Information for the processing of personal data

Pursuant to Art. n. 13 of the EUROPEAN REGULATION N. 679/2016

To whom it concerns,
Calzaturificio Baldan 88 SRL Unipersonale as Data Controller pursuant to art. n. 13 of the European Regulation n. 679/2016 "General Data Protection Regulation (GDPR)" (hereinafter EU Regulation), containing provisions on the processing of personal data, intends to inform you about the processing of your personal data.

The law provides that anyone who processes personal data is required to inform the interested party in relation to the data processed and the elements qualifying the treatment, which must in any case take place in a lawful, correct and transparent manner as well as protect confidentiality and guarantee rights of the interested party.

It is specified that data processing means any operation or set of operations concerning the collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, destruction of data themselves.

1. Controller of processed data

The Data Controller is Calzaturificio Baldan 88 SRL Unipersonale, with registered office in Via Pampagnina, 1 - 30032 Fiesso d’Artico (VE), Tax Code 02154540286 and VAT no. 02357750278, who can be contacted at the following numbers: telephone +39 041 5160555, e-mail: baldan88@baldan.it.

2. Nature of the processed data, purpose and legal basis of the processing

Nature of the processed data
In relation to the purposes of the processing indicated below, we inform you that only "common personal data" will be processed such as, for example:

• company identification data (company name, VAT number, C.F., type, address, telephone number, e-mail, etc.);
• personal data of the company contact and legal manager (name, surname, etc.);
• etc.

Purpose of the processing for which the data are intended
Your personal data will be processed for the following purposes:

• A. To respond to your requests: by voluntarily completing the appropriate form found in this contact area;
• B. Purposes connected to the obligations laid down by laws;

Legal basis of the processing
Personal data, for the purposes referred to in points 2A and 2B will be lawfully processed to fulfill pre-contractual and contractual obligations between us and the user (Article 6, paragraph 1 letter b), to fulfill our legal obligations (Article 6 paragraph 1 letter c).

Furthermore, the interested party is informed that pursuant to art. 21 of the EU Regulation, the interested party has the right to object at any time to the processing of personal data concerning him carried out for the purposes of direct marketing (including profiling) and that, if the interested party objects to the processing, the data personal data can no longer be processed for these purposes.

3. Data recipients and processing methods

The processing of your personal data will be based on principles of correctness, lawfulness and transparency and may be carried out using paper and electronic tools both by the staff of the writing company, authorized / appointed to process personal data, and by external subjects called to carry out specific assignments, on behalf of the Data Controller, as Data Processors, pursuant to art. 28 EU Regulation, subject to our letter of appointment which imposes on them the duty of confidentiality and security of the processing of personal data, and the adoption of suitable security measures to prevent data loss, illicit and incorrect use, and unauthorized access , in compliance with the current provisions on the protection of personal data.

For the sake of brevity, the detailed list of these figures is available at the headquarters of the Data Controller and is at your disposal.

Your personal data will not be disclosed and will not be transferred to third countries or international organizations, they will not be disclosed to third parties except for legal or contractual obligations.

4. Retention period of personal data

Your personal data will be kept for a period not exceeding the achievement of the purposes for which they are processed, in compliance with the conservation limitation principle provided for by the EU Regulation and / or for the time necessary for legal and contractual obligations or until the revocation of the specific consent by the interested party takes place and, therefore:

• with reference to the purposes indicated in points 2A-2B, the data will be kept for the time not exceeding the achievement of the purposes for which they are processed and / or for the time strictly necessary for the fulfillment of legal and contractual obligations;

To guarantee the declared storage times, a periodic check is carried out on an annual basis on the data processed and on the possibility of being able to delete them if no longer necessary for the intended purposes.

5. Consequences of failure to communicate data

The personal data referred to in points 2A-2B of this information are necessary, without such data it would be impossible for us to proceed with the registration (creation of your personal account), to fulfill contractual and legal obligations.

6. Rights of the interested party

In your capacity as an interested party, you have the rights referred to in articles from n. 15 to n. 22 of the EU Regulation listed below and precisely has the right to:

• obtain confirmation of the existence and processing of personal data concerning him and, in this case, obtain access to his data (so-called right of access);
• obtain information on the purposes of the processing, the categories of data in question, the recipients or categories of recipients to whom the data have been or will be communicated, in particular if recipients of third countries or international organizations, the envisaged data retention period of the criteria used to determine this period; and if the data are not collected from the interested party, obtain all available information on their origin;
• obtain the rectification of data concerning him (so-called right of rectification);
• obtain the cancellation of data concerning him (so-called right to be forgotten);
• obtain the limitations of the treatment (so-called right of restriction of processing);
• The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided (the so-called right to data portability);
• oppose the processing at any time (the so-called right to object). Specifically, as required by art. 21 of the EU Regulation, that if personal data are processed for direct marketing purposes (including profiling), the interested party has the right to object at any time to the processing of personal data concerning him for these purposes and that if the interested party objects to the processing for direct marketing purposes, the personal data can no longer be processed for these purposes;
• be made aware (with the possibility of objecting) of the existence of an automated decision-making process relating to individuals, including profiling;
• withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
• propose a complaint to a supervisory authority (Guarantor for the Protection of Personal Data).

It should be noted that there may be conditions or limitations to the rights of the interested party. It is therefore not certain that, for example, you have the right to data portability in all cases, this depends on the specific circumstances of the processing activity.

Another example: if you decide to oppose the processing of data, the Data Controller has the right to evaluate your request, which may not be accepted in the event of the existence of compelling legitimate reasons to proceed with the processing that prevail over your interests, rights and freedoms.

7. How to exercise the rights

Without any formalities, you may at any time exercise your rights clearly and explicitly by sending:

• a registered letter with return receipt to the writer (see the address indicated on the letterhead);
• an e-mail to baldan88@baldan.it

Or by contacting the Data Controller directly at: +39 041 5160555.

8. Minors

What is offered by the Data Controller and the subject of the existing relationship with you does not provide for the intentional acquisition of personal information relating to minors. In the event that information on minors is unintentionally registered, the Data Controller will delete it in a timely manner, upon request or notification from the interested party.

9. D.P.O. - Appointees / Authorized - Data processors

Below we provide you with some information that you need to bring to your knowledge, not only to comply with legal obligations, but also because transparency and fairness towards the interested parties is a fundamental part of our business.

D.P.O. (Data Protection Officer).
You can also contact the Data Protection Officer for information and / or make requests about your data or to report inefficiencies or any problem that may be encountered. The Data Protection Officer can be contacted by e-mail: nicola.ghinello@dpo-rpd.com or telephone: +39 348 3165267.

Appointees/Authorized.
The updated list of persons in charge / authorized to process the processing is kept at the headquarters of the Data Controller and can be consulted upon request by anyone who is entitled to it.

Data Processor.
The updated list of data processors is kept at the headquarters of the data controller and can be consulted upon request by anyone who is entitled to it.