Information Notice on the Processing of Personal Data of Newsletter Subscribers, pursuant to Article 13 of EU Regulation 2016/679
Data Controller
The Data Controller is Quaranta Ceramiche S.r.l., with registered office in Manduria, Strada Statale 7 Ter km 33+900, Industrial Zone – Manduria. Contact email: info@quarantaceramiche.it.
Description of Processing
Personal data is collected through the newsletter subscription form for marketing and promotional activities regarding the company's own products and initiatives (i.e., those of affiliated and/or controlled companies) as well as those of third parties (i.e., business partners and outsourcers) that may be of interest to the User. This is done in full compliance with the applicable regulations, ensuring the security, confidentiality, and protection of the data in its possession, as well as the fundamental rights and freedoms that are recognized, in accordance with the provisions of the GDPR. The data is provided directly by the individual who subscribes to the newsletter.
Categories of Data Subjects
Users who subscribe to the newsletter by filling out the online form.
Consent to Newsletter Subscription for Minors Under 18
Personal data of individuals aged between 16 and 18 can only be provided with the consent of a parent or legal guardian. Quaranta Ceramiche S.r.l. declines all responsibility in the event that the User provides incorrect, untruthful, or third-party data, including that of minors, for whom they are not authorized and/or expressly entitled to provide data and consent to processing. The User assumes full responsibility for such actions.
Types of Collected Data
The personal data processed are those voluntarily provided by the user when filling out the online form to subscribe to the newsletter, specifically: FIRST NAME, LAST NAME, and EMAIL.
Purpose of Processing
Direct Newsletter/Marketing Activities by the Data Controller:
Personal data is processed for the sending of newsletters via email containing commercial information regarding the services and products offered by Quaranta Ceramiche S.r.l.
By registering for the newsletter, the data subject’s email address is automatically added to a contact list that may receive periodic email messages containing information, commercial messages, and promotional and/or advertising content.
Newsletter/Marketing Activities on Behalf of Third Parties:
Personal data is processed for the sending of newsletters via email, containing technical or commercial information regarding the services and products offered by Quaranta Ceramiche S.r.l.’s business partners and outsourcers.
Legal Basis
The legal basis for the processing is the explicit consent provided through a declaration for the sending of newsletters by the Data Controller, as well as specific consent for the sending of newsletters by the Data Controller on behalf of third parties (Art. 6, para. 1, letter a of the GDPR).
Pursuant to Article 7 of the GDPR, the data subject may withdraw any consent given at any time. The withdrawal of consent, which can be done via the appropriate link in the footer of the email newsletter, results in the discontinuation of the newsletter. The withdrawal does not affect the lawfulness of processing carried out before its revocation.
Recipients and Categories of Recipients
The personal data processed by the Data Controller is not disclosed.
Personal data may be communicated to employees operating under the Data Controller’s authority as authorized processors and to external parties collaborating with the Data Controller, designated as Data Processors or otherwise acting under the authority of the Data Controller.
In particular, in addition to the Data Controller, other individuals involved in the organization of the website (administrative, commercial, marketing, legal, and system administration staff) or external parties (such as third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) may have access to the data. The updated list of Data Processors can always be requested from the Data Controller. Quaranta Ceramiche S.r.l. remains obliged to communicate data to Public Authorities upon specific request.
The newsletter will be sent using the Mailchimp platform (a platform operated by the American company Rocket Science Group LLC, headquartered at Ponce de Leon Ave NE Suite 5000, Atlanta, Georgia, USA).
Transfer Abroad
Data is processed at the operational headquarters of the Data Controller and in any other location where the parties involved in the processing are located. Therefore, the Data Controller does not transfer this personal data to third countries or international organizations outside the EU.
However, the company reserves the right to use cloud services. In such cases, service providers will be selected from those who provide adequate guarantees, as required by Article 46 of the GDPR. Equivalent levels of protection will be required for the processing of information and data that may be communicated to these parties, as those adopted for the processing of the personal data of the company’s own employees. In any case, only the data necessary to achieve the intended purposes will be communicated, applying the regulatory instruments provided for in Chapter V of the GDPR.
Duration of Processing
The Data Controller retains and processes personal data for the time necessary to fulfill the specified purposes, that is, for the period during which the Data Controller maintains the service, with a maximum duration of 2 years from the time consent is given, unless the consent is revoked earlier by the data subject.
Each email will remind the User that they can unsubscribe from the service via a dedicated link in the footer of every email.
The Data Controller may send a request for consent renewal for direct newsletter/marketing activities at the end of the indicated period.
After these periods, the data will be deleted or anonymized, unless further retention is necessary to fulfill subsequent contractual obligations, legal obligations, or to comply with orders issued by Public Authorities and/or Regulatory Bodies.
Methods and Nature of Data Provision
Data is collected and recorded lawfully and fairly for the above-mentioned purposes, in compliance with the principles and requirements of Article 5, para. 1 of the GDPR.
The processing of personal data is carried out using IT, telematic, and manual tools, with logic strictly related to the purposes themselves and in such a way as to guarantee the security and confidentiality of the provided data.
The provision of data for the aforementioned purposes is entirely optional. Refusal by the data subject to provide personal data, the absence of consent, or its withdrawal for one or more purposes will result in the inability to receive the newsletter.
Automated Processing
Under no circumstances does the Data Controller carry out processing that consists of decisions based on automated processes concerning natural persons.
Rights of Data Subjects
Data subjects, in accordance with Articles 15 to 22 of the GDPR, have the right to:
- Request access to their data;
- Request verification and rectification of their data;
- Withdraw previously given consent at any time;
- Object to the processing of their data;
- Request the restriction of processing;
- Request the deletion or removal of their personal data;
- Exercise the right to data portability.
Additionally, the data subject has the right to file a complaint with the competent Data Protection Authority or take legal action if they believe that the processing of their data violates GDPR regulations, pursuant to Article 77 of the GDPR.
To exercise their rights, Users may send a request to the following email address: info@quarantaceramiche.it.