{"id":4880,"date":"2024-02-14T10:03:07","date_gmt":"2024-02-14T10:03:07","guid":{"rendered":"https:\/\/gummyindustries.com\/privacy-clienti\/"},"modified":"2024-05-17T09:53:07","modified_gmt":"2024-05-17T09:53:07","slug":"privacy-clienti","status":"publish","type":"page","link":"https:\/\/gummyindustries.com\/en\/privacy-clienti\/","title":{"rendered":"Privacy Clienti"},"content":{"rendered":"<div id=\"b-kpicols-block_95c6172929f6f157d4133762c972b204\" class=\"info-content w-row\">\r\n  <div class=\"col-left w-col w-col-6\">\r\n    <p><a href=\"https:\/\/drive.google.com\/file\/d\/1SjRX9A9M6DB0dxVrnFa9zI8rG8Lb4PQb\/view?usp=drive_link\" target=\"_blank\" rel=\"noopener\"><strong>Here is the link to the full pdf<\/strong><\/a><\/p>\n<p><span style=\"font-weight: 400;\">The Company, <\/span><b>Gummy Industries S.r.l.<\/b><span style=\"font-weight: 400;\"> with a registered office in Viale Venezia 20, 25123 &#8211; Brescia (BS), in its capacity as Data Controller (hereinafter also referred to as &#8216;Data Controller\u2019), protects the personal data of Data Subjects by ensuring confidentiality and compliance with applicable legislation and guarantees the necessary level of protection against any event that might put them at risk of being breached.<\/span><\/p>\n<p><b>Types of personal data processed<\/b><\/p>\n<p><span style=\"font-weight: 400;\">In particular, the following personal data concerning you may be processed:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">identifying information such as name, surname, tax code, address, email, and phone number, relating directly to you if you are a natural person or sole proprietorship, or relating to natural persons who represent, belong to, or are otherwise associated with your organization if it is a legal entity;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">bank details<\/span><\/li>\n<\/ul>\n<p><b>Purpose and legal basis of processing<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Your personal data will be processed for the following purposes:<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">pre-contractual activities;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">execution and management of the contractual relationship established with you;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">implementation and management of the consequent regulatory compliance (such as, for example, the fulfillment of economic and financial accountability obligations under Presidential Decree No. 633\/1972, No. 600\/73, and No. 917\/86);<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">sending promotional and marketing communications, including newsletters and market research; it should be noted that the Data Controller collects a single consent for the marketing purposes described herein, according to the General Provision of the Personal Data Protection Authority \u201cAdvertising and Anti-Spam Guidelines&#8221;, July 4th, 2013; if, in any case, you wish to object to the processing of your personal data for marketing purposes carried out in the manner and by the means indicated above, as well as to withdraw the consent given, you may do so at any time by contacting the Data Controller at the addresses indicated in this notice, without prejudice to the lawfulness of the processing based on the consent given before the revocation;<\/span><\/li>\n<\/ol>\n<p><span style=\"font-weight: 400;\">This personal data processing activity takes place for:\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">to send you advertising material relating to the services offered by the Data Controller;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">to send you information and\/or promotional material through newsletters;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">to carry out surveys and improve the services offered (customer satisfaction).<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">The Data Controller has implemented and uses systems for sending promotional\/commercial communications in the form of newsletters, equipped with reporting mechanisms to improve the results of the communications. As a result of the use of such tools, the Data Controller may know, for example:\u00a0<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">number of readers, message opens and clicks by users on messages;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">type of device used to read the communication (desktop, mobile);<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">number of users who have not yet confirmed their subscription (&#8216;suspended&#8217; users);\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">number of emails sent by date\/time\/minute;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">details of emails delivered vs. emails sent; unsubscribers from the newsletter;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">email opens and clicks on individual links;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">link tracking (number of clicks on links in the message);<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">click tracking (which links were clicked).<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">All this data is used to compare and possibly improve the results of the communication.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The legal basis for the processing operations and purposes listed under letters (a), (b), and (c) of this section is the following:\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Art. No 6.1(b) GDPR \u2018processing is necessary to execute a contract to which the Data Subject is a party or for pre-contractual measures taken at the request of the Data Subject\u2019.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The legal basis for the processing operations and purposes listed under letter (d) of this paragraph is the following:\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Art. 6.1(a) GDPR &#8216;the Data Subject has given consent to the processing of his or her personal data for one or more specific purposes&#8217;.<\/span><b><\/b><\/p>\n<ul>\n<li aria-level=\"1\"><b>Processing modalities<\/b><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">Your personal data will be processed mainly with the aid of computer tools and paper media by people within the Data Controller&#8217;s company duly authorized and instructed for this purpose in a manner and by appropriate means to ensure the security and confidentiality of personal data, under the GDPR.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The Data Controller carries out regular checks to ensure that personal data not necessary for the processing and its purposes are not collected, filed, or stored, as listed in point no. 2 of this notice.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">In carrying out the aforementioned activities, Gummy Industries undertakes to:\u00a0<\/span><\/p>\n<ol>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">ensure that the personal data processed is accurate and up to date, and promptly respond to any corrections and\/or additions you request;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">notify you of any personal data breaches within the timeframes and in the cases provided for by applicable law;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">ensure that processing operations comply with applicable law.<\/span><\/li>\n<\/ol>\n<p><b>Personal data recipients<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Personal data processed for the purposes set out in point 2 of this notice may be disclosed:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">to duly authorized internal staff of the Data Controller for those parts of the processing operations that fall within their competence;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">to external parties such as:<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">accountants and\/or external advisers on accounting, tax and legal matters;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">credit institutions;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">lawyers and\/or legal consultants for the management of any litigation;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">information and IT support companies;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">companies providing marketing services;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">IT infrastructure and solutions providers.<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">The communication concerns the categories of personal data whose transmission to the aforementioned third parties is necessary to carry out the activities and for the purposes indicated in this notice and, in any case, in connection with the contractual relationship established with you.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Your consent is not required for the processing in question, as the processing is carried out for the performance of the contract you have entered into with the Data Controller to fulfill any legal obligations arising therefrom or for the protection of a right of the Data Controller.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Under no circumstances will there be any disclosure of your personal data.<\/span><b><\/b><\/p>\n<p><b>Extra EU\/EEA transfer<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The Data Controller will not transfer your personal data abroad (the term &#8220;abroad&#8221; is to be understood as any country not part of the European Economic Area).<\/span><b><\/b><\/p>\n<p><b>Data Retention<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Concerning the purposes indicated at point 2, letters a), b), and c), your personal data will be processed by the Data Controller for the time necessary to carry out the activities related to the management of the contract you have entered into with the Data Controller and for the fulfillment of the resulting obligations, including legal obligations. The data referred to in your contract will be kept for ten (10) years from the date of its conclusion, given the applicable statute of limitations and, in any case, from the time at which any rights under the said contract may be enforced under and for Article 2935 in conjunction with Articles 2946 and 2947 of the Civil Code.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Where there are specific legal requirements, longer retention periods may apply, or if the Data Controller is required to do so by any governmental authority or for any other reason to protect your rights or the rights of the Data Controller.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Personal data processed by the Data Controller for marketing purposes (point 2, letter d), for sending commercial communications by newsletter or other means, will be kept for twenty-four (24) months, unless you proceed to revoke the consent you have given and\/or object to having it processed.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Once the above time limits have expired, the Data Controller will delete the data concerning you.\u00a0<\/span><b><\/b><\/p>\n<p><b>Data subject rights<\/b><\/p>\n<p><span style=\"font-weight: 400;\">Under EU Regulation No. 2016\/679, you have the right to:<\/span><\/p>\n<ul>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">obtain confirmation of the processing of your personal data carried out by the Data Controller;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">access to and know the origin of your personal data (if your personal data is not collected directly from you but from third parties), the purposes of the processing, the Data Subjects to whom the data are communicated (recipients), the data retention period, or failing that, the criteria for determining it;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">obtain the rectification of your personal data;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">obtain the deletion of your personal data from the Data Controller&#8217;s databases if they are no longer necessary for the purposes for which they were collected or if the processing is unlawful, and in the other cases referred to in Article 17 of the GDPR;<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">limit the processing of your personal data e.g. where its accuracy is disputed, for the period necessary for the controller to verify its accuracy, and in all other cases referred to in Article 18 of the GDPR;\u00a0<\/span><\/li>\n<li style=\"font-weight: 400;\" aria-level=\"1\"><span style=\"font-weight: 400;\">receive the personal data concerning you in electronic form in order to be able to communicate them to another Data Controller (portability).<\/span><\/li>\n<\/ul>\n<p><span style=\"font-weight: 400;\">You may exercise your rights by writing to the Controller at: <\/span><a href=\"mailto:privacy@gummyindustries.com\"><span style=\"font-weight: 400;\">privacy@gummyindustries.com<\/span><\/a><span style=\"font-weight: 400;\">.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The <\/span><span style=\"font-weight: 400;\">Data Controller<\/span><span style=\"font-weight: 400;\"> shall act promptly and within one month of receiving the request at the latest. This period may be extended by two months. In this case, the <\/span><span style=\"font-weight: 400;\">Data Controller<\/span><span style=\"font-weight: 400;\"> will always inform you within thirty days of the reasons for the extension.<\/span><b><\/b><\/p>\n<p><b>Complaint\u00a0<\/b><\/p>\n<p><span style=\"font-weight: 400;\">You have the right to lodge a complaint with the Data Protection Authority. In the event that you reside in another member state, or if the violation of personal data protection regulations occurs in an EU country other than the one where Gummy Industries S.r.l. is based, you are required to lodge a complaint with the competent authority responsible for overseeing compliance with data protection laws in that respective country.\u00a0<\/span><\/p>\n<p><span style=\"font-weight: 400;\">Filing the Complaint shall not prevent any other legal action.<\/span><b><\/b><\/p>\n<p><b>Data provision and consequences<\/b><\/p>\n<p><span style=\"font-weight: 400;\">The provision of your personal data is optional but necessary for the purposes set out in point 2 of the disclosure.<\/span><\/p>\n<p><span style=\"font-weight: 400;\">The refusal to provide the requested personal data may result in the impossibility of performing or, if applicable, continuing the relationship established with the Data Controller.\u00a0<\/span><\/p>\n  <\/div>\r\n  <div class=\"right w-col w-col-6\">\r\n      <\/div>\r\n<\/div>\r\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":13,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_acf_changed":true,"footnotes":""},"class_list":["post-4880","page","type-page","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/gummyindustries.com\/en\/wp-json\/wp\/v2\/pages\/4880","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/gummyindustries.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/gummyindustries.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/gummyindustries.com\/en\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/gummyindustries.com\/en\/wp-json\/wp\/v2\/comments?post=4880"}],"version-history":[{"count":0,"href":"https:\/\/gummyindustries.com\/en\/wp-json\/wp\/v2\/pages\/4880\/revisions"}],"wp:attachment":[{"href":"https:\/\/gummyindustries.com\/en\/wp-json\/wp\/v2\/media?parent=4880"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}