PERSONAL DATA PROCESSING STATEMENT (Reg. EU/2016/679)

Who is the Data Controller?

Lucart S.p.A., Via Ciarpi, 77 – 55016, Porcari (LU)- Italy, VAT and Tax Code: 00145780466

What are personal data?

All the information linked or can be linked to a natural person.

What common data do we ask you for?

Name, Surname, Title, Company, Address, Country, Phone and E-mail.

What special data do we ask you for?

None.

Why do we process the data?

Responding to requests from data subjects received via online forms about products or initiatives of the Controller, including of a commercial nature.

On what legal basis do we process data?

Art. 6, par. 1, lett. a) GDPR: Data Subject’s consent.

For how long do we process your data?

24 months from the collection of consent, unless you revoke it or oppose it, which is always possible.
Data may be retained for longer to enable the Data Controller or a third party to defend themselves in court.
The data you have provided will be destroyed or anonymised after the aforementioned retention period has expired.

Why are you giving your data to the Data Controller?

The requested data is provided voluntarily by the data subject and is an essential requirement for performing the activity referred to in the stated purposes. If not provided, the Data Controller will not be able to provide the service.

To whom will we disclose your data?

The data are processed by the Data Controller by third parties appointed as Data Processors under Art. 28 GDPR carrying out specific activities (e.g. sending correspondence, event organisers, media relations companies, consultancy firms, IT service companies).
The data are communicated to external third parties acting as autonomous Data Controllers (e.g. authorities and supervisory and control bodies and, in general, public or private organisations entitled to request the data, law firms).
The complete and up-to-date list of recipients may be requested from the Data Controller at the addresses indicated.

Who is authorised to process your data?

The data are processed by employees of the company for performing the activities described above and who are authorised to process them, have received appropriate operating instructions and are committed to confidentiality.

Do we transfer your data outside the EU?

Data are not transferred abroad to non-European countries.

Who is the Data Protection Officer (DPO)?

The Controller has appointed a Data Protection Officer ("DPO") under Article 37 et seq. of the GDPR. You can contact the DPO by e-mail at: dpo@lucartgroup.com

What are your rights and how can you exercise them?

As a data subject, you may contact the Data Controller by sending an email to privacy@lucartgroup.com, to ask for access to, or rectification or erasure of, your personal data. You are also entitled to restrict the processing of your data in the cases referred to in Article 18 of the GDPR, and to object to the processing in case of legitimate interests of the Data Controller.
You are entitled to lodge a complaint with the competent supervisory authority of the Member State where you reside or work, or of the Member State where the alleged breach occurred.
You are entitled to withdraw your consent at any time about data processed for marketing purposes and to object to the processing of data for such purposes. You can declare a preference to be contacted for the above purposes through conventional means and object to receiving communications only through automated means.

For more information on your rights, please visit www.garanteprivacy.it.