Information note on processing of personal data.

1. DATA CONTROLLER The company Pavoni Step Automazioni S.r.l. with registered office in Via Lucio Mariani 36, 00178 Rome (RM) Italy, VAT number IT05540731006 (hereinafter "Data Controller"), as data controller, informs you pursuant to art. 13 D.Lgs. 30.6.2003 n. 196 (hereinafter "Privacy Code") and art. 13 EU Regulation n. 2016/679 (hereinafter "GDPR") that personal data collected on this website will be processed in the manner and for the following purposes.

2. OBJECT OF TREATMENT The following categories of personal data concerning you may be collected:

- Identification data - information relating to name, surname, company name, tax code, VAT number, address, telephone number, e-mail address, bank and payment details entered by you when contracts are concluded for the services of the Data Controller or to fulfill to your requests.

- Professional interests - information you provide us about your professional interests, including the products you are interested in and your field of activity.

- Other personal data - information you provide us regarding your personal data or professional situation.

- Use of the website - information on how you use the site, open or forward our communications, including information collected via cookies (you can find our Cookie Policy here ).

3.HOW WE COLLECT YOUR PERSONAL DATA The Data Controller collects and processes your personal data in the following circumstances:

- if you register on the website to use its features;

- for the purchase of our products;

- for requesting information on our products;

- if you respond to our marketing campaigns, for example by filling out a response form, or by entering data in one of our online forms or by subscribing to our newsletter;

- if other business partners legitimately transfer your personal data to us.

- if you provide personal data on behalf of someone else you must make sure, in advance, that the interested parties have read this Privacy Policy.

Please help us keep your personal information up-to-date and inform us of any changes.

4. FINALITY OF TREATMENT a) Establishment and execution of contractual relationships and consequent obligations, including the communication relating to services (for example, to execute purchase orders). The Data Controller may process your contact details for the purpose of establishing and executing contractual relationships, providing the services requested and replying to reports and complaints. The Data Controller may also use your contact details, and in particular your email address, to provide information on our services. Prerequisite for processing: fulfillment of contractual obligations. The provision of data is mandatory to manage the contractual relationship; in default we will not be able to give you course. b) Operational management and purposes strictly related to this for access to the website, in particular the reserved areas of the same. The Data Controller collects your contact details and use data of the website to allow you to access your Personal Area in order to: (i) download from your Personal Area documents relating to the services you have purchased; (ii) process the other requests made through the website. Prerequisite for processing: fulfillment of contractual obligations. The provision of data is mandatory to respond to your requests; in default we will not be able to give you course. c) Marketing aimed at meeting your needs and providing promotional offers also in line with your preferences. The Data Controller may process your contact data for marketing and advertising purposes, carried out through automated methods of contact (e-mail, text messages and other mass-mailing tools, push notifications, etc.) and traditional methods of contact (for example, phone call with operator) direct to inform you about promotional initiatives for the sale of our products or to invite you to openhouse events and trade fairs, in case you give us your consent by registering to our newsletter. Prerequisite for processing: consent. Failure to provide the same does not affect the contractual relationships. The consent can be revoked at any time. d) Compliance with legally binding requests to fulfill a legal obligation, regulations or provisions of the judicial authority, as well as to defend a right in court. The Data Controller collects your contact details to fulfill a legal obligation and / or to defend one's right in court. Prerequisite for processing: legal obligations, which the Controller is obliged to comply with.

5.SAFETY The data are kept and checked by adopting appropriate preventive security measures, aimed at minimizing the risks of loss and destruction, unauthorized access, treatment that is not permitted and different from the purposes for which the processing is carried out. In case we have provided you (or you have chosen) a password that allows you access to our website, applications or services we provide, you will be responsible for the confidentiality of this password and for compliance with any other security procedure. which gave her the news.

6. PROCESSING METHODS The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR and precisely: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing. The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the report for the purposes of service. Below we report the storage times in relation to the different purposes above mentioned: 1. Fulfillment of contractual obligations: the data processed to fulfill any contractual obligation may be retained for the entire duration of the contract and in any case not later than 10 years, in order to verify any differences including accounting documents (for example invoices). 2. Operational management and purposes strictly related to access to the website: the data processed for this purpose may be kept for the duration of the contract and in any case not later than 10 years. 3. Marketing purposes: personal data processed for marketing purposes may be kept for 24 months from the date on which we obtained your last consent for that purpose (with the exception of the opposition to receive further communications).4 In the event of disputes: in the event that we defend or act or even make claims against you or third parties, we may retain the personal data that we reasonably believe will be processed for such purposes, for the time when such claim can be pursued.

7. ACCESS TO DATA Your personal data may be accessed by duly authorized employees and collaborators, as well as external suppliers or other subjects (as an indication, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that provide support for the provision of services in their capacity as external data controllers.

8. RIGHTS OF THE INTERESTED PARTY Under the Article 15 of the GDPR you specifically have the right to ask the Data Controller

• access to your personal data,

• the copy of the personal data that you have provided us (so called portability)

• the correction of the data in our possession,

• the deletion of any data for which we no longer have any legal prerequisite for processing

• opposition to processing where required by applicable law

• the withdrawal of your consent, in the event that the processing is based on consent;

• the limitation of the way in which we process your personal data, within the limits established by the law for the protection of personal data.

9. METHODS OF EXERCISE OF RIGHTS You may exercise your rights at any time by sending an email to Questo indirizzo email è protetto dagli spambots. È necessario abilitare JavaScript per vederlo. ; or by registered mail to the company Pavoni Step Automazioni S.r.l., via Lucio Mariani 36, 00178 Rome, Italy. For any complaints or reports on how we process your data, we will make every effort to respond to your concerns.

Last update: 25/05/2018