PRIVACY POLICY

PRIVACY POLICY – WEB GENERAL                                            

Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)

Information to be provided where personal data are collected from the data subject

 

According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you the due information concerning the processing of collected personal data. This notice is not to be considered valid for other websites attainable trough links and data processor shall not be held responsible for third parties web pages. This notice is provided pursuant to art. 13 of the Regulation (EU) 2016/679 (General Data Protection Regulation).

 

DATA CONTROLLER

pursuant to art. 4 and 24 of the Reg. (EU) 2016/679, is AROMATAGROUP S.R.L. – registered office in Via Carolina Romani 35, 20091 Bresso (MI), represented by the Chief Executive.

Contacts: e-mail info@aromatagroup.com; Tel. +39 02 6650 1860 / 1970

PURPOSES AND LAWFULNESS OF THE PROCESSING

 

Purpose of processing Legal Basis Data retention Data conferral
A)       Website browsing

 

Legitimate interest

art. 6 par. 1 lett. f)

 

Activities strictly related to site operations and to platform browsing service provision

Session

 

Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms

 

B)      Contact request – Information request (e.g. quote requests)

 

pre-contractual measure

art. 6 par. 1 lett. b)

1 year Necessary for the legitimate interest of data controller with due regard to user’s rights and fundamental freedoms

 

C) Marketing: commercial / promotional information through e-mail / newsletters and telephone calls with the operator.

 

Consent

art. 6 par. 1 lett. a)

the data subject has given his consent to the processing of his personal data for one or more specific purposes

 

Until withdrawal of consent The provision of data is optional

 

The consent given may be withdraw in any moment sending an e-mail to info@aromatagroup.it

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA

Personal data provided by you may be communicated to recipients who will act as Processors (art. 28 of the Reg. EU 2016/679) and/or persons acting under the authority of the Controller and the Processor (art.29 of the Reg. UE 2016/679) for the purposes pointed ahead. Precisely, your data may be communicated to recipients part of the following categories:

  • subjects providing services for the management of the information system used by AROMATAGROUP S.R.L. and telecommunications networks:
  • freelancers, studios or companies in the context of assistance and consultancy relationships
  • Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request;

 

DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION

Personal data provided won’t be transferred to a third Country outside the European Union.

 DATA SUBJECT’S RIGHTS

You may freely exercise your rights at any time under Reg. EU 2016/679 –GDPR, Sections15, 16, 17, 18, 19, 20, 21 by contacting the Data Controller –  AROMATAGROUP S.R.L. sending an email to info@aromatagroup.com.

You have the right, at any time, to obtain confirmation from the Data Controller as to whether or not personal data concerning you are being processed, request their rectification or erasure.

Moreover You have the right, at any time, to oppose to personal data processing (also to profiling) without prejudice to lawfulness of processing.

In order to no longer receive commercial communications (e-mail), it will be sufficient to write an e-mail to the address info@aromatagroup.com with the subject “cancellation from automated” at any time or use our automatic cancellation systems provided for e-mail only. To stop receiving traditional direct marketing communications (telephone calls with an operator) it will be sufficient to write an e-mail to the address info@aromatagroup.com with the subject “traditional cancellation” at any time

Without prejudice to any other administrative or judicial remedy, in case you consider your data processing in contrast with Reg. UE 2016/679, pursuant to article 15 lett. f) of Reg. UE 2016/679, you have the right to lodge a complaint with a supervisory authority (https://www.garanteprivacy.it) and, pursuant to article 6 paragraph no. 1, lett. a) you have the right to revoke your expressed consent at any time.

Exercising your right to data portability, the Data Controller may provide your personal data in a structured, commonly used and machine-readable format subject to the provisions set forth in paragraphs 3 and 4 of art. 20 of Regulation EU 2016/679.

Informative amendments: Data processor retains the right to modify, update, add or remove some parts of this informative at any time.

Date of review: 27 may 2019