Politique de Confidentialité

Pursuant to article 13 of GDPR 679-2016 defined as "General Data Protection Regulation", we inform you that the processing of personal data provided during the supply of goods/services/services is aimed solely at carrying out contractual obligations and fulfilling your requests, as well as to fulfill regulatory obligations, in particular the accounting and tax ones which constitute the legal basis, as well as to provide you with commercial information on our products and services, will take place at Baltur S.p.A. with headquarters in Cento (FE) 44042, Via Ferrarese 10 VAT number 00040200388 Tax Code, FE Imp. Reg. n. 00040200388 C.C.I.A.A. of FE – R.E.A. n. 30835 Tel. +39 051-6843711 Fax: +39 051-6857527/8 WEBSITE www.baltur.com E-mail info@baltur.it with the use of procedures, including computerized ones, in the ways and within the limits necessary to pursue the aforementioned purposes.

The data provided will be processed in compliance with the aforementioned law, responding to the confidentiality and lawfulness obligations that inspire our company and for the strictly necessary time for which they were collected which in case of non-use will not exceed 24 months; furthermore, the data will not be disclosed.

Your data, for strictly professional reasons and in order to best carry out our service, may be communicated to:

• Our representatives authorized to carry out treatments.
• Any certified platforms for sending newsletters or communications regarding services and performances.
• Credit and/or financial institutions.
• Our external collaborators identified and designated by us.
• Accountants and consultants for accounting or tax needs.

The provision of data could be mandatory for the exact execution of contractual and pre-contractual obligations, and failure to provide it would make it impossible to accurately complete the fulfillment of the requested activities.

Consent is not required when the processing:

1. it is necessary to fulfill an obligation established by law, regulation or community legislation;
2. it is necessary to carry out obligations deriving from a contract of which the interested party is a party or to fulfill, before the conclusion of the contract, specific requests of the interested party;
3. concerns data coming from public registers, lists, deeds or documents knowable by anyone, without prejudice to the limits and methods that the laws, regulations or community legislation establish for the knowledge and publicity of the data.

Rights of interested parties

Interested parties have the right to obtain from the Guarantor, in the cases provided for, access to personal data and the rectification or cancellation of the same or the limitation of the processing that concerns them or to oppose the processing (articles 15 and following of the Regulation).

Right to complain

Interested parties who believe that the processing of personal data relating to them carried out through this site is in violation of the provisions of the Regulation have the right to lodge a complaint with the Guarantor, as provided for by the art. 77 of the Regulation itself, or to take action in the appropriate judicial offices (art. 79 of the Regulation).

Below are the articles relating to the rights of the interested party in full:

Art.15 Right of access of the interested party

1. The interested party has the right to obtain confirmation from the data controller as to whether or not personal data concerning him or her are being processed and, in this case, to obtain access to the personal data and the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organisations; d) when possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or to limit the processing of personal data concerning him or to oppose their processing; f) the right to lodge a complaint with a supervisory authority; g) if the data are not collected from the interested party, all available information on their origin; h) the existence of an automated decision-making process, including profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party.

2. If personal data are transferred to a third country or to an international organisation, the interested party has the right to be informed of the existence of adequate guarantees pursuant to Article 46 relating to the transfer.

3. The data controller provides a copy of the personal data being processed. In case of further copies requested by the interested party, the data controller may charge a reasonable fee based on administrative costs. If the interested party submits the request by electronic means, and unless the interested party indicates otherwise, the information is provided in a commonly used electronic format.

4. The right to obtain a copy referred to in paragraph 3 must not adversely affect the rights and freedoms of others.

Art.16 Rectification and cancellation - Right of rectification

The interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.

Art.17 Right to erasure ("right to be forgotten")

1. The interested party has the right to obtain from the data controller the deletion of personal data concerning him without unjustified delay and the data controller has the obligation to delete the personal data without unjustified delay, if one of the following reasons exists: a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; b) the data subject withdraws the consent on which the processing is based in accordance with Article 6(1)(a) or Article 9(2) letter a), and if there is no other legal basis for the processing; c) the interested party objects to the processing pursuant to Article 21, paragraph 1, and there is no overriding legitimate reason to proceed with the processing, or objects to the processing pursuant to Article 21, paragraph 2; d) the personal data have been processed unlawfully; e) the personal data must be erased to comply with a legal obligation under Union or Member State law to which the data controller is subject; f) the personal data were collected in relation to the offer of information society services referred to in Article 8, paragraph 1.

2. The data controller, if he has made personal data public and is obliged, pursuant to paragraph 1, to delete them, taking into account the available technology and implementation costs, adopt reasonable measures, including technical ones, to inform the data controllers who are processing the personal data of the interested party's request to delete any link, copy or reproduction of their personal data.

3. Paragraphs 1 and 2 do not apply to the extent that the processing is necessary: a) for the exercise of the right to freedom of expression and information; b) for the fulfillment of a legal obligation that requires processing provided for by Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of public authority of which the data controller is vested; c) for reasons of public interest in the field of public health in accordance with Article 9(2)(h) and (i) and Article 9(3); d) for archiving purposes in the public interest, for scientific or historical research purposes or for statistical purposes in accordance with Article 89(1), to the extent that the right referred to in paragraph 1 is likely to render impossible or seriously undermine the achievement of the objectives of such processing; or e) for the establishment, exercise or defense of a right in court.

Art.18 Right to limit processing

1. The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs: a) the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; b) the processing is unlawful and the interested party opposes the deletion of the personal data and instead requests that their use be limited; c) although the data controller no longer needs them for the purposes of the processing, the personal data are necessary for the interested party to ascertain, exercise or defend a right in court; d) the interested party has objected to the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

2. If the processing is limited pursuant to paragraph 1, such personal data shall be processed, except for storage, only with the consent of the data subject or for the establishment, exercise or defense of a right in court or to protect the rights of another natural or legal person or for reasons of substantial public interest of the Union or of a Member State.

3. The data subject who has obtained the limitation of processing pursuant to paragraph 1 shall be informed by the data controller before such limitation is lifted.

Art.19 Obligation to notify in case of rectification or erasure of personal data or limitation of processing

The data controller shall communicate to each recipient to whom personal data have been transmitted any rectification or erasure or limitation of processing carried out pursuant to Article 16, Article 17, paragraph 1, and Article 18, unless this proves impossible or involves disproportionate effort. The data controller shall inform the data subject of such recipients if the data subject so requests.

Art.20 Right to data portability

1. The data subject has the right to receive in a structured, commonly used and machine-readable format the personal data concerning him or her provided to a data controller and has the right to transmit such data to another data controller without hindrance from the data controller to whom he or she has provided them where: a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b); and b) the processing is carried out by automated means.

2. In exercising his or her rights relating to data portability pursuant to paragraph 1, the data subject has the right to obtain the direct transmission of personal data from one data controller to another, where technically feasible.

3. The exercise of the right referred to in paragraph 1 of this Article is without prejudice to Article 17. That right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller.

4. The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.

Right to object and automated decision-making relating to natural persons

Art.21 Right to object

1. The data subject has the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f), including profiling based on those provisions. The data controller shall refrain from further processing personal data unless he or she demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of a right in court.

2. Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him or her for such marketing purposes, including profiling to the extent that it is related to such direct marketing.

3. Where the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.

4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the data subject.

5. In the context of the use of information society services, and notwithstanding Directive 2002/58/EC, the data subject may exercise his or her right to object by automated means using technical specifications.

6. Where personal data are processed for scientific or historical research purposes or statistical purposes pursuant to Article 89(1), the data subject, on grounds relating to his or her particular situation, has the right to object to the processing of personal data concerning him or her, unless the processing is necessary for the performance of a task carried out in the public interest.