Privacy Notice Template for the Processing of Personal Data – Clients

Dear Sir/Madam, we need to process information concerning you, your personal data, for the purposes outlined below. To this end, and as prescribed by the European legislation for the protection of personal data, we provide you with the following information:

1. Data Controller and Data Protection Officer.

The Data Controller, namely the person responsible for decisions regarding the purposes, methods, and security of personal data, is Ciancaleoni S.r.l., located at via della Meccanica 2/4, – 06038 Spello (PG) – Tel. 0742/301626, email info@ciancaleoni.com, in the person of its duly authorized legal representative.

2. Purposes and Legal Bases for Processing.

The personal data you provide to us and that will be collected during the provision of the services you request will be processed for the purposes, based on the legal bases indicated below:

Purposes   (Why we process your data)	Legal Basis   (Under which legal provision we process your data.)	Consequences in Case of Refusal to Process   (What happens if you refuse to provide your personal data and/or authorize the processing)
To provide the service related to the contract of which you are a party	Art. 6, letter b) the processing is necessary for the performance of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at his/her request.	Consent is not required; if you refuse to provide the data, we will not be able to proceed with the contract
For compliance with obligations under administrative, fiscal, and tax law	Art. 6, letter c) the processing is necessary to comply with a legal obligation to which the data controller is subject	Consent is not required; if you refuse to provide the data, we will not be able to proceed with the contract
To communicate information on other products and services provided by Ciancaleoni S.r.l.	Art. 6, Paragraph 1, letter f) the processing is necessary for the pursuit of the legitimate interests of the data controller or third parties, provided that the interests or the fundamental rights and freedoms of the data subject – particularly if the data subject is a minor – do not prevail	Consent is not required; at any time you can object to this processing purpose by exercising the right to object provided in Article 21 GDPR.

3. Recipients and Categories of Processed Data.

The personal data you provide or that is acquired during the provision of the service will be processed exclusively by personnel authorized for this purpose or by designated data processing agents.

In addition to those subjects permitted by law, your data may be disclosed exclusively to those entities to whom you authorize us, in particular the categories of data and the recipients will be as follows:

Purposes	Category of Data	Recipients
Protection in case of breach of contract	Identifiers, contractual details, consumption data	Companies and professionals, responsible for debt recovery and any litigation
Mandatory annual communication to the Revenue Agency of the identifiers of those who have made purchases from Ciancaleoni S.r.l.	Identifiers	Revenue Agency

4. International Data Transfer

Your personal data is not transferred outside the European Union.

5. Retention Period of Personal Data and Criteria Used

The personal data processed are collected in documents whose retention is established in accordance with the purposes of processing as summarized below.

Document	Retention Period
Contract	10 years from the termination of the contract
Invoices	10 years from the issuance

6. Data Subject’s Rights.

You have the right to obtain from the Data Controller, where applicable, access to your personal data and the rectification or deletion thereof, or the restriction of the processing concerning you, or to object to the processing (Articles 15 et seq. of the Regulation). The appropriate request should be submitted to the Data Controller using the contact details indicated above.

7. Collaboration

The protection of your personal data and the respect for the principles provided by the regulations, with particular reference to the principle of transparency, are of primary importance to us. We would appreciate it if you could help us by reporting any misunderstandings of this document or by suggesting improvements through the contact details provided above.

OBJECTION TO DATA PROCESSING

Pursuant to and for the purposes of Article 21 GDPR, by checking the box below I hereby object to the processing for the corresponding purpose. In the absence of an objection, the Data Controller will process your personal data for the purposes indicated on the basis of its legitimate interest. You may exercise your right to object at any time by notifying the Data Controller, without this affecting the other processing purposes.

To communicate information on other services and work performed by Ciancaleoni S.r.l.

  I OBJECT