privacy policy

INFORMATION PURSUANT TO ART.13 OF EUROPEAN REGULATION 679/2016 AND D.LGS 196/2003 (AS AMENDED)

This information is provided in accordance with EU Regulation No. 2016/679 of the European Parliament and of the Council of 27 April 2016 (known as GDPR – General Data Protection Regulation) regarding the protection of natural persons with respect to the processing of personal data and the free movement of such data (which repeals Directive 95/46/EC – general data protection regulation) as well as in accordance with Legislative Decree No. 196/2003 (as amended).

Therefore, as a result of visiting this website and/or using its services, we inform you that personal data relating to identified or identifiable individuals may be processed in accordance with the above regulations.
The IT systems and software procedures used to operate this website acquire, during their normal operation, certain personal data whose transmission is implicit in the use of internet communication protocols. This is information that is not collected to be associated with identified individuals, but which, by its very nature, could, through processing and association with data held by third parties, allow users to be identified. This category of data includes IP addresses or domain names of computers used by users who connect to the site, the URI (uniform resource identifier) addresses of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file received in response, the numerical code indicating the status of the response from the server, and other parameters related to the user’s operating system and IT environment. These data are used solely to obtain anonymous statistical information on the use of the site and to ensure its correct functioning and are deleted immediately after processing. The data could be used to ascertain responsibility in case of hypothetical cybercrimes against the site.
No personal data is required from the user to browse the site. The user can decide to contact us at any time by filling out the appropriate form at https://www.terraforma-living.it/contatti/. Providing data is optional. However, failure to provide the data deemed mandatory (marked with *) will prevent the ability to use the indicated services and, therefore, the inability to obtain the requested services. The Controller processes personal, identifying data (contact information such as: name, surname, sector of activity, postal address, email, phone number, website) and non-sensitive data provided during the completion of forms on the Controller’s website. The optional, explicit, and voluntary sending of emails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the communication.
We collect personal data processed by third parties, for example: data shared with us on publicly accessible social networks such as Facebook, YouTube, Instagram, Pinterest.
Therefore, pursuant to the above regulations and in relation to the personal data that THE ITALIAN DECKING COMPANY S.P.A. will process, we hereby inform you of the following:

DATA CONTROLLER

The Data Controller is THE ITALIAN DECKING COMPANY S.P.A. (Tax Code and VAT No. 03702400163), headquartered in Urgnano (BG), Via Provinciale n.2763. The Controller can be contacted via certified email at theitaliandeckingcompany@pec.it or regular email at privacy@decodecking.it. The updated list of data processors and persons in charge of processing is kept at the registered office of the Data Controller.

PURPOSE OF PROCESSING

The processing of personal data is limited to the purposes for which it was collected. The processing of acquired data is carried out to allow access to the contents of the site and to execute the requested services. Specifically, your personal data may be processed to respond to your requests for information, to send informational materials (catalogs, brochures, price lists, etc.), to process orders, and to manage commercial relationships (deliveries, invoices, customer service), as well as – with your explicit consent – to send our newsletters and/or promotional material. Please note that if you are already our customer, we may send you commercial communications regarding products and services similar to those you have already used, unless you object. The data will also be processed to comply with obligations imposed on THE ITALIAN DECKING COMPANY S.P.A. by national and EU regulations and to satisfy requests from authorities.

METHODS OF PROCESSING

Such processing is based on the principles of fairness, lawfulness, transparency, and protection of the user’s privacy and rights. The data collected is relevant and limited to what is strictly necessary for the purposes of processing. The above data will be processed for the time necessary to achieve the purposes for which they were collected and stored for as long as THE ITALIAN DECKING COMPANY S.P.A. is subject to retention obligations for purposes provided by law or regulation. Personal data is processed using both electronic and paper tools for the time necessary to achieve the purposes for which they were collected and, in any case, no longer than the legal terms. Specific security measures are in place to prevent data loss, illegal or incorrect use, and unauthorized access. Personal data is recorded and stored on databases located in Italy. Personal data will be processed within the European Union. It is important that the user ensures that their electronic devices are equipped with appropriate software for network data protection, both incoming and outgoing (such as updated antivirus systems), and that the internet service provider has adopted appropriate measures for the security of data transmission over the network. Personal data is not subject to dissemination or any automated decision-making processes, including profiling.

LEGAL BASIS FOR PROCESSING

THE ITALIAN DECKING COMPANY S.P.A. processes personal data lawfully, when one of the following conditions applies: – processing is necessary for the performance of a contract or to respond to user requests (e.g., use of the contact service, management, and response to user communications); – processing is necessary for compliance with a legal obligation incumbent on THE ITALIAN DECKING COMPANY S.P.A.; – processing is based on the explicit consent of the data subject (e.g., sending newsletters).

ACCESS TO DATA AND PARTIES TO WHOM DATA MAY BE DISCLOSED

Data may be made accessible for the purposes mentioned above to employees and collaborators of the Controller and third parties who perform outsourced activities on behalf of the Controller, as well as to competent authorities to enable the Controller to assert, exercise, or defend a right in court and/or for other reasons related to the protection of the rights and freedoms of others. The personal data provided may be disclosed to third parties operating independently as separate Data Controllers. These third parties belong to the following categories: – those responsible for the shipping, delivery, and return of purchased products, i.e., transport and logistics companies (in fulfillment of contractual obligations); – companies providing payment and collection services (banks, insurance companies, and financial institutions in general); – accountants for tax and accounting compliance; – consultants – including legal and IT consultants – or other parties providing related services; – companies, firms, professionals in the execution of contractual or regulatory obligations; – competent authorities for compliance with legal obligations. These parties are obliged to use the data in accordance with legal requirements.

DATA SUBJECT’S RIGHTS

Without prejudice to the limitations provided for by Articles 2-undecies and 2-duodecies of Legislative Decree 196/2003, at any time, the Data Subject, pursuant to Articles 15 et seq. of the GDPR, has the right to obtain access (Art.15), rectification (Art.16), portability (Art.20), and deletion of data (Art.17), limitation (Art.18), and opposition to processing (Art.21). In particular, they have – among others – the right to: – obtain confirmation as to whether or not personal data concerning them is being processed, and, if so, obtain access to such data and its communication in an intelligible form; – obtain the updating, rectification of inaccurate data, or, where interested, the completion of incomplete data, even by providing an additional statement; – obtain information on data portability, i.e., to receive it in a structured, commonly used, and machine-readable format and transmit it to another Data Controller without hindrance; – obtain the deletion of data concerning them without undue delay if the conditions of Article 17 apply; – obtain the limitation of data concerning them if the conditions of Article 18 apply; – object at any time, for reasons related to their particular situation, to the processing of personal data concerning them under Article 6, paragraph 1, letters e) or f), including profiling based on such provisions. If personal data is processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning them for such purposes, including profiling to the extent that it is related to such direct marketing; – withdraw consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal; – file a complaint with the Data Protection Authority if they believe that the processing violates the regulations. These rights can be exercised by sending a written communication to THE ITALIAN DECKING COMPANY S.P.A., Via Provinciale 2763 – 24059 Urgnano (BG), or by email to the Certified Email address theitaliandeckingcompany@pec.it, or by email at privacy@terraforma-living.it.