Information for sending communications

INFORMATION FOR SENDING COMMUNICATIONS ON NEW PRODUCTS ON PERSONAL DATA PROTECTION PURSUANT TO ART. 13 REGULATION (EU) 2016/679

Pursuant to art. 13 of Regulation (EU) 2016/679, Zanasi Group (p.i. 04166780363), with registered office in via Farina 31, Maranello MO, 41053, as Data Controller, informs users of the processing of personal data resulting from the sending of emails regarding the release of new products.

Data Controller

The data controller is Zanasi Group (p.i. 04166780363), with registered office in via Farina 31, Maranello MO, 41053, pec zanasigroup@pec.zanasigroup.com

Data Protection Officer

The data controller has appointed a DPO, who can be contacted at dpo@zanasigroup.it

Data subjects

Customers of Zanasi Group to be informed about the marketing of new products by Zanasi Group.

Data processed

The data processed are:

  • personal data (name; surname);
  • contact details (email address);
  • data relating to products already purchased;
  • data relating to the customer’s interests in relation to the products offered.

Purpose of the processing

The purpose of the processing is to receive updates on new products offered by Zanasi Group.

Nature of the provision and legal basis of the processing

The legal basis of the processing can be found in art. 6, paragraph 1, letter f), GDPR: processing is necessary for the pursuit of the legitimate interest of the data controller, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail. The legitimate interest of the data controller lies in informing its customers of the presence and release on the market of new products or services. Failure to provide the data will make it impossible for the customer to be informed about the news offered by Zanasi Group by sending commercial communications.
The balance between the legitimate interest of the data controller and the rights of the data subject is available upon request.

Processing methods

The data processing is carried out through computer procedures or telematic means and paper supports by internal or external subjects specifically appointed, authorized and committed to confidentiality. The data is processed and stored with tools suitable for guaranteeing its security, integrity and confidentiality through the adoption of adequate measures as required by the legislation.

Retention periods

Personal data will be retained in a form that allows the identification of the same for a period of time not exceeding the achievement of the purposes for which the data were collected; they will therefore be retained until the existence of the existing contractual relationship and no later than 10 years from the termination of the contract.

Communication, dissemination, transfer

The data collected will not be disseminated, sold or exchanged with third parties without the express consent of the interested party, except for any communications to authorized third parties committed to confidentiality or in the case appointed as data controllers pursuant to art. 28 of Regulation (EU) 2016/679. The complete and updated list of data controllers is available, upon request, through the methods indicated in this information notice. The data may be communicated to the competent authorities, according to the terms of the law.
The transfer of data outside the European Union is not envisaged.

Rights of interested parties

At any time, interested parties have the right to access their personal data, to request its rectification, updating and its deletion. It is also possible to oppose the processing and request its limitation.
The rights can be exercised by sending:

Furthermore, in the event that it is believed that the processing has been carried out in violation of the legislation on the protection of personal data, the right to lodge a complaint with the Personal Data Protection Authority, Piazza Venezia n. 11 – 00187 Rome is recognized.