data subject, also by virtue of such reasonable expectations and the relationship existing between the data subject and LUPPI, as well as in view of the nature of the data processed and the coinciding interest of the data subjects themselves.
In addition, exclusively to clients who have already used the services and solutions promoted through the site, provided that there is no objection to such processing in the manner indicated, LUPPI may send commercial communications and information on regulatory and/or procedural news from Italy and abroad, or related to LUPPI participation to fairs or similar events. This legitimate interest can be considered equivalent to the interest of the interested party to receive communications of “soft spam”. Pursuant to art. 130 of Legislative Decree 196/2003, the processing put in place for this purpose does not require specific consent from the data subject, who, however, when receiving the communications, shall be informed of the possibility of opposing the data processing by exercising the so-called opt-out to stop such communications at any time.
- How we process your personal data
The data processing is carried out by LUPPI using computer and/or telematic tools, suitable for storing, managing and transmitting the data themselves, for reasons strictly related to stated purposes.
- Who processes your personal data
The data processing is carried out, by personnel appointed and instructed by LUPPI, using procedures, tools and technical information that are adequate to safeguard the confidentiality and security of your personal data.
Without prejudice to communications and the diffusions made in execution of legal obligations, the data could be communicated to third acting on behalf of LUPPI and in accordance with its instructions, as Data processors. . The interested party may request a complete and updated list of the subjects appointed as data processors by contacting one of the contacts indicated below.
Your personal data WILL NOT BE DISCLOSED.
- How long and where we store your personal data
The information and personal data provided through the web site, including data freely provided by sending inquiries to our contacts, will be kept for a limited period of time to fulfil the purpose for which for which they are collected. Once the purpose has been completed your personal information will be deleted or destroyed, unless otherwise requested by authority, because of retention requirements established by law, or unless otherwise specified in particular sections of the Site.
Transfer of data abroad
Luppi Intellectual Property S.r.l. does not transfer your personal data abroad.
The data are processed at the controller’s operational offices and reside within servers located in Italy, at the offices of the relevant provider, appointed as Data Processor.
- What are your rights
We remind you that in relation to your personal data you could exercise your rights against the data controller, as provided by art 15 and ss. 9 of the Regulation (EU) No. 2016/679, allowing you to obtain confirmation of your personal data and their communication in an intelligible form. You will also have the right to obtain updating, rectification, supplementation and deletion of data or restriction of processing. Finally, you will have the right of oppose, in whole or in part, for legitimate reasons, of treatment your personal data, even if it is relevant for the purpose of collection. ou will be entitled to exercise your right to data portability and to lodge a complaint with the Supervisory Authority.
Below is the list of your rights.
Rights of the data subject Articles 15-22 of EU Reg. 2016/679
Article 15 Right of access by the data subject:
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information (| the categories of personal data concerned; the purposes of the processing; the … recipients; the envisaged period for which the personal data will be stored …)
Article 16 Right to rectification:The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
Article 17 Right to erasure (<<diritto all’oblio>>)The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies: article article 17 (1 point a, b, c, d, e,f,) (2), (3, point a, b, c, d, e) Article 18. Right to restriction of processing:The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies: Article 18, section1, letters a, b, c, d, subsection 2, subsection 3.
Article 19 Notification obligation regarding rectification or erasure of personal data or restriction of processing:The controller shall communicate any rectification or erasure of personal data or restriction of processing carried out in accordance with Article 16, Article 17(1) and Article 18 to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The controller shall inform the data subject about those recipients if the data subject requests it.
Article 20 Right to data portability:The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where: cases as per article 20 (1 point a, b) (2, 3, 4)
Article 21 Right of opposition:. The data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
- How to exercise your rights.
The user may request information about the methods of processing and exercise of his/her rights as a data subject through the following ways.
In case of doubts or clarifications on this notice or on how we process your personal data you may contact the Controller Luppi Intellectual S.r.l. at the following contact details:
Telephone number: 059/359916
Formal requests for the exercise of rights by the data subject are preferably sent, using the form provided by the Data Protection Authority, to Luppi Intellectual Property S.r.l., to the attention of the Administrative office, by certified mail to the address email@example.com, or by registered mail to the address of the registered office Via Corassori, 54, 41124 – Modena.
Updated version of July 26, 2022