Privacy Policy

Art. 1 of Legislative Decree No. 196 of June 30, 2003 establishes:
"Everyone has the right to the protection of personal data concerning them." Pursuant to and in accordance with Article 13 of Legislative Decree No. 196/03, we hereby inform you of the following:

1. The collection and processing of personal data are aimed at properly carrying out the company’s institutional activities. Personal data will be processed lawfully and fairly, in accordance with Article 11, letter a) of Legislative Decree 196/03, which regulates processing methods and data requirements.
   
   
2. Data processing may also be carried out without the use of electronic tools and will consist of any operation or set of operations as defined in Article 4, letter a) of Legislative Decree 196/03.
   
   
3. Personal data may be disclosed to third parties, who will act as data processors, in order to properly carry out institutional activities and in compliance with the applicable regulations, including:
   • entities entrusted with data processing or other IT-related services;
   • entities entrusted with legal and contractual consultancy services;
   • public administrations or public bodies for compliance with legal obligations and/or those related to institutional activities.
     
     
4. The data subject shall have the rights set forth in Article 7 of Legislative Decree No. 196/03, which is provided in full below.
   
   
5. The data controller is Desalto S.p.A., headquartered in Via per Montesolaro C.P. 150, 22063 Cantù (Como), Italy, represented by its legal representative.
   
   

1. The data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, even if not yet recorded, and to receive such data in an intelligible form.
   
   
2. The data subject has the right to be informed of:
   a) the origin of the personal data;
   b) the purposes and methods of processing;
   c) the logic applied in the case of processing carried out with electronic means;
   d) the identification details of the data controller, processors, and any representative designated pursuant to Article 5, paragraph 2;
   e) the entities or categories of entities to whom personal data may be communicated or who may become aware of them in their capacity as designated representatives in the State’s territory, data processors, or persons in charge of processing.
   
   
3. The data subject has the right to obtain:
   a) the updating, rectification, or, where interested therein, integration of the data;
   b) the erasure, anonymization, or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they were collected or subsequently processed;
   c) certification that the operations in letters a) and b) have been notified, also regarding their content, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a disproportionate effort compared to the right being protected.
   
   
4. The data subject has the right to object, in whole or in part:
   a) for legitimate reasons, to the processing of personal data concerning them, even if relevant to the purpose of collection;
   b) to the processing of personal data concerning them for the purpose of sending advertising materials, direct sales, market research, or commercial communications.