M51000-0003

Privacy disclosure pursuant to EU Regulation 2016/679 ("GDPR")

WHY AM I SEEING THIS NOTICE?

This information will allow you to understand in detail how the personal data you provide us through the completion of the form will be processed.

WHO IS THE DATA CONTROLLER?

1. Bastiani S. r. l. Unipersonale, a company based in Trieste, in Via San Nicolò 19, is the Data Controller.

For the exercise of your rights, the Data Controller can be contacted as follows: phone +39 040 673 942, Email amministrazione@pbastiani.it, Certified email legalmail@pbastiani.it

WHAT TYPE AND NATURE OF DATA ARE PROCESSED

When filling in the form on the site, personal data will be collected, that is, data that allows your identification, even indirect, such as for example name, surname, address, email, or other data that you will provide spontaneously when filling in the "Message" free space.

PURPOSES AND LEGAL BASES OF LAWFULNESS OF THE PROCESSING

The data collected will be used for the following purposes:

• to allow us to release information at your request or make an appointment.

• for the execution of pre-contractual measures connected and instrumental to the transmission of information about our business and the company's products.

• to manage any relationship with you from a contractual, accounting or tax point of view;

Data of a common nature may also be processed without your specific consent, in order to satisfy your requests and for the pre-contractual and contractual purposes connected and instrumental to the requested service, as well as to fulfil the related legal obligations to which the Data Controller is subject.

You are free to provide or not provide your data, but in the absence of the requested data it will not be possible to conclude or execute the service and your requests.

PROCESSING METHOD AND PLACE AND RETENTION PERIOD

The processing of your data takes place at our headquarters, through the use of telematic, paper, electronic or automated tools and is carried out by authorised and trained persons within the scope of the task assigned to them, for the time strictly necessary to achieve the purposes for which the data were collected.

Your data, in particular, will be kept for the duration of the possible contract and, subsequently, for the time necessary to fulfil tax obligations, or for other purposes provided for by law or regulations. In the absence of the stipulation of a contract, the data will be deleted after 12 months from their collection.

COMMUNICATION AND DISCLOSURE OF DATA

Your personal data may be communicated to the following categories of parties:

1. a) to our suppliers with whom we collaborate, to provide you with the requested service;

2. b) to data processing and IT services companies, companies that manage web platforms, professionals, companies or consulting firms and companies operating in the provision of services for the execution of the contract.

These parties will operate as independent Data Controllers, or will be designated as Data Processors with a specific contract or legal act.

The data may then be accessed by parties to whom this power is granted by legal provisions or regulations (e.g. public security authorities).

The data will not be subject to an automated decision-making process, nor will profiling of any kind be carried out.

Personal data will not be disclosed, nor will they be transferred to third countries or international organisations.

RIGHTS OF THE DATA SUBJECT

Your rights include the rights to:

• ask the Company for access to your personal data and information relating to them; the correction of inaccurate Data or the integration of incomplete data; the deletion of the personal data (upon the occurrence of one of the conditions indicated in Article 17, paragraph 1 of the GDPR and in compliance with the exceptions provided in paragraph 3 of the same article); the limitation of the processing of personal data (in the event of one of the hypotheses indicated in Article 18, paragraph 1 of the GDPR);

• request and obtain - in cases where the legal basis of the processing is the contract or consent, and the processing is carried out by automated means - personal Data in a structured format, commonly used and readable by an automatic device, even in order to communicate such data to another data controller (the so-called right to the portability of personal data);

• object at any time to the processing of personal data in the case of special situations that concern the data subject;

• withdraw consent at any time, limited to cases where the processing is based on consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (for example data revealing health status or sexual orientation). However, processing based on consent, and carried out before withdrawal thereof, remains lawful;

Your requests should be addressed to the contact details indicated above.

If you believe that there has been a breach in the processing of your personal data, you can lodge a complaint with the Supervisory Authority of the place where you habitually reside or work, or where the alleged breach occurred. We inform you that in Italy you can lodge a complaint with the Data Protection Authority.