INFORMATION ABOUT PROCESSING OF PERSONAL DATA

User's personal data are used by CREA 3D S.R.L., holder for treatment, in respect of the principles of personal data protection envisaged in General Data Protection Regulation 2016/679 and by the current national regulation.

SOURCE OF PERSONAL DATA

Personal data are collected by CREA 3D S.R.L. recording data:

• directly collected from the data subject, at the time of the initial contact or in subsequent communications
• provided by third parties

TERMS AND PURPOSES OF DATA PROCESSING

1. We wish to inform you that your data will be processed with the support of following means:

• Mixed - electronic and paper

for the following purposes:

• fulfilment of legal obligations related to commercial relations
• customers general analysis
• approval of balance
• supply
• promotional activities
• elaboration, printing, enveloping and shipment of the invoices
• distribution of the service
• litigation management (contracts, orders, arrivals, invoices)
• personnel management
• customer care management (contracts, orders, shipments, invoices)
• sending of courtesy communications and/or promotional/informative material
• marketing (analysis and market researches)
• goods and services supply through mailing list
• profiling for commercial purposes
• scheduling of activities (work planning and monitoring)
• promotion of publishing products and marketing
• contractual relationships with customers/suppliers
• market researches, statistical studies and checks of customer satisfaction level concerning the products
• customers' satisfaction surveys
• services ensuring protection of consumers and users
• service of payments acceptance
• electronic payment instruments (credit cards and electronic money)
• sale by mail or by telephone

In particular, for the following purposes, user's data will be processed only on specific acceptance consent:

• profiling activity

LEGAL BASIS

2. Legal basis on which is based the processing of common data, according to Art. 6 of General Data Protection Regulation, are:

• Contract;
• Consent;

Legal basis on which is based the processing of special categories of personal data, according to Art. 9 of General Data Protection Regulation, are:

• Contract;
• Consent;

The company treats user's optional data on the basis of the consent, namely by the explicit approval of the Privacy Policy and according to the methods and purposes described below.

CATEGORIES OF RECIPIENTS

33. Maintaining the importance of legal and contractual obligations, all information collected and processed may be communicated to the following categories of recipients, exclusively for the above purposes:

• Banks and other credit institutions;
• Call Center for customer support;
• Consultants and freelancers, as well as partners;
• Authorised persons;
• External Responsible;
• Internal Responsible;
• Companies and businesses;

CATEGORIES OF PERSONAL DATA

4. In accordance with article 14 of General Data Protection Regulation, when the data have not been obtained from the data subject, following categories of personal data being used:

• Fiscal code and others personal identification numbers (health cards);
• Identifying data (name or business name, that is name and surname of natural persons, office address, telephone, fax, e-mail, fiscal data, etc.);
• Data related to economic and commercial activity;
• Data on behaviour (creation of user profiles, consumers, taxpayers, etc.; personality and characteristics profiles);
• Name, address or other relevant particulars (name, surname, age, gender, place and date of birth, private address, work address);
• Personal;

STORAGE PERIOD

The storage period of data is: data will be processed for as long as it is needed to carry out the business relation and for the ten years from the date of acquisition of the same data.

SUBJECT'S RIGHTS

5. Pursuant to and in accordance with the European Regulation 679/2016 (GDPR) and of existing national legislation, the subjects is entitled to the exercise of the following rights, according to the ways and limits set by the law in force:

• request the confirmation about the existence of his/her personal information (right of access - art. 15 of Regulation 679/2016);
• know their source;
• receive an intelligible communication;
• receive a communicating stating the logic, modalities and purposes of this processing;
• request an update, rectification, integration, cancellation and transformation into anonymous form, blocking of data processed in violation of law, including any data considered to be not necessary to the purposes for which they have been gathered (right of correction and deletion - art. 16 and 17 of Regulation 679/2016);
• right of limitation and/or objection to the processing of his/her data (art. 18 of Regulation 679/2016);
• revocation right;
• right to data portability (art. 20 of Regulation 679/2016);
• on cases of consent for the processing, receive its own data provided by the holder, into a structured and machine-readable format and into a format commonly used by an electronic device;
• the right to lodge a complaint with a supervisory authority (subjects' right of access - art. 15 of Regulation 679/2016).

6. The holder of your personal data is CREA 3D S.R.L., VAT 07957380723, Fiscal Code 07957380723

• Email: bart.paparella@crea3d.com
• Telephone: 080 8806659

PAPARELLA BARTOLOMEO, Fiscal code PPRBTL89T18L109Q

• Email: bart.paparella@crea3d.com