Privacy policy

SUBJECT: Information pursuant to and for the effects of art. 13 of the GDPR UE 2016/679 about the protection of the processing of personal data.

The Company EBI GROUP spa, pursuant to articles 4, n. 7) and 24 of EU Regulation 2016/679 dd. 27 April 2016 on the protection of individuals with regard to the processing of personal data (hereinafter referred to as 'EU Regulation'), informs you, pursuant to art. 13 of the EU Regulation, to be the data controller and that it will proceed with the related processing for the purposes and with the methods described below.

For processing of personal data we mean any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of availability, comparison or interconnection, limitation, cancellation or destruction. We inform you, therefore, that such data will be processed manually and / or with the support of IT or telematic means for the following purposes.

Purpose of the treatment.
EBI GROUP spa will process your personal data for the following purposes: to send information and promotional messages via sms and / or e-mail, as well as newsletters from EBI GROUP spa in relation to its own initiatives and / or those of subsidiaries and / or affiliated companies; for the fulfillment of legal obligations. The processing of data will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights. Your personal data will be processed for the entire duration of the business relationship and also subsequently for the fulfillment of all legal obligations.

Method of treatment.
The processing of your data for the mentioned purposes takes place with either automated, electronic or magnetic, or non-automated means, on paper, in compliance with the rules of confidentiality and security required by law, the resulting regulations and internal provisions.

Place of treatment.
The data are currently processed and stored at the registered office of EBI GROUP, Via della Tecnica, 24 - 37066 Sommacampagna (VR). They are also treated, on behalf of the Company, by professionals and / or companies in charge of carrying out technical, development, management and administrative-accounting activities.

Mandatory or optional nature of the provision of data and consequences of any refusal to provide them.
The provision of data is mandatory for all what is required for the communication of promotions, updates, etc. Failure to consent will not affect the possibility of receiving the requested services and will only imply the consequences described below: - failure to consent to the processing of personal data for the purposes referred to in paragraph 1), will make it impossible to receive information and promotional communications as well as newsletters from the writer in relation to its own initiatives and / or those of subsidiaries and / or affiliated companies.

Data communication.
The personal data you have provided, for the purposes described, may be brought to the attention of those EBI Group’s employees and / or collaborators who have been appointed as data processors, and communicated to the following subjects: Associated and controlled companies; third-party companies appointed by the Company to provide for the execution of specific executive phases of the Services provided; third-party companies or consultants in charge of installation, maintenance, updating and, in general, the management of the hardware and software of Ebi Group Spa; all subjects (including Public Authorities) who have access to data under regulatory or administrative provisions. The personal data you have provided, which have been subsequently processed in connection with the management of the service, are not subject to disclosure.

Data transfer abroad.
Your personal data may also be disclosed to third-party companies, belonging to the Group of which EBI Group is part, located also outside the territory of the European Economic Area, for purposes connected and / or instrumental to those described in this document. That’s why we wish to inform you that these companies have been appointed as data controllers, pursuant to Article 28 of the GDPR.

Data retention times:
The provided data will be stored in our archives according to the following parameters: for administration, accounting, payroll management, personnel training, contracting and labor law, management of any litigation: 10 years as established by law as for the provisions of art. 2220 C.C., with the exception of any delayed payments of compensations that justify its extension.

Rights of the interested party.
As an interested party, you have the rights set forth in art. 7 of the Privacy Code and art. 15 GDPR and precisely: 1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning them, even if not yet registered, and their communication in an intelligible form. 2. The interested party has the right to obtain the indication: a) of the origin of their personal data; b) of the purposes and methods of their processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the owner, of the managers and of the designated representative according to article 5, comma 2 D.Lgs. 196 and art. 3, paragraph 1, EU / 2016/679; e) of the subjects or categories of subjects to whom their personal data may be communicated or who can learn about them as appointed representative in the territory of the State, as managers or as agents. 3. The interested party has the right to obtain: a) updating, rectification or, when interested, integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where this fulfillment proves to be impossible or involves a use of means manifestly disproportionate to the protected right. 4. The interested party has the right to object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning him / her, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning him / her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication. Where applicable, you also have the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right of limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Authority.

Owner and Manager of the treatment.
The data controller, whom you can contact to assert the above mentioned rights, is the Company EBI Group spa in the person of its President and Legal Representative, based in Via della Tecnica, 24 - Sommacampagna (VR). The aforementioned rights may also be exercised by you by sending communications to the following e-mail address: privacy@ebigroup.it