Privacy policy
INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATED TO THE COMPLETION OF THE"CONTACTS" FORM
This notice supplements the website's navigation policy to explain how the Data Controller will specifically process the data entered in this form. Therefore, we invite you to review the privacy policy related to website navigation.
Identity and Contact Details of the Data Controller
INNOITALY S.R.L., hereinafter also referred to as "INNOITALY" or the "Data Controller," with its registered office at Via del Lavoro, 63 – 31013 – Codognè (TV), can be contacted via email at info@innoitaly.com, via PEC at innoitaly@pec.net, or by phone at +39 0438 470357.
Purposes and Legal Bases
A. Handling information requests
Personal data is processed for all necessary actions related to fulfilling requests for information and/or quotations.
B. Newsletter
Contact details are used for sending advertising or direct sales materials.
C. Defensive purposes
The Data Controller may need to process personal data to manage disputes and extrajudicial or judicial litigation.
| Purpose | Legal Basis (Common Data) | Legal Basis (Sepcial Data) |
|---|---|---|
| A. | Execution of pre-contractual measures; Legitimate interest of the Data Controller in responding to received requests. | / |
| B. | Consent. | / |
| C. | Legitimate interest of the Data Controller in establishing, exercising, or defending a right. | Establishing, exercising, or defending a right. |
Retention period
| Purpose | Retention period |
|---|---|
| A. | Time necessary to fulfill the received requests and subsequent communications. |
| B. | 24 months from the date of collection. |
| C. | 10 years from the final resolution of the dispute. |
Nature of Data Provision and Consequences of Refusal
| Purpose | Nature | Consequences |
|---|---|---|
| A. | Necessary | Inability to receive the requested information. |
| B. | Optional | Inability to receive commercial communications. |
| C. | Necessary | Inability to manage disputes. |
Scope of Data Communication
Personal data are processed by authorized internal staff for specific tasks and are communicated externally according to the following rules:
| Purpose | Categories of External Recipients |
|---|---|
| A. | Consultants and companies providing website support services. |
| B. | Consultants, companies providing website support services, and companies offering hosting/technology platform management services. |
| C. | Law firms; Judicial authorities. |
Since the data is also processed using IT tools, it may also be visible to entities providing support and maintenance for such systems.
Transfer of Data to a Third Country or an International Organization
The Data Controller transfers personal data to the countries listed below under the following conditions:
| Purpose | Country | Lawfulness Condition for the Transfer |
|---|---|---|
| A. | United States of America, Australia, Singapore, Japan, Colombia, UK, Canada | Standard contractual clauses, European Commission adequacy decision |
| B. | United States of America, Australia, Singapore, Japan, Colombia, UK, Canada | Standard contractual clauses, European Commission adequacy decision |
| C. |
Data Subject Rights
- Access: The right to know if personal data is being processed and, if so, to obtain access to it and request a copy.
- Rectification: The right to request the update, correction (if inaccurate), or completion of incomplete personal data.
- Erasure: The right to have personal data deleted under specific conditions (for more details, contact the Data Controller).
- Restriction: The right to request that data be marked to limit future processing under specific conditions (for more details, contact the Data Controller).
- Objection: The right to object to the processing of personal data for reasons related to one's particular situation when processing is based on legitimate interest or necessary for performing a public interest task or exercising official authority vested in the Data Controller. Additionally, the right to object to personal data processing for direct marketing purposes.
- Portability: The right to receive personal data provided to the Data Controller in a structured format and request its transfer to another controller when processing is based on consent or a contract and carried out by automated means.
- Withdrawal of consent: The right to withdraw consent for processing activities that require it, without affecting the lawfulness of processing carried out before the withdrawal.
Rights Exercisable in Relation to Processing Activities
| Purpose | Exercisable Right | ||||||
|---|---|---|---|---|---|---|---|
| Access | Rectification | Erasure | Restriction | Objection | Portability | Withdrawal of Consent | |
| A. | X | X | X | X | X | ||
| B. | X | X | X | X | X | X | |
| C. | X | X | X | X | X | ||
A complaint may be submitted to a supervisory authority: for Italy, the Italian Data Protection Authority (www.garanteprivacy.it).