Data Subject Rights Procedure

The General Data Protection Regulation (EU Regulation 2016/679) (hereinafter also “Regulation” or “GDPR”) grants interested parties the exercise of the following rights towards the Data Controller:

  • Right of access art. 15 GDPR: in order to request confirmation as to whether or not personal data is being processed;
  • Right of rectification art. 16 GDPR: to request that the data provided be rectified or integrated, if inaccurate;
  • Right to erasure art. 17 GDPR: to request that the data processed be erased (for example, if they are no longer necessary for the purposes for which they were collected; or in the event of withdrawal of consent; or in the event that the processing is unlawful);
  • Right to restriction of processing art. 18 GDPR: so that the data processed by the Data Controller are marked in order to limit their processing in the future;
  • Right to data portability art. 20 GDPR: in order to obtain the receipt of personal data, or the transmission of data to another Data Controller, in a structured, commonly used and machine-readable format;
  • Right to object art. 21 GDPR: to object at any time to the processing of data, unless there are legitimate reasons to proceed with the processing that prevail (for example for the exercise or defense in court).

 

Categories of Interested Parties

For the purposes of this procedure, the categories of Interested Parties, whose data are processed by Zanasi Group s.r.l., are grouped below by area of ​​expertise, as identified in the Register of Treatments drawn up pursuant to art. 30 of the GDPR:

  • Interested parties attributable to the HR Area: candidates, employees, family members of employees and former employees of Zanasi Group s.r.l., as well as freelancers who perform their activities for the Company and employees of third parties who provide services to the Company;
  • Interested parties attributable to the Administration Area: customers, suppliers, professional firms, consultants, in relation to the management of contracts stipulated with them and the related completion of all activities connected, instrumental and/or complementary to the management of the relationship;
  • Other Interested Parties: web users as well as all individuals, external to Zanasi Group s.r.l., and in general any natural person whose personal data Zanasi Group s.r.l. is the owner, who are not attributable to the previous categories

 

Exercise of the right by the interested party and receipt of the request by Zanasi Group s.r.l.

  • The exercise of the rights is free of charge.
  • The exercise of the rights is subject to prior identification of the interested party, who must attach a copy of a valid identification document to the request.
  • It can also be presented by a delegate with a specific mandate/delegation.
  • To exercise the rights, a request can be sent via PEC to the address zanasigroup@pec.zanasigroup.com by registered letter with return receipt to Zanasi Group s.r.l. via Farina 31, Maranello MO, 41053, or contact the DPO at dpo@zanasigroup.it
  • Following receipt of the request, Zanasi Group s.r.l. will verify the identity of the interested party as well as the request submitted.
  • Within 30 days of the request (extendable to 60 days in cases of complexity) the Data Controller will respond to the request submitted by the interested party.