Privacy policy pursuant to art. 13 of the GDPR for data collected directly from the data subject

Article 13, paragraph 1 of the European General Protection Regulation (GDPR) requires informing data subjects, in the case of direct collection of their data, on the fundamental elements of the processing as specified in § 1, lett. a/f.

The undersigned company fulfils its obligations by informing you that:

1-A) The Data Controller is TODINI AND CO. SPA

1-B) Data are collected for the following purposes:

The legal basis of which is based:

1-C) The recipients or any categories of recipients are:

1-D) The data may be transferred outside the EU or to an international organisation based on binding corporate rules (art. 47) which are legally binding Standard Contractual Clauses approved by the European Commission, and apply to all members of a business group or group of companies engaging in a joint economic activity, including their employees. In addition, these relationships give data subjects the express right provided for by the GDPR regarding the processing of their personal data;

Additional information needed to guarantee correct and transparent processing.

2-A) The retention period of personal data contained in the databases regarding:

How long the data relating to potential customers/suppliers are retained

How long the data relating to customers/suppliers are retained

2-B) You are informed that you have the right to request access to your personal data, to rectify, erase, limit the processing of data concerning you, to oppose their processing, to data portability;

2-C) You have the right to lodge a complaint with a supervisory authority.

2-D) The communication of your data: