Information provided according to art.13 of European Regulation 679/2016 (GDPR - General Data Protection Regulation) concerning processing of the following personal data

Data Controller. The Data Controller is Gessi S.p.A. - Parco Gessi 13037 Serravalle Sesia (VC).

Purpose and legal basis. Please be advised that the data will be processed for the following purposes:

Purpose Legal basis
legitimate interests
Storage period or criteria
Administrative services (art.6 1.b European Regulation 679/2016) Performance of a contract or of pre-contractual activities For a length of time not exceeding the achievement of contractual purposes and of the obligations according to the relevant legal provisions

The said treatment shall always be based on principles of fairness, lawfulness, transparency and protection of the confidentiality and rights of the data subjects.

Mandatory or optional nature of data transfer.  Please be advised that, taking into account the purposes of processing as outlined above, data transfer is mandatory and failure to transfer them, or any partial or incorrect transfer, could make it impossible to finalise the contract.

Recipients or Groups of recipients. The personal data may be processed exclusively by the processing Controller or persons authorised by the latter.

The data in question may be transferred to the following groups of third parties:

Groups of third parties to whom the or parts thereof may be transferred
Consultants and professionals, also as partners in a firm
Public bodies (information about legal provisions to entities in charge: Inland Revenue Service, etc..)

The data shall not be disclosed.

Lodging a complaint with the Supervisory Authority. The data subject is entitled to lodge a complaint with the Supervisory Authority (for Italy: Garante per la protezione dei dati personali

Rights of the data subjects. It is possible at any time, to exercise the rights to access personal data, rectify or erase the latter, restrict processing, object thereto or to processing portability according to articles 15-20 of European Regulation 679/2016 by sending an e-mail to the following address:

Existence of an automated decision-making process. Processing does not involve any automated decision-making process.

Transfer of data to a third country or to an international organisation. The data Controller shall not transfer any personal data to a third country or international organisation.