Privacy Policy on the processing of personal data pursuant to arts. 13-14 EU Regulation 2016/679

IPERCERAMICA S.p.A. in its capacity as Data Controller of your personal data, pursuant to and by the effects of EU Regulation 2016/679, hereinafter GDPR, is writing to inform you that the aforementioned regulation provides for the protection of data subjects with respect to the processing of personal data and that said processing shall be marked by the principles of correctness, lawfulness, transparency and the protection of your confidentiality and rights.

Your data (e.g. name, surname, address, telephone number, e-mail address, place and date of birth, assets, property, possessions etc.) shall be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations therein provided for.

Purposes and legal basis for the processing as per the GDPR:

Your data shall be processed for purposes connected with:

1. the performance of relative legislative obligations on the legal basis as per art. 6.1c), being legally mandatory fulfilments for tax and accounting purposes and the management of disputes;
2. the carrying out of measures connected with contractual or pre-contractual obligations on the legal basis as per art. 6.1.b) for sending samples, consultancy and information on the products traded by IPERCERAMICA S.p.A., customer management, customer care, customer satisfaction, customer of product delivery in compliance with the order customer management, drafting of quotations /pro-forma invoices and services related to the management of the pre-contractual or contractual sales relationship (including the possibility of contacting you to inform about particular opportunities or deadline regarding your quote), historical filing system of customer invoices and creation of anomynous lists;

The processing of functional data as per points 1) and 2) is necessary for a correct management of the commercial relationship and their provision is obligatory for accomplishing the above-indicated purposes.

3. the pursuit of the legitimate interest of the data controller on the legal basis as per art. 6.1.f) as specifically recognised by art. 130, comma 4, of Italian Legislative Decree 196/2003 (Data Protection Code), the sending of commercial communications by e-mail relating to products and/or services similar to those acquired by the data subject. The data subject has the possibility of opposing said processing, initially or in subsequent communications, in a simple and free manner, writing to the address: privacy@iperceramica.it or by clicking directly from the unsubscribe link in the communication received
4. subject to your consent on the legal basis as per art. 6.1.a), they can be used for marketing and promotional activities relating to the products/services traded by IPERCERAMICA Group* as autonomous marketing and promotional activities. These activities may be exercised via conventional means (e.g. telephone contact, paper mail, individual emails, etc.) or automated contacts (e.g. automated email campaigns, automated telephone SMS contact, instant messaging, social media, etc.) The provision of data for said purposes is optional for you and any refusal of processing does not affect the commercial relationship or the adequacy of the processing.

Method of processing

Your personal data may be processed with electronic means, through paper files, automated contacts, contact by e-mail, data input into company CRM, outsourcing of processing action and, if you are a registered user on the web site, cookies as more explained in “Privacy Policy” and “Cookie policy”. Any processing occurs in compliance with the procedures as per arts. 6 and 32 of the GDPR and through the adoption of suitable safety measures as provided. Your data shall be processed only by staff expressly authorised by the Data Controller and, in particular, IPERCERAMICA employees stores, Accounts department and Marketing department.

Communication

Your data may be communicated to external individuals or legal entities for a correct management of the relationship and, in particular, to the following categories of Recipients, including all duly appointed Data Processors or Data Controllers such as, by way of example: banks and credit institutes, including PayPal, Visa, Mastercard or American Express circuits for payment by credit card or prepaid debit card, consultants and freelance workers, also in partnerships, within the field of public/private entities for which communication of the data is obligatory or necessary in order to fulfil requirements imposed by law or is, in any case, necessary for the administration of the relationship, constitutional or constitutionally important organs, companies in the Iperceramica Group, as per intergroup agreements, , external companies that provide the order-tracking service, external companies necessary for the provision of the services of the Data Controller (for details please write to privacy@iperceramica.it), shippers, , facebook offline events and facebook custom audience, google ads store sales and google ads customer match, shippers, carriers, porters, post, companies for logistics If you are a registered user on the website, your data will also be communicated to other external parties (see ”Privacy Policy” and “Cookie Policy”) only if you have given your consent by clicking on "Allow all cookie" in the banner. At any time you can rectificate your consent by accessing to the link “Review your choises” available in the footer of www.iperceramica.it website.

Diffusione

Your personal data will not be disseminated in any way.

Transfer

Your personal data will be stored in countries belonging to the European Union. For data processed by cookies only, your data will be transferred to countries outside the European Union as indicated in the cookie policy of the companies providing the third-party cookie services. For more information, contact privacy@iperceramica.it

Retention period

We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the period of storage of your personal data is established as for a period of time not beyond the accomplishment of the purposes for which they have been collected and processed for the execution and completion:

• of contractual and legal fulfilments for the purposes described in points 1) and 2)
• of the services provided and until opposition of the data subject for the purposes described in points 3) and 4)

The Data Controller and Data Protection Officer of personal data

The Data Controller, pursuant to the Law, is IPERCERAMICA S.p.A. (Via Pedemontana 13, 41042 Fiorano Modenese (MO); e-mail: privacy@iperceramica.it; telephone: +39 0536 1846400; VAT No. 02732900366) in the person of the pro-tempore legal representative. The Data Protection Officer (DPO) assigned by the Data Controller pursuant to art.37 of the GDPR is contactable at the e-mail address: dpo@iperceramica.it

You have the right to obtain from the Data Controller or from the Data Protection Officer the erasure (right to be forgotten), the limitation, the updating, the rectification and the portability of the data, and opposition to the processing of personal data pertaining to you, as well as, in general, to exercise all the rights provided for by arts. 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR and request the complete list of data processors by writing to privacy@iperceramica.it. You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data is contrary to the legislation in force.

Rights of the Data Subject

Regulation (EU) 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 - Rights of the Data Subject:

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exist, regardless of their being already recorded, and disclosure of such data in intelligible form, and the right to lodge a complaint with the supervisory authority.
2. The data subject has the right to be informed of:
   1. the source of the personal data;
   2. the purposes and methods of processing;
   3. the logic applied if the data are processed by electronic devices;
   4. the identification data concerning the Data Controller, the Data Processors and the representative designated as per article 5, comma 2;
   5. the entities or categories of entity to whom or which the personal data may be disclosed and who or which may get to know said data as designated representative in the State's territory, as data processors or as persons in charge of the processing.
3. The data subject is entitled to obtain:
   1. the updating, rectification or, where interested therein, integration of the data;
   2. the erasure, anonymisation or blocking of data that have been unlawfully processed, including data whose retention is not necessary for the purposes for which they were collected or subsequently processed;
   3. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were disclosed or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the right that is to be protected;
   4. the portability of the data.
4. The data subject has the right to object, in whole or in part:
   1. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
   2. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

* IPERCERAMICA Group: IPERCERAMICA S.p.A and RistrutturaSMART S.r.l. (a turnkey renovation construction company of IPERCERAMICA Group)

IPERCERAMICA S.p.A. in its capacity as Data Controller of your personal data, pursuant to and by the effects of EU Regulation 2016/679, hereinafter GDPR, is writing to inform you that the aforementioned regulation provides for the protection of data subjects with respect to the processing of personal data and that said processing shall be marked by the principles of correctness, lawfulness, transparency and the protection of your confidentiality and rights. Your data (e.g. name, surname, address, telephone number, e-mail address, etc.) shall be processed in accordance with the legislative provisions of the aforementioned regulation and the confidentiality obligations therein provided for.

Purposes and legal basis for the processing as per the GDPR

Your data shall be processed for purposes connected with the carrying out of measures connected with contractual or pre-contractual obligations on the legal basis as per art. 6.1.b) to answer to your inquiry. The processing of functional data is necessary for a correct management of the commercial relationship and their provision is obligatory.

Method of processing

Your personal data may be processed with electronic means, through paper files and outsourcing of processing action. Any processing occurs in compliance with the procedures as per arts. 6 and 32 of the GDPR and through the adoption of suitable safety measures as provided. Your data shall be processed only by staff expressly authorised by the Data Controller and, in particular, , IPERCERAMICA employees stores, Accounts department, Sales department and Marketing department.

Communication

Your data may be communicated to external companies, appointed Data Processor, necessary for the provision of the services of the Data Controller (for details please write to privacy@iperceramica.it) for a correct management of the relationship

Dissemination

Your personal data will not be disseminated in any way.

Transfer

Your personal data will be stored in countries belonging to the European Union.

Retention period

We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the period of storage of your personal data is established as for a period of time not beyond the accomplishment of the purposes for which they have been collected and processed for the execution and completion of the services provided.

The Data Controller and Data Protection Officer of personal data

The Data Controller, pursuant to the Law, is IPERCERAMICA S.p.A. (Via Pedemontana 13, 41042 Fiorano Modenese (MO); e-mail: privacy@iperceramica.it; telephone: +39 0536 1846400; VAT No. 02732900366) in the person of the pro-tempore legal representative. The Data Protection Officer (DPO) assigned by the Data Controller pursuant to art.37 of the GDPR is contactable at the e-mail address: dpo@iperceramica.it.

You have the right to obtain from the Data Controller or from the Data Protection Officer the erasure (right to be forgotten), the limitation, the updating, the rectification and the portability of the data, and opposition to the processing of personal data pertaining to you, as well as, in general, to exercise all the rights provided for by arts. 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR and request the complete list of data processors by writing to privacy@iperceramica.it. You can also lodge a complaint with the competent supervisory authority if you believe that the processing of your data is contrary to the legislation in force.

Rights of the Data Subject

Regulation (EU) 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 - Rights of the Data Subject:

1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exist, regardless of their being already recorded, and disclosure of such data in intelligible form, and the right to lodge a complaint with the supervisory authority.
2. The data subject has the right to be informed of:
   1. the source of the personal data;
   2. the purposes and methods of processing;
   3. the logic applied if the data are processed by electronic devices;
   4. the identification data concerning the Data Controller, the Data Processors and the representative designated as per article 5, comma 2;
   5. the entities or categories of entity to whom or which the personal data may be disclosed and who or which may get to know said data as designated representative in the State's territory, as data processors or as persons in charge of the processing.
3. The data subject is entitled to obtain:
   1. the updating, rectification or, where interested therein, integration of the data;
   2. the erasure, anonymisation or blocking of data that have been unlawfully processed, including data whose retention is not necessary for the purposes for which they were collected or subsequently processed;
   3. certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were disclosed or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the right that is to be protected;
   4. the portability of the data.
4. The data subject has the right to object, in whole or in part:
   1. on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
   2. to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.