EXTENDED INFORMATION PURSUANT TO ARTICLES 12, 13 AND, IF APPLICABLE, 14 OF THE GDPR – REGULATION (EU) 2016/679 ON THE PROTECTION OF NATURAL PERSONS WITH REGARD TO THE PROCESSING OF PERSONAL DATA (HEREINAFTER THE GDPR)
The data controller reports, below, the Information pursuant to articles 12, 13 and, if applicable, 14 of the GDPR relating to the processing of personal data provided by the Customer/interested party by completing and signing the Contract to purchase the products/services offered for sale by the data controller himself, spontaneously uploading personal data to this website (in particular by filling in forms) or simply by browsing it.
Data controller and contact details
The data controller is the Company SALAMI SRL, with registered office in San Martino in Rio – 42018 – (RE), Via G. Puccini n. 15 VAT number, Tax code and registration number in the Reggio Emilia Business Register 02531100358 website: salamisrl.com
Principles applicable to processing
In accordance with the provisions of the GDPR, the data controller constantly works to ensure that personal data are:
(a) processed lawfully, fairly and in a transparent manner;
(b) collected for specific, explicit and legitimate purposes, and not subsequently processed in a manner that is incompatible with those purposes;
(c) adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed;
(d) accurate and, where necessary, updated;
(e) retained for a period of time not exceeding the achievement of the purposes for which they are processed;
(f) processed, using appropriate technical and organizational measures, in a manner that ensures their security;
(g) processed, if by consent, by decision freely taken by the Customer/data subject, on the basis of a request presented in a manner that is clearly distinguishable from the rest, in an intelligible and easily accessible form, using clear and plain language.
The data controller adopts appropriate technical and organizational measures in order to ensure the protection of personal data by design and to guarantee that, by default, only the data necessary for each specific processing purpose are processed.
The data controller collects and takes utmost account of the indications, observations and opinions of the Customer/data subject sent to the contact details above, in order to implement a dynamic privacy management system that ensures effective protection of individuals, with regard to the processing of their data.
This Policy may undergo changes, in line with the evolution of the reference legislation and the technical and organizational measures gradually adopted by the data controller; the Customer/interested party is therefore requested to periodically visit this section of the Site, to view the updates and the Information in the text in force from time to time.
Methods of processing personal data
The processing of personal data is carried out manually and with electronic tools, with logic strictly related to the purposes indicated below and, in any case, in such a way as to guarantee the security and confidentiality of the data.
Purpose of processing personal data
(4a) Purposes for which data processing is necessary
The personal data provided by the Customer/interested party are mainly processed for the execution of the Contract and the management of credit and, more generally, of the relationship arising from the Contract itself.
The provision of data in the Contract or subsequently, during the contractual relationship, for the processing purposes in question is mandatory; therefore, failure to provide, partial or incorrect provision of such data makes it impossible to stipulate and/or execute the Contract and, for the Customer/interested party, to use the products/services offered by the data controller, potentially exposing the Customer/interested party to liability for breach of contract.
The personal data provided by the Customer/interested party may also be processed if this is necessary to fulfill a legal obligation to which the data controller is subject, to safeguard the vital interests of the Customer/interested party or another natural person, to perform a task of public interest or connected to the exercise of public powers vested in the data controller, or to pursue the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the Customer/interested party do not prevail; even in these cases, the provision of data is mandatory and, therefore, failure to communicate, partial or inaccurate communication of data may expose the Customer/interested party to possible responsibilities and sanctions provided for by the legal system.
(4b) Further final