Source: https://www.ecobeton.com/page/website_legal_page.privacy-policy
Timestamp: 2019-04-19 21:11:31+00:00

Document:
The owner treats personal, identifying and non-sensitive data (in particular, first name, surname, fiscal code, VAT, email, telephone number – hereinafter, "personal data" or "data") communicated by you during registration to the website of the owner and/or when subscribing to the newsletter service offered by the owner.
to exercise the rights of the proprietor, for example the right of defence in court.
send you by email newsletters, commercial communications and/or advertising material on products or services offered by the owner.
We point out that if you are already our customer, we can send you commercial communications related to services and products of the owner similar to those you have already used, save your disagreement.
The processing of your personal data is carried out by means of the operations indicated in art. 4 No. 2) GDPR, namely: collection, registration, organization, preservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your personal information is subject to both paper and electronic and/or automated processing.
The owner will treat the personal data for the time necessary to fulfill the above purposes and in any case for no more than 10 years from the termination of the relationship for the purposes of service and for no more than 2 years from the collection of data for Marketing purposes.
to companies of the Ecobeton group of which the holder is a member (for example, for technical support activities and/or consultancy in case the client's project is abroad, for the storage of personal data, etc.) or to third parties (for example, provider for management and maintenance of the website, suppliers, credit institutions, professional firms, etc.) that carry out outsourcing activities on behalf of the owner, in their capacity as external managers of the treatment.
Without your express consent (art. 6 b) and c) GDPR, the holder may disclose your data for the purposes set out in art. 2. (a) supervisory bodies, judicial authorities and all other parties to whom the communication is mandatory by law for the purpose of carrying out the said purposes. Your data will not be disseminated.
The management and preservation of personal data will be on servers located within the European Union of the owner and/or third-party companies entrusted and duly appointed as responsible for the processing. Currently the servers are located in Italy. The data will not be subject to transfer outside the European Union. It is in any case understood that the holder, if necessary, will have the right to move the location of the servers in Italy and/or the European Union and/or non-EU countries. In that case, the holder shall ensure that the transfer of the extra-EU data will be made in accordance with the applicable legal provisions by stipulating, if necessary, agreements guaranteeing an adequate level of protection and/or adopting the clauses Standard contractual provisions of the European Commission.
The conferral of data for the purposes set out in art. 2. A) is mandatory. In their absence, we will not be able to guarantee neither the registration to the site nor the services of art. 2. A).
The conferral of data for the purposes set out in art. 2. B) is optional instead. You can then decide not to confer any data or to deny subsequently the possibility of processing already provided information: In this case, you will not receive newsletters, commercial communications and advertising material related to the services offered by the owner. In any case you will continue to be entitled to the services referred to in art. 2. A).
to oppose, in whole or in part: a) for legitimate reasons for the processing of personal data concerning you, although relevant to the purpose of the collection; b) The processing of personal data concerning you for the purposes of sending advertising material or direct sales or for the completion of market research or commercial communication, through the use of automated call systems without the intervention of a operator by email and/or through traditional marketing methods by telephone and/or paper mail. It is stated that the right of opposition of the person concerned, as set out in point B above, for direct marketing purposes by means of automated methods extends to the traditional ones and that, however, remains the possibility for the person concerned to exercise The right of opposition even in part. Therefore, the person concerned may decide to receive only communications by traditional means or only automated communications or none of the two types of communication.
Where applicable, you also have the rights of the Artt. 16-21 GDPR (right of adjustment, right to oblivion, right of limitation of treatment, right to data portability, right of opposition), and the right to claim to the guarantor Authority.
The updated list of persons responsible for processing is kept at the premises of the data controller.
This statement may vary. It is therefore advisable to check this information regularly and to refer to the most updated version.

References: art. 4
 art. 2
 art. 2
 art. 2
 art. 2
 art. 2