Customer information

Pursuant to art. 13 of the European Regulation n. 2016/679 (GDPR) we inform you that, in compliance with current legislation, every operation concerning the personal data collected will be based on the principles of correctness, lawfulness and transparency.

The processing of your personal data will be carried out using paper and electronic methods, and will be carried out on behalf of the Data Controller ALCAS SpA, in the person of its legal representative pro tempore, responsible towards you for the legitimate and correct use of your personal data and who you can contact for any information or request at the following contact details:

ALCAS SpA
Registered office: Via Livorno, 21/23 – 50142 Florence (FI), IT
Offices and Warehouse: Via dell'Industria, 13/15 – 50056 Montelupo Fiorentino (FI), IT
Telephone numbers: 055 732591 & 0571 59561
Email addresses: info@alcas.it & privacy@alcas.it

PURPOSE OF THE PROCESSING, DATA PROCESSED AND LEGAL BASIS
The following personal data of yours are collected and processed for the purposes indicated below together with the legal basis of reference:

  • Purpose: Customer management Tax code and other personal identification numbers;
  • Data processed: Name, address or other personal identification elements; Contact details (phone number, email, etc.);
  • Legal basis:
    * The fulfillment of contractual and pre-contractual obligations with the interested party for the stipulation and execution of sales contracts (art.6, paragraph 1, letter b GDPR)
    * The fulfillment of legal obligations in fiscal and tax matters (art. 6, paragraph 1, letter c GDPR)
    * Your prior specific and distinct consent (art. 6, paragraph 1, letter a GDPR) for the following marketing purposes: sending via e-mail, post, text message and/or telephone contacts, newsletters, commercial communications and/or advertising material on products and services offered by the Owner and/or its subsidiary companies and measurement of the degree of satisfaction with the quality of services.

We would like to inform you that if you are already our Customers, we will be able to send you commercial communications relating to the Data Controller's services and products similar to those you have already used, unless you disagree (art. 130 c.4 Privacy Code).

NATURE OF THE PROVISION AND CONSEQUENCE OF REFUSAL
The provision of data for purposes relating to the fulfillment of pre-contractual and contractual obligations and legal obligations in fiscal and tax matters is mandatory. In their absence, we will not be able to proceed with the stipulation of sales contracts for the Owner's products. The provision of data for marketing purposes is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided. In this case you will not be able to receive newsletters, commercial communications and advertising material relating to the products offered by the Owner. The sale of the Owner's products will still be carried out.

COMMUNICATION OF PERSONAL DATA
For the purposes mentioned above, your data will be accessible to employees and collaborators of the Data Controller, in their capacity as representatives and/or system administrators.

Furthermore, the data will be communicated to other third parties and/or external parties who carry out activities on behalf of the Data Controller, in their capacity as external data controllers. By way of example: consultants and freelancers in single or associated form (for example, accountant), banks and credit institutions, companies and businesses operating in the field of accounting, tax services and logistics.

The updated list of external managers can be constantly verified by contacting the Data Controller by email at the addresses indicated above.

We also inform you that, without the need for express consent (ex art. 6, par. 1, letter b) and c) GDPR), the Data Controller can communicate your data to: Supervisory Bodies (such as IVASS), Judicial Authorities, Insurance companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law for the fulfillment of the aforementioned purposes. These subjects will process the data in their capacity as independent data controllers.

Your information will not be disseminated.

DATA TRANSFER
Your data will not be transferred to third countries not belonging to the European Union.

EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS, INCLUDING PROFILING
 The Data Controller does not adopt any automated decision-making process, including profiling, referred to in the art. 22, paragraphs 1 and 4 of the GDPR.

STORAGE
In compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR, your data will be stored for the time necessary to fulfill the aforementioned purposes and in particular:

  • for the entire duration of the contractual relationship;
  • for 10 years after the termination of the contractual relationship (art. 2220 cc which provides;
  • for 2 years from data collection for marketing purposes (subject to your free and explicit consent, expressed in a separate form);
  • in the case of judicial litigation: for the entire duration of the same, until the deadlines for appeals have been exhausted.

RIGHTS OF THE INTERESTED PARTY
In your capacity as an interested party, you have the rights provided for by the articles. from 15 to 22 of the GDPR. In particular, the right to:

  • ask for confirmation of the existence or otherwise of your personal data;
  • obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
  • object to processing at any time and also in the case of processing for direct marketing purposes;
  • oppose an automated decision-making process relating to natural persons, including profiling;
  • ask the data controller to access your personal data and to rectify or delete them or limit the processing that concerns you;
  • object to their processing, in addition to the right to data portability, i.e. to receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
  • revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

You can exercise your rights by sending a request via email to the above email addresses of the Owner.

Furthermore, you have the right to lodge a complaint with the competent Supervisory Authority: Guarantor for the protection of personal data ( www.garanteprivacy.it ).

CHANGES AND UPDATES
 This information may be subject to changes and additions, also as a consequence of the updating of the applicable legislation relating to the protection of natural persons with regard to the processing of personal data as well as the free circulation of such data.