In relation to the processing of the personal data provided, we inform you that:

DATA CONTROLLER

Piovan S.p.A., with registered office in Santa Maria di Sala (Venice, Italy), Via delle Industrie n. 16, e-mail: info@piovan.com, PEC: piovanspa@legalmail.it (hereinafter referred to as the "Data Controller").

TYPE OF DATA PROCESSED, PURPOSES AND LEGAL BASIS OF PROCESSING

The following personal data will be collected and processed: personal data of a common nature (name, surname, personal data, position within the company, contact data) referring to:customer and supplier companies/bodies and representatives/employees/collaborators/sub-contractors of customers/suppliers, eventually communicated by these, for: a) pre-contractual purposes and the execution of contractual relations(event registration) b) marketing purposes (sending commercial/promotional/advertising/marketing communication via mail, invitations to trade fairs and events via mail and text messages).Hence, the legal basis of the data processing is: (i) fulfilment of contractual obligations for the purposes referred to in letter a) and (ii) consent, for the purposes referred to in letter b).Data related to images (photos and videos) of event participants may also be processed for promotional and marketing purposes. In this case, the legal basis is the consent of the data subject.

COMMUNICATION OF DATA TO THIRD PARTIES - RECIPIENTS OF THE DATA

The Data Controller may communicate the processed data for the above-mentioned purposes to: i) persons in charge of data processing within the Data Controller; ii) external persons belonging to the following categories: external consultants and their appointees/service provider companies (transport and/or shipping companies)/banks, insurance companies and credit institutions/external companies that collaborate on marketing activities/ control bodies and organisations (customs); iii) other companies in PiovanGroup.

TRANSFER OF DATA TO THIRD COUNTRIES

Data are transferred to third countries (United States). The transfer guarantee is represented by personal data transfer agreements, drafted based on EU Implementing Decision 2021/914, between the Data Controller and each of the following Data Controller’s affiliates: Universal Dynamics Inc., Pelletron Corporation and Thermal Care Inc.

PROCESSING METHODS, PERIOD AND DATA RETENTION CRITERIA

Data will be processed in printed or digital format. The data collected: (i) for purposes referred to in letter (a) above will be processed/retained by the Data Controller for the period required for the execution of the afore-mentioned purposes, and at the end of these for a further period prescribed by law relating to the storage of contracts and administrative data and/or for defence in legal proceedings (ten years after the last use and/or event interrupting prescription) and (ii) for marketing purposes referred to in letter (b) above will be processed/retained by the Data Controller until the data subject's consent is revoked and, in any case, for a maximum period of 2 (two) years. Data related to to images (photos and videos) collected for promotional and marketing purposes will be processed/retained by the Data Controller for the period necessary for the execution of the above-mentioned purposes and/or until the data subject's consent is revoked.

PROVISION OF DATA

The provision of data is mandatory for the execution of contractual relations. For marketing purposes, it is optional and subject to the data subject's consent. Failure to provide such data will make it impossible to fulfil the purposes listed above.

RIGHTS OF THE INTERESTED PARTY, REVOCATION OF CONSENT AND COMPLAINT TO THE CONTROL AUTHORITY

The data subject has the right at any time to request access to his/her personal data, to request rectification, deletion, limitation of the same, to oppose the processing and withdraw consent and to exercise the right to data portability whenever possible. In any case, the data subject has the right to revoke, at any time, any consent given to data processing, without prejudice to the lawfulness of processing based on the consent given before revocation.In case of alleged violation, the data subject, having recourse to the conditions, also has the right to propose a complaint to a Data Supervision Authority in the EU member state where he/she resides habitually or in the EU state where he/she works or where the alleged violation occurred.

PROFILING AND AUTOMATED DECISION-MAKING PROCESSES

The processing is not carried out by automated decision-making processes (i.e. profiling).

CONTACTS AND REQUESTS

To know the complete list of external parties to whom the data are communicated, to have information regarding the transfer of data to non-EU countries, the mechanisms and protection of data transfer pursuant to Article 44 and subsequent of GDPR, to exercise the revocation of any consent given or to exercise your rights (access, rectification, cancellation, limitation, opposition, portability) please send a request to the following e-mail: privacy@piovan.com.