Information on the processing of personal data

European Data Protection Regulations

PRIVACY POLICY as per Art. 13 Italian D.LGS. no. 196 of 30.jun.2003 and Art. 13 REG. UE 2016/679 of 27.apr.2016

COMPANY REGISTERED NAME Blacks S.r.l., with registered office in Via Via Vittori, 107 - 48018 Faenza (RA) VAT. 02419940396 (hereinafter, "Data Controller"), as data controller, informs you in accordance to the European Data Protection Regulations n. 2016/679 (“GDPR”) that your data will be collected and processed for the following purposes:

1. OBJECT OF THE DATA COLLECTION

The Data Controller will process the data that fall within the definitions set forth in art. 4 (1) of the Regulations, collected during the execution of the mandate, including, but not limited to, name, surname, mobile phone number, e-mail address and, in general, contact details of your referents, overall as: "Personal Data".

2. PURPOSES

Your personal data are processed:

A) without your express consent exart. 6 lett. b), c) GDPR), for the following purposes:

• onclude contracts for the services of the Data Controller;
• fulfill the pre-contractual, contractual and tax obligations deriving from relations with you in existence;
• comply with legal obligations or orders of the Authority;
• exercise the rights and legitimate interests of the Data Controller (for example the right to defense in Court).

B) Subject to your specific consent (Article 7 GDPR), for the following marketing purposes:

• send you via e-mail, mail and / or messaging services and / or telephone contacts, newsletters, commercial communications and / or advertising material on products or services offered by the Data Controller and recognition of the degree of satisfaction with the quality of services;
• send you via e-mail, ordinary mail and / or messaging services and / or telephone contacts commercial communications and / or promotions of third parties.

3. PROCESSING MODALITIES

The processing of your personal data is carried out by means of the operations indicated in art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing. Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes sub art. 2 A) and no later than 2 years from the collection of data for the purposes sub art. 2 B).

4. ACCESS TO DATA

Your data may be made accessible for the purposes referred to in art. 2.A) and 2.B):

• to the employees and collaborators of the Data Controller, in their capacity as internal data processors or appointed by them for the performance of specific processing activities pursuant to Article 28, No. 4 GDPR;
• to third parties (financial institutes, professional firms, consultants) who carry out activities on behalf of the Data Controller, in their capacity as external data controllers.

5. DATA COMMUNICATION

Without the need for express consent (Article 6 letter b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2.A) to those subjects whom the communication is mandatory by law or for the accomplishment of such purposes.

6. DATA TRANSFER

Personal data are stored on servers located in Germany, within the European Union.

In case of transfer of data to countries outside the EU, the Data Controller ensures from now on that data will be transferred in accordance with the provisions of Chapter V GDPR.

7. DATA COLLECTION AND CONSEQUENCES OF THE REFUSAL TO REPLY

The collection of data for the purposes referred to in art. 2.A) is mandatory. In their absence, we can not guarantee the services of the art. 2.A).

The collection of data for the purposes referred to in art. 2.B) is optional. In case the requested data are not granted, you will not be able to receive newsletters, commercial communications and advertising material concerning the services offered by the Data Controller. However, you will continue to be entitled to the services referred to in art. 2.A).

8. RIGHTS OF THE DATA SUBJECT

In your capacity as an interested party, you have can exercise the rights referred to in art. 14 n.2 and 15 GDPR and precisely the rights of:

1. obtain confirmation of the processing of personal data concerning you and in this case to obtain access to such personal data and to the following information: purpose of the processing; personal data categories; recipients to whom they have been or will be communicated; retention period or criteria used to determine it; all information available on their origin; the existence of an automated decision-making process.
2. revoke the consent given pursuant to art. 7 n. 3) GDPR
3. propose a complaint to a supervisory authority according to art. 14 lett. e) and 77 GDPR
4. obtain:
• the correction of inaccurate personal data according to art. 16 GDPR;
• data cancellation according to art. 17 GDPR;
• the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible o involves a use of means manifestly disproportionate to the protected right;
• the limitation of treatment according to art. 18 GDPR;
• the portability of data according to art. 20 GDPR.
5. to resist, in whole or in part, according to art. 21 GDPR:
• for legitimate reasons, to the processing of your personal data, even if pertinent to the purpose of the collection;
• to the processing of your personal data for the purpose of sending advertising or direct sales material or for market research or commercial communication, through the use of automated call systems without the intervention of an operator by and -mail and / or through traditional marketing methods by telephone and / or ordinary mail.

It should be noted that the interested party right to resist, set out in point b) above, for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility remains for the data subject to exercise the right to resist even partially. Therefore, the interested party can decide to receive only communications using traditional methods or only automated communications or none of the two types of communication.

9. TERMS TO EXERCISE THE RIGHTS

You can exercise your rights at any time by writing:

• a registered letter to Blacks Srl - with operational headquarters in Via Via Vittori, 107 - 48018 Faenza (RA);
• an e-mail to the following address info@blacks-composites.it;

10. DATA CONTROLLER, RESPONSIBLE AND DELEGATES

The Data Controller is Blacks Srl with registered office in Via Via Vittori, 107 - 48018 Faenza (RA).

The updated list of data processors and delegates for processing is kept at the registered office of the Data Controller.