Polti S.p.A. sole shareholder, via Ferloni, 83 - 22070, Bulgarograsso, Como, tax code and VAT number 01457440137 (hereinafter referred to as Polti), the parent company of:

• POLTI ESPAÑA S.A. - Paseo del Ferrocarril 381- 08850 Gavà - ES
• POLTI FRANCE S.A.S. - 11/13 Rue des Aulnes - 69760 Limonest - FR
• POLTI UK LTD. - The Junction - Merchants Quay - M50 3SG Manchester - GB
• POLTI DEUTSCHLAND G.M.B.H. - Hafeninsel 11, - 63067 Offenbach am Main - DE
• POLTI USA INC. - 5301 Beethoven Street, Suite 170 - Los Angeles, CA 90066 - US
• POLTIPLAST S.R.L. - Via Monte Rosa n. 13 - 22070 Bulgarograsso (CO) - IT

in the performance of its own activities in its capacity as data controller, collects and processes personal data provided by the data subjects. In order to guarantee the protection and exercise of the rights provided for by law with regard to the protection of personal data, the data subject is informed of the following:

Purposes of the data processing

Data provided by data subjects will be processed exclusively for the purposes inherent to supplier selection and qualification activities and the management of the supply contract.

In addition to the staff responsible for managing your contract, the data may be processed by the following entities:

• Postage and logistics companies
• IT service provider companies
• Public bodies
• Credit institutions
• Financial brokerage firms
• Consultancy firms
• Law firms
• Other suppliers

in the performance of its own activities in its capacity as data controller, collects and processes personal data provided by the data subjects. In order to guarantee the protection and exercise of the rights provided for by law with regard to the protection of personal data, the data subject is informed of the following:

Purposes of the data processing

Data provided by data subjects will be processed exclusively for the purposes inherent to supplier selection and qualification activities and the management of the supply contract.

In addition to the staff responsible for managing your contract, the data may be processed by the following entities:

• Postage and logistics companies
• IT service provider companies
• Public bodies
• Credit institutions
• Financial brokerage firms
• Consultancy firms
• Law firms
• Other suppliers

In the context of the activities which form the object of the contract, Polti may send the personal data of the data subjects to countries outside the EEA, the UK or your country of residence, as applicable. We will take steps to ensure that your data receives the same level of protection as if it were processed within the EEA, the UK, or your country of residence. For example, we may include standard contractual clauses adopted by the European Commission in our contracts with third parties or our group companies to ensure that safeguards are in place to protect your personal data for purposes inherent to the activities provided for by the supply contract.

Storage period of the data

Data subjects are informed that personal data will be kept on Polti’s systems for as long as necessary to fulfil the specified purposes. Any data that could be generated by virtue of additional contractual relationships (e.g. tax documentation) will be kept in accordance with the legal provisions.

Data subject’s rights and methods of exercise

Data subjects must be informed of the methods by which they may exercise their rights. Data subjects are informed that:

• a. In the case that a request is made by the data subject to exercise the rights provided below, Polti has a period of one month in which to respond.
• b. In the case of multiple requests, this period may be extended by two months.

Rights of the data subjects

Polti undertakes to ensure that data subjects are able to fully exercise their rights, provided that this does not harm a legitimate right or the rights of other data subjects. Data subjects wishing to exercise such rights may do so by writing to the following address: privacy@polti.com.

Polti has appointed the DPO before the guarantor authority who can be contacted at dpo@polti.com.

Data subjects are informed that, in the case of serious breaches or failure to comply by Polti with one of the rights set forth in this notice, data subjects may file a formal complaint with the relevant national Data Protection Authority.

Normative sources

This document has been prepared in accordance with the General Data Protection Regulation (GDPR), which is the EU’s agreed standard for data protection, also implemented in UK law through the Data Protection Act 2018 (DPA 2018).

The transition period for leaving the EU ended on 31 December 2020. The GDPR has been retained in UK law as the UK GDPR and will continue to be read alongside the DPA 2018, with technical amendments to ensure it can operate in UK law.

To read more about the GDPR, please visit ICO Information Commissioner’s Office website – it’s an independent authority that upholds information rights in the public interest.