Privacy Policy

INFORMATION FOR THE PROCESSING OF CUSTOMERS' PERSONAL DATA PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679 (GDPR)

BARAZZONI S.P.A., with registered office in Via Cesare Battisti, 46, 28045, Invorio, NO, P. IVA 00540880036, Cod. Fisc. 00540880036, in the person of its legal representative pro tempore, hereinafter also only "Barazzoni" or "Data Controller", in its capacity as Data Controller pursuant to EU Regulation 2016/679 - General Data Protection Regulation (GDPR), hereinafter also only "GDPR", acknowledges the importance of the protection of personal data and considers their protection one of the main objectives of its activity.

We hereby provide the necessary information regarding the processing of personal data to customers who are natural persons/individual companies and to natural persons acting on behalf of customers who are legal persons, pursuant to Article 13, GDPR. Therefore, before providing any personal data, Barazzoni invites you to read this information notice carefully as it contains important information on the protection of personal data and on the security measures adopted to guarantee their confidentiality in full compliance with the regulations in force.

Barazzoni informs you that the processing of your personal data will be carried out using manual, IT and/or telematic instruments and will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and storage, minimisation of data, accuracy, integrity and confidentiality and protection of the rights and freedoms of the person concerned.

Your personal data will therefore be processed with logic strictly related to the purposes indicated below, in accordance with the provisions of the GDPR and, in any case, in such a way as to guarantee the security and confidentiality of the data.

Foreword

"GDPR" means EU Regulation 679/2016 of the European Parliament and of the Council of 27/04/2016, applicable from 25/05/2018, on the protection of natural persons with regard to the processing of personal data.

"Personal data" means any information relating to an identified or identifiable natural person ("data subject"), with particular reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more characteristic elements of that person's physical, physiological, mental, economic, cultural or social identity.

'Particular data' means personal data revealing racial or ethnic origin, religious or philosophical beliefs, or tradeXmembership, as well as genetic and biometric data, data concerning a person's health or sex life or sexual orientation.

Judicial data' shall mean personal data relating to criminal convictions and offences or related security measures.

Processing' shall mean any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

1. Data Controller, Data Processors, Persons authorised to process data

Pursuant to the GDPR, the Data Controller is: Barazzoni S.p.A., with registered office in Via Cesare Battisti, 46, 28045, Invorio, NO, as defined above.

The updated list of Data Processors and persons authorised to process data is kept at the registered office of the Data Controller.

For any information concerning the processing of personal data carried out by the Data Controller, please write to the following e-mail address: privacy@barazzoni.it

2. Purpose of the Processing

The Data Controller processes the personal and identification data that you voluntarily provide (verbally, through business cards, requests for information, e-mails, delivery of documents, through the Data Controller's website, etc.), including but not limited to: name, surname, place and date of birth, address of residence and domicile, place of work, company name, VAT number, tax code, landline and/or mobile telephone number, fax number, e-mail address, PEC address, bank details, etc.

The Data Controller will process the aforementioned data in accordance with the GDPR, assuming that they refer to you or to third parties who have expressly authorised you to provide them on the basis of a suitable legal basis legitimising the processing of the data in question. With respect to these hypotheses, you act as autonomous data controller, assuming all the obligations and responsibilities laid down by law. In this regard, you grant the widest possible indemnity in respect of any dispute, claim, request for compensation for damage caused by processing, etc., that may be received by the Controller from third parties whose personal data have been processed at your request and/or in execution of a contract.

3. Purpose and legal basis of processing, nature of provision and refusal

Your personal data will be processed
A) without your express consent for the following purposes:

1. concluding contracts concerning the Controller's products; fulfilling pre-contractual and contractual obligations;

2. fulfilment of legal, regulatory and fiscal obligations arising from existing relations with you or required by an order of the Authority;

3. archiving;

4. management of disputes, controversies and claims, in and/or out of court or whenever the jurisdictional Authorities exercise their jurisdictional functions.

B) Only with your specific consent for the following purposes:

1. direct marketing to respond to your needs and to provide you with commercial and promotional offers also in line with your preferences; Barazzoni may process your contact data for marketing and advertising communication purposes, aimed at informing you about promotional offers and/or sales of Barazzoni products, carried out through automated contact methods (e-mail, mms, sms and other mass messaging tools, etc.), ordinary mail, telephone calls with operator, if you give us your specific consent.

For the purposes indicated in paragraph A) no. 1 of this Article 3 of this information notice, the legal basis of the processing, which attests to its lawfulness, is that provided for in Article 6(1)(b) of the GDPR, i.e. "the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the data subject's request".

The processing carried out for the purposes set out in paragraph A) nos. 2 and 3 of this Article 3 is based on legal obligations to which the Data Controller is subject (Art. 6(1)(c) of the GDPR).

Finally, for the purposes stated in number 4 of paragraph A) of this Article 3, the processing is necessary for the pursuit of the legitimate interest of the Controller to protect its rights arising from the contract (Art. 6(1)(f) of the GDPR).

On the other hand, the processing of your personal data for the purposes of direct marketing referred to in paragraph B), number 1, of this Article 3 may only take place on the basis of your specific and separate consent (Art. 6(1)(a) and Art. 7 of the GDPR) given in writing at the foot of this notice.

We would also like to point out that if you are already a customer, we may send you commercial communications relating to the Controller's products similar to those you have already used, unless you disagree.

The provision of the aforementioned data for the purposes set out in numbers 1, 2, 3 and 4 of paragraph A) of this Article 3 is mandatory for the fulfilment of contractual and/or legal obligations. Failure to provide, partial or inexact provision of the data and/or express refusal to process them will make it impossible for the Controller to enter into contractual relations or fulfil contractual obligations undertaken or a legal obligation to which the Controller is subject or requests by the competent Authorities.

On the other hand, the provision of data subject to your specific consent as set forth in Article 3 paragraph B) of this information notice is optional in order to receive periodic communications and publications of a commercial and promotional nature, without this preventing the performance of the contractual relationship. The provision of data for the latter purpose is therefore optional, with the consequence that you may decide not to provide your consent, or to revoke it at any time, with the specification that failure to provide it will not have any consequences on the contractual relationship.

The personal data of minors under 16 years of age will not be processed by the Data Controller, except with the prior consent of the holder of parental responsibility.

4. Place and methods of processing, storage times

Data processing takes place at the aforementioned premises of the Data Controller and at identified third parties.

The collection and processing of your personal data by the Controller is carried out in compliance with the principles of lawfulness, correctness and transparency and in such a way as to guarantee adequate security, including protection, by means of appropriate technical and organisational measures, from unauthorised or unlawful processing and from accidental loss, destruction or damage.

The data collected will be processed by means of electronic or in any case automated, computerised and telematic instruments, or by means of paper instruments, with logic strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to guarantee their security.

Barazzoni will keep your personal data only for the time necessary to achieve the purposes for which they were collected or for any other legitimate related purpose, without prejudice to the need to keep the data to meet the obligations provided for by the regulations in force even after the cessation of the processing operations and in any case no longer than 10 years from the termination of the contractual relationship or even beyond that period, until the time allowed by Italian law to protect the rights and interests of the Owner.

The Controller limits access to your personal data only to those who need to use them for relevant purposes.

Your personal data that is no longer required, or for which there is no longer a legal basis for its storage, is irreversibly anonymised (and thus can be stored) or securely destroyed, unless it is required to be stored for other, different purposes as expressly provided for by law.

Further information on the period of retention of personal data and the criteria used to determine this period may be requested by writing to the e-mail address given above.

5. Categories of recipients of personal data

Your personal data collected and processed may be shared, exclusively for the purposes specified above, with the following categories of recipients

a) persons authorised by Barazzoni to process personal data, who have committed themselves to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees and collaborators of Barazzoni);

b) persons, companies, consultants or other third parties, such as, by way of example, professional firms, tax, legal, IT and labour consultants, companies that maintain the IT equipment and the services of the Barazzoni website, banking institutions, companies granting consumer credit and services connected to the contractual relationship, insurance companies, professionals carrying out auditing and certification of financial statements, etc, each for its specific field of competence, with whom Barazzoni has relations necessary to carry out its activity or by law, to whom a specific mandate has been entrusted and for the time necessary to achieve the purposes for which the data were collected, who act, where necessary, as data processors of Barazzoni;

c) Judicial or supervisory authorities, administrations, public bodies and organisations, in the exercise of their functions, when required by law.

All the subjects belonging to the categories to which the data may be communicated will use them in their capacity as persons authorised to process personal data under the direct authority of the Data Controller, or as "Data Processors" specifically appointed and instructed by Barazzoni in its capacity as Data Controller, or as autonomous "Data Controllers", authorised to access the data by virtue of provisions of law, regulations and rules or for the execution of a contract.

In any case, your data will not be disseminated.

6. Transfer of data outside the EU

Your personal data are stored on servers located at the Data Controller's premises within the European Union. In any case, it is understood that the Data Controller may also move the servers outside the EU if

necessary. In this case, the Data Controller assures as of now that the transfer of data to non-EU countries will take place in compliance with the applicable legal provisions, subject to the stipulation of standard contractual clauses as provided for by the European Commission.

7. Automated decision-making process

For the pursuit of the processing purposes described above, no decision is made solely on the basis of automated processing that produces legal effects concerning you or similarly significantly affects you.

8. Rights of the data subject

We inform you that, in accordance with the provisions of the GDPR, you as the data subject may exercise the following rights:

(a) right of access: to obtain confirmation as to whether or not personal data relating to you are being processed and, if so, to receive information relating, in particular, to: the purposes of the processing, the categories of personal data processed and the period of storage, the recipients to whom the data may be disclosed (Article 15, GDPR);

b) right to rectification - to obtain, without undue delay, the rectification of inaccurate personal data concerning you and the integration of incomplete personal data (Article 16, GDPR)

c) right to erasure - to obtain, without undue delay, the erasure of personal data concerning you, in the cases provided for by the GDPR (Article 17, GDPR)

d) right to restriction - obtain from the Controller the restriction of processing, in the cases provided for by the GDPR (Article 18, GDPR);

e) right to portability: to receive, in a structured, commonly used and machine-readable format, the personal data concerning you provided to the Controller, as well as to obtain that they be transmitted to another controller without hindrance, in the cases provided for by the GDPR (Article 20, GDPR)

f) right to object: to object to the processing of personal data concerning you, unless there are legitimate grounds for the Controller to continue the processing (Article 21, GDPR);

(g) if the processing is based on consent, pursuant to Article 7, GDPR, right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;

h) right to lodge a complaint with the supervisory authority: lodge a complaint with the Supervisory Authority for the Protection of Personal Data, based in Piazza di Montecitorio, 121 - 00186 Rome (RM).

9. Procedures for exercising rights

You may exercise your rights at any time by sending
- a registered letter to: Barazzoni S.p.A., with registered office in Via Cesare Battisti, 46, 28045, Invorio, NO - an e-mail to the address: privacy@barazzoni.it
10. Changes

This policy is in force as of 25/05/2018. The Owner reserves the right to modify or simply update its content, in part or in full, also due to changes in current legislation.

INFORMATION FOR THE PROCESSING OF SUPPLIERS' PERSONAL DATA PURSUANT TO ART. 13 OF EU REGULATION 2016/679 (GDPR)

BARAZZONI S.P.A., with registered office in Via Cesare Battisti, 46, 28045, Invorio, NO, P.IVA 00540880036, Fiscal code 00540880036, in the person of its legal representative pro tempore, hereinafter also only "Barazzoni" or "the Data Controller", in its capacity as Data Controller pursuant to EU Regulation 679/2016 - General Data Protection Regulation (GDPR), hereinafter also only "GDPR", recognises the importance of the protection of personal data and considers their protection one of the main objectives of its activity.

We hereby provide due information regarding the processing of personal data to suppliers who are natural persons/individual companies and to natural persons acting on behalf of suppliers who are legal persons, pursuant to Article 13, GDPR. Therefore, before supplying any personal data, Barazzoni invites you to read this information notice carefully as it contains important information on the protection of personal data and the security measures adopted to guarantee their confidentiality in full compliance with the regulations in force.

Barazzoni informs you that your personal data will be processed using manual, IT and/or telematic tools and will be based on the principles of lawfulness, correctness, transparency, limitation of purposes and storage, data minimisation, accuracy, integrity and confidentiality and protection of the rights and freedoms of the person concerned.

Personal data will therefore be processed with logic strictly related to the purposes indicated below, in accordance with the provisions of the GDPR and, in any case, in such a way as to guarantee the security and confidentiality of the data.

Foreword

Judicial data' shall mean personal data relating to criminal convictions and offences or related security measures.

1. Purpose of the Processing

The Data Controller processes personal and identification data voluntarily provided by the data subject (verbally, by means of business cards, requests for information, e-mail, delivery of documents, through the Data Controller's website, etc.). ), by way of example but not limited to: name, surname, place and date of birth, address of residence and domicile, place of work, registered office, company name, VAT number, tax code, landline and/or mobile telephone number, fax number, e-mail address, PEC address, employer's company, role and/or company classification, bank details, etc.

2. Purpose and legal basis of processing, nature of provision and refusal

Personal data will be processed for the following purposes
(a) to fulfil pre-contractual and contractual obligations arising from existing relations with you;

b) to manage the administrative, commercial and logistical management of the supply relationship (e.g. bookkeeping, invoicing, payments) that may ensue;

c) management of administrative, accounting, civil, fiscal fulfilment of obligations provided for by law (such as, for example, those of an accounting and fiscal nature), by a regulation, by Community legislation or by an order of the Authority to which the Controller is subject

d) archiving;

e) purposes necessary to ascertain, exercise or defend a right of the Data Controller in judicial and/or extrajudicial proceedings or whenever the Judicial Authorities exercise their jurisdictional functions.

For the purposes indicated in points a) and b) of this paragraph 2, the legal basis of the processing, which attests to its lawfulness, is that provided for in Article 6(1)(b) of the GDPR, i.e. "the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre- contractual measures taken at the data subject's request".

The processing carried out for the purposes in points c) and d) of the same paragraph is based on legal obligations to which the Data Controller is subject (Art. 6(1)(c) of the GDPR).

For the purposes stated in point e), the processing is necessary for the pursuit of the legitimate interest of the Controller to protect its rights arising from the contract (Art. 6(1)(f) of the GDPR).

Please note that for the purposes of the processing as outlined above in points a), b) and c) and d), the provision of data is mandatory. Any failure to provide, partial or inaccurate provision of data and/or any express refusal to process it will make it impossible for the Data Controller to enter into contractual relationships or fulfil contractual obligations undertaken or a legal obligation to which the Data Controller is subject or requests by the competent Authorities.

The data subject may object to the processing at any time by exercising the rights provided for by the GDPR in the forms and ways indicated below in this information notice.

3. Place and methods of processing, storage times

Data processing takes place at the aforementioned premises of the Data Controller and at identified third parties.

Data are collected and processed by the Controller in compliance with the principles of lawfulness, correctness and transparency and in such a way as to guarantee adequate security, including protection, by means of appropriate technical and organisational measures, from unauthorised or unlawful processing and from accidental loss, destruction or damage.

The data collected will be processed by means of electronic or in any case automated, computerised and telematic instruments, or by means of paper-based instruments, with logic strictly related to the purposes for which the personal data were collected and, in any case, in such a way as to guarantee the security of the same and for the time strictly necessary for the performance of the contractual relationship, as well as for that prescribed by civil, tax and regulatory provisions and, in any case, for no longer than 10 years from the end of the contractual relationship or even beyond that period, until the limitation period provided for by law with reference to the individual rights that can be enforced by the Data Controller.

Once these terms have expired, your data will be anonymised or deleted, unless it is necessary to keep it for other and different purposes provided for by express legal provision.

Further information on the data retention period and the criteria used to determine this period may be requested by writing to the Data Controller.

4. Categories of recipients of personal data

Your personal data collected and processed may be shared, exclusively for the purposes specified above, with the following categories of recipients

b) persons, companies, consultants or other third parties, such as, by way of example, professional firms, tax, legal, IT and labour consultants, companies that maintain the IT equipment and the services of the Barazzoni website, banking institutions, insurance companies, professionals carrying out auditing and certification of financial statements, etc, each for their specific field of competence, with whom Barazzoni has relations necessary to carry out their activities or by law, to whom a specific mandate has been entrusted and for the time necessary to achieve the purposes for which the data were collected, who act, where necessary, as data processors of Barazzoni;

c) Judicial or supervisory authorities, administrations, public bodies and organisations, in the exercise of their functions, when required by law.

All subjects belonging to the categories to which the data may be communicated will use them in their capacity as persons authorised to process personal data under the direct authority of the Data Controller, or as "Data Processors" specifically appointed and instructed by Barazzoni in its capacity as Data Controller, or as autonomous "Data Controllers", authorised to access the data by virtue of provisions of law, regulations and rules or for the execution of a contract.

In any case, your data will not be disseminated.

5. Transfer of data outside the EU

The processed data are stored on servers located at the Data Controller's premises within the European Union. In any case, it is understood that the Data Controller may also move the servers outside the EU if necessary. In this case, the Data Controller guarantees as of now that the transfer of data to non-EU countries will take place in compliance with the applicable legal provisions, subject to the stipulation of standard contractual clauses as provided for by the European Commission.

6. Automated decision-making process

7. Rights of the data subject

In accordance with the GDPR, we inform you that, as a data subject, you may exercise the following rights:

(i) right of access: to obtain confirmation as to whether or not personal data relating to you are being processed and, if so, to receive information relating, in particular, to: the purposes of the processing, the categories of personal data processed and the period of storage, the recipients to whom the data may be disclosed (Article 15, GDPR);

j) right to rectification: to obtain, without undue delay, the rectification of inaccurate personal data concerning you and the integration of incomplete personal data (Article 16, GDPR)

k) right to erasure: to obtain, without undue delay, the erasure of personal data concerning you, in the cases provided for by the GDPR (Article 17, GDPR);

l) right to restriction: to obtain from the Controller the restriction of processing, in the cases provided for by the GDPR (Article 18, GDPR);

m) right to portability: to receive, in a structured, commonly used and machine-readable format, the personal data concerning you provided to the Controller, as well as to obtain that they be transmitted to another controller without hindrance, in the cases provided for by the GDPR (Article 20, GDPR)

n) right to object: to object to the processing of personal data concerning you, unless there are legitimate grounds for the Controller to continue the processing (Article 21, GDPR);

o) if the processing is based on consent, pursuant to Article 7, GDPR, the right to withdraw the consent given at any time without affecting the lawfulness of the processing based on the consent given before the revocation;

p) the right to lodge a complaint with the supervisory authority - lodge a complaint with the Supervisory Authority for the Protection of Personal Data, based in Piazza di Montecitorio no. 121 - 00186 Rome (RM).

8. Procedures for exercising rights

You may exercise your rights at any time by sending
- a registered letter to: Barazzoni S.p.A., with registered office in Via Cesare Battisti, 46, 28045, Invorio, NO

- an e-mail to the address: privacy@barazzoni.it

9. Data controller, data processors, persons authorised to process data

Pursuant to the GDPR, the Data Controller is: Barazzoni S.p.A., with registered office in Via Cesare Battisti, 46, 28045, Invorio, NO, as defined above.

The updated list of Data Processors and persons authorised to process data is kept at the registered office of the Data Controller.

For any information regarding the processing of personal data carried out by the Data Controller, please write to the following e-mail address: privacy@barazzoni.it

10. Changes

This policy is in force as of 25/05/2018. The Data Controller reserves the right to modify or simply update its content, in part or in full, also due to changes in current legislation.

INFORMATION NOTICE PURSUANT TO ART. 13 EU REGULATION 2016/679 FOR THE PROTECTION OF PERSONAL DATA (GDPR) IN CASE OF RECEIPT OF CVS

BARAZZONI S.P.A., with registered office in Via Cesare Battisti, 46, 28045, Invorio, NO, P.IVA 00540880036, Cod.Fisc. 00540880036, in the person of its legal representative pro tempore, hereinafter also only "Barazzoni" or "Data Controller", in its capacity as Data Controller pursuant to EU Regulation 679/2016 - General Data Protection Regulation (GDPR), hereinafter also only "GDPR", acknowledges the importance of the protection of personal data and considers their protection one of the main objectives of its activity.

We hereby provide you with the necessary information in relation to the data that you have decided to provide us with, and without prejudice to the fact that this does not constitute a commitment or a promise of future employment, we hereby inform you that your personal data will be processed by Barazzoni by means of manual processing or electronic or automated, computerised or telematic instruments, with logic strictly related to the purposes listed below and, in any case, in such a way as to guarantee the security and confidentiality of the data. Therefore, before providing any personal data, Barazzoni, invites you to read this information notice carefully, as it contains important information on the protection of personal data and on the security measures adopted to guarantee their confidentiality in full compliance with the regulations in force.

1. Sources of personal data

The personal data subject to processing are collected directly from the person concerned and are processed in compliance with the law and the confidentiality obligations that inspire the Controller's activity.

2. Purpose of processing

Your data will be processed for the purpose of assessing your profile, aptitudes and professional skills as part of the Owner's personnel Xion process. The data you provide may also be inherent to your family members, if the processing of such data is necessary for the above-mentioned purposes.

3. Legal basis and lawfulness of processing

Processing for the purposes referred to in the preceding paragraph is necessary for the performance of a contract to which you are party or for the performance of pre-contractual measures taken at your request (Art. 6, par. 1, lt. b) GDPR), pursuant to Art. 111-bis of Legislative Decree 196/2003 as amended.

4. Nature of provision and consequences of refusal

Failure to provide the data requested and marked as compulsory will preclude the possibility of assessing your position.

Conversely, failure to provide non-compulsory data will not affect your right to evaluation and/or Xion.

5. Categories of recipients of personal data

The personal data provided and those relating to the performance of the contractual relationship may be communicated to third parties belonging to the following categories

a) to employment intermediation agencies and subjects to whom the transfer of personal data is necessary or in any case functional to the management of applications by the Controller;

b) to persons to whom the right to access personal data is recognised by provisions of law, regulation, Community legislation and collective bargaining

c) to professionals and consultants for the purposes of protecting the Controller's rights

d) to professionals or service companies for company administration and management who work on behalf of the Data Controller.

All the subjects belonging to the categories to which the data can be communicated will use them as "Data Processors" specifically appointed and instructed by Poligrafico as Data Controller or as autonomous "Data Controllers" authorised to access them by virtue of provisions of law, regulations and rules.

The data will also be processed by persons specifically authorised to process them by the Data Controller, pursuant to the GDPR, exclusively within the offices in charge of managing the personnel Xion process and interested in the profile you have submitted.

Your personal data processed are not in any case subject to dissemination.

6. Transfers outside the EU

Your personal data will not be transferred to third countries outside the European Union.

7. Personal data retention period

Exclusively for the above-mentioned purposes, the Data Controller may keep the data provided for a maximum period of two years from the date of registration of the curriculum in the Data Controller's systems or until the period of prescription of the rights that may be activated as a result of the Xion procedure that may have been activated has elapsed.

Once these terms have elapsed, your data will be anonymised or deleted, unless they need to be kept for other and different purposes envisaged by express legal provision. Particular data, i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or tradeXmembership, as well as data concerning a person's health or sexual life or sexual orientation, voluntarily provided will not be processed in any way and will be deleted.

8. Automated decision-making process

For the pursuit of the processing purposes described above, no decision is made solely on the basis of automated processing which produces legal effects concerning you or which significantly affects you in a similar way.

9. Rights of the data subject

Pursuant to and for the purposes of the GDPR, you are granted the following rights as data subject:

(a) the right to obtain from the Data Controller confirmation as to whether or not personal data concerning you are being processed and, if so, to obtain access to the personal data and information provided for in Article 15 of the GDPR and, in particular, those relating to the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data have been or will be communicated, the storage period, etc.

b) the right to obtain, where inaccurate, the rectification of personal data concerning you, as well as the integration of the same where deemed incomplete, always in relation to the purposes of the processing (Art. 16 GDPR)

c) right to erasure of data ("right to be forgotten"), where one of the cases referred to in Article 17 GDPR applies;

d) right to restriction of processing, in the cases provided for in Article 18 GDPR;

e) right to data portability, pursuant to Article 20 GDPR;

f) right to object to processing pursuant to Art. 21 GDPR;

(g) right to lodge a complaint with the Data Protection Authority or other supervisory authority pursuant to Article 13(2)(d) GDPR.

10. Modalities for exercising rights

You may at any time exercise your rights by sending
- a registered letter to: Barazzoni S.p.A., Via Cesare Battisti, 46, 28045, Invorio, NO

- an e-mail to the address: privacy@barazzoni.it

11. Data controller, data processors, persons authorised to process data

Pursuant to the GDPR, the Data Controller is: Barazzoni S.p.A., with registered office in Via Cesare Battisti, 46, 28045, Invorio, NO as defined above.

The up-to-date list of Data Processors and persons authorised to process data is kept at the registered office of the Data Controller.

For any information regarding the processing of personal data carried out by the Data Controller, please write to the following e-mail address: privacy@barazzoni.it

12. Changes

This policy is in force as of 20/09/2018. The Data Controller reserves the right to modify or simply update its content, in part or in full, also due to changes in current legislation.