Customer notice – Processing of personal data

Commercial purposes

Polti S.p.A. sole shareholder, via Ferloni, 83 - 22070, Bulgarograsso, Como, tax code and VAT number 01457440137 (hereinafter referred to as Polti), the parent company of:

• POLTI ESPAÑA S.A. - Paseo del Ferrocarril 381- 08850 Gavà - ES
• POLTI FRANCE S.A.S. - 11/13 Rue des Aulnes - 69760 Limonest - FR
• POLTI UK LTD. - The Junction - Merchants Quay - M50 3SG Manchester - GB
• POLTI DEUTSCHLAND G.M.B.H. - Hafeninsel 11, - 63067 Offenbach am Main - DE
• POLTI USA INC. - 5301 Beethoven Street, Suite 170 - Los Angeles, CA 90066 - US
• POLTIPLAST S.R.L. - Via Monte Rosa n. 13 - 22070 Bulgarograsso (CO) - IT

in the performance of its own activities in its capacity as data controller, collects and processes personal data provided by the data subjects. In order to guarantee the protection and exercise of the rights provided for by law with regard to the protection of personal data, the data subject is informed of the following:

Purposes of the data processing

The data provided by the data subjects will be processed in order to comply with the stipulations of the contract, which encompasses one or several of the following purposes:

1. Management of commercial activity, and the pre-contractual and contractual relationship.

In addition to the staff responsible for managing your contract, the data may be processed by the following entities:

1. Postage and logistics companies;
2. IT service provider companies;
3. Public bodies;
4. Credit institutions;
5. Consultancy firms;
6. Law firms;
7. Financial brokerage firms;
8. Trading agents.

In the context of the activities provided for by the contract that could be entered into and pursuant to Article 49, paragraph B of EU Regulation 2016/679, Polti may send the personal data of the data subjects to countries not belonging to the European Community for purposes inherent to the contractual activities.

Data subject’s rights and methods of exercise

In line with the provisions of Article 13, paragraph 2 of EU Regulation 2016/679, data subjects must be informed of the methods by which they may exercise their rights.

Data subjects are informed that pursuant to Article 12, paragraph 3 of EU Regulation 2016/679:

1. in the case that a request is made by the data subject to exercise the rights provided below, Polti has a period of one month in which to respond;
2. in the case of multiple requests, this period may be extended by two months.

Storage period of the data

Data subjects are informed that personal data will be kept on Polti's systems for as long as necessary to fulfil the specified purposes. Any data that could be generated by virtue of additional contractual relationships (e.g. tax documentation) will be kept in accordance with the legal provisions.

Rights of the data subjects

Pursuant to Articles 15-22 of EU Regulation 2016/679, Polti undertakes to ensure that data subjects are able to fully exercise their rights, provided that this does not harm a legitimate right or the rights of other data subjects. Data subjects wishing to exercise such rights may do so by writing to the following address: privacy@polti.com

Data subjects are informed that pursuant to Article 13, paragraph 2, point D) of EU Regulation 2016/679, in the case of serious breaches or failure to comply by Polti with one of the rights set forth in this notice, data subjects may file a formal complaint with the relevant national Data Protection Authority.