INFORMATIVA SUL TRATTAMENTO DEI DATI PERSONALI – CLIENTI

The user’s personal data is used by PASTIFICIO LA GINESTRA SRL, which is the data controller, in compliance with the principles of personal data protection established by GDPR Regulation 2016/679 and the Legislative Decree. 101/2018.

METHODS AND PURPOSES OF DATA PROCESSING

We inform you that the data will be processed using the following means:

Mixed – electronic and paper-based

for the following purposes:

• Fulfillment of legal obligations related to commercial relationships;

• Processing, printing, enveloping, and shipping of invoices;

• Provision of the product service;

• Supplier management (contracts, orders, arrivals, invoices);

• Litigation management (contracts, orders, arrivals, invoices);

• Customer management (contracts, orders, shipments, and invoices);

LEGAL BASIS

The provision of data is mandatory for everything required by legal and contractual obligations; therefore, any refusal to provide them, in whole or in part, may result in the impossibility of providing the requested services.

The company processes optional user data based on consent, i.e., through the explicit approval of this privacy policy and in relation to the methods and purposes described below.

CATEGORIES OF RECIPIENTS

Without prejudice to communications carried out in fulfillment of legal and contractual obligations, all data collected and processed may be communicated exclusively for the purposes specified above to the following categories of data subjects:

• Supervisory and control authorities;

• Banks and credit institutions;

• External processors;

• Companies providing warehouse logistics and transport services.

Furthermore, in the management of your data, the following categories of authorized persons and/or internal and external processors identified in writing and to whom specific written instructions regarding data processing have been provided may become aware of them:

The list of data processors and persons in charge of processing is available upon request.

RETENTION PERIOD

Data mandatory for contractual and accounting purposes are kept for the time necessary to carry out the commercial and accounting relationship.

The data of those who do not purchase or use products/services, despite having had previous contact with company representatives, will be immediately deleted or processed anonymously, where their retention is not otherwise justified, unless the informed consent of the data subjects has been validly acquired for subsequent commercial promotion or market research activities.

The data retention period is: Data will be processed for as long as necessary to carry out the existing commercial relationship and for the following ten years from the date of acquisition of the same or from the date of the last contractual/commercial relationship entered into.

RIGHTS OF THE DATA SUBJECT

Pursuant to European Regulation 679/2016 (GDPR) and national legislation (Legislative Decree 101/2018), the data subject may, in the manner and within the limits provided by current legislation, exercise the following rights:

• request confirmation of the existence of personal data concerning them (right of access);

• know their origin;

• receive intelligible communication;

• obtain information about the logic, methods, and purposes of the processing;

• request the update, rectification, integration, deletion, or transformation into anonymous form, the blocking of data processed in violation of the law, including those no longer necessary for the purposes for which they were collected;

• in cases of processing based on consent, receive their data provided to the controller, in a structured and machine-readable form and in a format commonly used by an electronic device;

• the right to lodge a complaint with the Supervisory Authority.

All of the above by contacting directly:

Data Controller

PASTIFICIO LA GINESTRA SRL

Email: info@pastificiolaginestra.it Certified Email (PEC): info@pec.pastificiolaginestra.it Telephone: 019/5600090