Source: https://www.vitrum-milano.com/en/informativa-privacy-e-cookie-policy/
Timestamp: 2019-04-19 08:36:48+00:00

Document:
In accordance with the provisions of the Regulation, Vitrum srl will process data based on the principles of legitimacy, fairness, transparency, limited purpose and retention, data minimization, accuracy, integrity and confidentiality, as well as the accountability principle referenced in art. 5 of the Regulation.
Vitrum srl, with registered address in Milan, at no. 16 Via Carlo Ilarione Petitti (hereinafter “Vitrum” or “Controller”) constantly strives to protect the online privacy of its website users. We therefore invite you to carefully read this privacy notice, which contains important information on the protection of personal data, before providing any Personal Data to the Controller.
3.4 to send newsletters and marketing materials regarding services offered by Vitrum directly to the user via e-mail and/or telemarketing calls.
Art. 6.1 c) of the Regulation constitutes legal grounds to process personal data for the purposes stated in section 3.2. Although the provision of personal data for these purposes is optional, lack thereof might make it impossible to access certain services. Please note that, since no personal data is involved, the Controller is free to perform the data processing activities specifically referenced in section 3.3. Art. 6.1 a) of the Regulation constitutes legal grounds to process personal data for the purposes stated in sections 3.4 and 3.5, which are subject to obtaining the users’ consent. This last is optional, and you are free to revoke it at any time without repercussions.
5.3 individuals authorized by the Controller, pursuant to art. 29 of the Regulation, to process personal data as necessary to perform activities strictly pertaining to the provision of services, and who have undertaken to keep the data confidential or are otherwise legally bound to do so.
The updated list of subjects who may process personal data in their capacity of data processors can be obtained from the registered office of Vitrum.
With regard to transferring data to Countries outside the European Economic Area, the Controller hereby gives notice that processing will take place in abidance of the procedures set-forth by the prevailing laws, including those pertaining to user consent, the adoption of Standard Clauses approved by the European Commission, the selection of subjects participating in international programs for the free movement of personal data. (e.g. EU-USA Privacy Shield) or operating in Countries the European Commission deemed able to adequately protect data. Additional information is available upon request from the Controller, at the above listed registered address.
Additional information on the personal data retention period and the criteria used to determine it can be obtained by sending a written request to the Controller, at the address listed in the “Contacts” section of this notice.
In any case, the Controller is entitled to retain your personal data to protect its own interests for the period of time allowed by Italian Law (Civil Code art. 2947).
Pursuant to article 15 and subsequent of the Regulation, data subjects are entitled, at any given time, to ask Vitrum for access to their Personal Data, correction or deletion thereof, oppose its processing, restrict processing in the cases set forth by art. 18 of the Regulation, as well as receive their personal data in a structured, commonly used, legible format for automatic devices in the cases set forth by article 20 of the Regulation.
The Controller reserves the right to entirely or partially change or simply update the content of this privacy statement also pursuant to changes in the applicable regulations. The Controller therefore invites its users to visit this section regularly, read the most recently updated version of the privacy statement and thereby remain aware of the personal data being collected and how they are used by Vitrum.
To exercise the rights mentioned above or for any other type of request, please write to the Controller at the registered address listed above, or send an e-mail to the dedicated contacts at privacy@vitrum-milano.it, preferably indicating “Request to exercise privacy rights” (“Richiesta esercizio diritti privacy”) on the subject line.

References: art. 5

Art. 6
 Art. 6
 art. 29
 art. 2947
 art. 18