Privacy Policy

INFORMATION ON THE PROTECTION OF PERSONAL DATA PURSUANT TO ART. 13 OF EU REGULATION 2016/679

Lucart S.p.A. with registered office in via Ciarpi, n.77 (VAT number and tax number 00145780466) in the person of its legal representative, as Data Controller, has always been very attentive to aspects of personal data protection and respect for the principles of confidentiality and human dignity.

Pursuant to Regulation (EU) 2016/679 (“Regulation” or “GDPR”), in accordance with the principle of accountability, any processing of personal data must be lawful and correct. The way in which personal data concerning them is collected, consulted or otherwise processed must be transparent to individuals, as well as the extent to which the same data is or will be processed.

The principle of transparency requires that information and communications relating to the processing of such data are easily accessible and understandable and that simple and clear language be used.

This principle concerns, in particular, informing interested parties about the identity of the Data Controller and the purposes of the processing and additional information to ensure correct and transparent processing with regard to the individuals concerned and their rights to obtain confirmation and communication of a processing of personal data concerning them.

With this in mind, please read the following information.

Lucart S.p.A. with registered office in via Ciarpi, n.77 (VAT number and VAT number 00145780466) in the person of its legal representative, (hereinafter also “Data Controller” or “Lucart”), hereby informs the interested party that the personal data assumed concerning him, acquired by the Data Controller or that will be requested later and/or communicated by third parties, are necessary and will be used for the purposes indicated below.

BROWSING DATA

The computer systems and software procedures used to operate the Site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols. This is information that is not collected to be associated with identified interested parties, but which by its very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of the computers used by users who connect to the Site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the user's operating system and computer environment. These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning, to identify anomalies and/or abuses, and are deleted immediately after processing. For more information, please read the cookie policy, available at the following link: [...]

DATA PROVIDED VOLUNTARILY BY THE USER

Any sending of communications to the contacts indicated on the Site involves the acquisition of the e-mail address and the additional personal data contained in the communication. Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request

PURPOSE AND LAWFULNESS OF THE TREATMENT

Pursuant to EU Regulation 2016/679, personal data:

• are treated lawfully, correctly and transparently with respect to the interested party (art. 5);

• they are collected for specific, explicit and legitimate purposes, and subsequently processed in such a way that it is not incompatible with these purposes (art. 5).

The purposes for which the data are collected are the following:

• pursuit of instrumental and/or complementary purposes to the activities functional to the performance of the existing contractual/pre-contractual relationship;
• keeping general accounts, invoicing, credit management, civil and tax obligations established by law and for updating the archives;
• measurement of the degree of satisfaction of the interested party with the quality of the product and services rendered by the writer, including statistical analysis;
• carrying out marketing activities with particular reference to sending newsletters;
• insertion of CVs by candidates through the “work with us” section.
• The data is processed for sending service communications, for the management of requests for clarification, reports and the management of complaints in relation to the established contractual relationship, as well as for its execution.

Any personal data referring to or collected from the interested party, subject to the provision of consent, may be used for marketing purposes (i.e., by way of example, for the promotion of advertising and commercial events, the sending of advertising campaigns, promotions and offers), which can be exercised by the Data Controller both with automated methods, but also through traditional methods.

METHODS OF PROCESSING AND OBLIGATION OF CONFIDENTIALITY

The processing of data is carried out through computer tools and/or paper media, by subjects committed to confidentiality, with logic related to the purposes and in any case in order to guarantee the security and confidentiality of the data. The data collected will not be subject to disclosure and dissemination to third parties in accordance with the law.

COMMUNICATION TO THIRD PARTIES

Your personal data may be disclosed to third parties known to us only and exclusively for the above-mentioned purposes and, in particular, to the following categories of subjects:

• Lucart Group companies;

• external service providers;

• bodies and public administrations for legal compliance;

• professionals who can be of support in complying with the law;

• companies that can support legal and contractual obligations.

These subjects will process personal data as external managers or as autonomous controllers.

STORAGE TIMES

Pursuant to art. 5 of EU Regulation 2016/679, “Principles applicable to the processing of personal data”, personal data are stored in a form that allows the identification of interested parties for a period of time not exceeding the achievement of the purposes for which they are processed.

The personal data of the interested parties may also be kept for longer periods in compliance with the obligations related to current legal regulations (for example in the field of accounting).

RIGHTS OF THE INTERESTED PARTY

Pursuant to current legislation, the interested party may assert their rights against the Data Controller, namely:

RIGHT OF ACCESS

art. 15

The interested party has the right to obtain confirmation from the data controller as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and to the following information:

1. the purposes of the processing;

1. the categories of personal data in question;

1. the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations;
2. when possible, the expected period of storage of personal data or, if this is not possible, the criteria used to determine this period;
3. the existence of the right of the interested party to ask the data controller to correct or delete personal data or to restrict the processing of personal data concerning him or to oppose their processing;
4. f) the right to lodge a complaint with a supervisory authority;

1. g) if the data are not collected from the interested party, all the information available on their origin;
2. h) the existence of an automated decision-making process, including profiling referred to in article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party.

If personal data are transferred to a third country or to an international organization, the interested party has the right to be informed of the existence of adequate guarantees pursuant to article 46 relating to the transfer.

The data controller provides a copy of the personal data being processed. In the case of additional copies requested by the interested party, the data controller may charge a reasonable fee based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a format

commonly used electronic.

The right to obtain a copy must not harm the rights and freedoms of others.

RIGHT TO RECTIFICATION

art. 16

The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, even by providing a supplementary statement.

RIGHT TO CANCELLATION

art. 17

1. The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller has the obligation to delete personal data without undue delay, if there is one of the following reasons: some text
   1. personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
   2. the interested party revokes the consent on which the processing is based in accordance with article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), and if there is no other legal basis for the processing;
   3. the interested party opposes the processing pursuant to article 21, paragraph 1, and there is no overriding legitimate reason to proceed with the processing, or he opposes the processing pursuant to article 21, paragraph 2;
   4. personal data have been unlawfully processed;

1. personal data must be deleted to fulfill a legal obligation established by the law of the Union or the Member State to which the data controller is subject;
2. personal data were collected in relation to the offer of information society services referred to in Article 8, paragraph 1.

1. The data controller, if he has made personal data public and is obliged, pursuant to paragraph 1, to delete them, taking into account the available technology and the costs of implementation, takes reasonable measures, including technical ones, to inform the data controllers who are processing the data

personal of the interested party's request to delete any link, copy or reproduction of his personal data.

1. 3. Paragraphs 1 and 2 do not apply to the extent that processing is necessary:

1. a) for the exercise of the right to freedom of expression and information;

1. for the fulfillment of a legal obligation that requires the processing provided for by the law of the Union or the Member State to which the data controller is subject or for the execution of a task carried out in the public interest or in the exercise of public authority vested in the data controller;
2. for reasons of public interest in the field of public health in accordance with Article 9, paragraph 2, letters h) and i), and Article 9, paragraph 3;
3. for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89, paragraph 1, to the extent that the right referred to in paragraph 1 risks making it impossible or seriously affecting the achievement of the objectives of such processing;
4. for the assessment, exercise or defense of a right in court.

RIGHT TO RESTRICT PROCESSING

art. 18

1. The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs: some text
   1. the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
   2. the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use be limited;
   3. although the data controller no longer needs them for the purposes of processing, personal data are necessary for the interested party to ascertain, exercise or defend a right in court;
   4. the interested party has opposed the processing pursuant to article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller over those of the interested party.
2. If the processing is limited in accordance with paragraph 1, such personal data are processed, except for storage, only with the consent of the interested party or for the assessment, exercise or defense

of a right in court or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a member State.

1. The interested party who has obtained the restriction of processing in accordance with paragraph 1 is informed by the data controller before said limitation is revoked.

RIGHT TO DATA PORTABILITY

art. 20

1. The interested party has the right to receive in a structured, commonly used and machine-readable format the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without hindrance from the data controller to whom he provided them if: some text
   1. the processing is based on consent pursuant to Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), or on a contract pursuant to Article 6, paragraph 1, letter b); and
   2. the processing is carried out by automated means.

1. When exercising their rights regarding data portability in accordance with paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
2. The exercise of the right referred to in paragraph 1 of this article is without prejudice to Article 17. This right does not apply to the processing necessary for the execution of a task of public interest or related to the exercise of public authority vested in the data controller.
3. The right referred to in paragraph 1 must not harm the rights and freedoms of others.

RIGHT TO OBJECT TO PROCESSING

art. 21

1. The interested party has the right to object at any time, for reasons related to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) or f), including profiling based on these provisions. The data controller refrains from further processing personal data unless he demonstrates the existence of compelling legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the establishment, exercise or defense of a right in court.

2. If personal data are processed for direct marketing purposes, the interested party has the right to object at any time to the processing of personal data concerning him carried out for these purposes, including profiling to the extent that it is connected to such direct marketing.

In addition to the above-mentioned rights, the interested party has the right to withdraw consent upon appropriate request, as well as to lodge a complaint with the Supervisory Authority in the event of a law.

To exercise their rights, the interested party can download the appropriate form (click here to download the form for exercising rights) and send it to privacy@lucartgroup.com.

CONTACT DETAILS OF THE OWNER AND THE DATA PROTECTION OFFICER

The Data Controller Lucart S.p.A., with registered office in via Ciarpi, n.77 (VAT number and tax number 00145780466), can be reached at the following address: privacy@lucartgroup.com.

The Data Protection Officer, appointed by the Data Controller, can be contacted via e-mail at the following address: dpo@lucartgroup.com

UPDATE ON THE PROCESSING OF PERSONAL DATA

This policy may be modified to provide updated information regarding the processing of personal data on the Site. We therefore invite you to visit this section regularly to check for updates.

‍