Information Notice pursuant to art. 13 of General Data Protection Regulation no. 679/2016 of the European Union

Dear Customers, Dear Suppliers,
With the entry into force of General Data Protection Regulation no. 2016/679 of the European Union, which sets out regulations on the protection of natural persons and other subjects as regards the processing of personal data, this company, as the data controller, is required to provide some information on the processing and use of your data. Pursuant to the Regulations, the data in question should be considered personal and is transmitted directly by you or by third parties. The data is processed in compliance with current regulations and principles of correctness, lawfulness and transparency, as well as your good faith and your rights. To this end, you are hereby informed that:

a) Controller The controller is the company COOLORANGE S.R.L. with registered office in Lana, Via Bolzano nr. 78. The controller may be contacted by phone on +39 0473/495000 or by email at the address info@coolorange.com. The data protection officer of COOLORANGE S.R.L. is the lawyer Francesca Quartana. The data protection officer can be contacted at the email address privacy@coolorange.com.

b) Purpose of the processing The data is processed for the exclusive purpose of fulfilling the contractual services established between the data subject and the Company, and to fulfil any obligations laid down by the contract and current laws.

c) Processing procedure The processing is performed through operations carried out with or without the assistance of electronic tools and consists of the collection, registration, organisation, conservation, consultation, processing, alteration, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. The processing is carried out by the controller and employees specifically authorized by the controller.

d) Data communication The controller and employees in charge of processing may communicate the data to external collaborators and suppliers of the company for the sole purposes indicated under point b) and in general to all subjects to whom communication is necessary for the purpose of the correct achievement of the aims set out under point b). Only the personal data strictly necessary to achieve the aims set out under point b) shall be communicated. Personal data is not subject to disclosure and shall not be communicated to third parties without your explicit authorisation.

e) Data conservation Data processing shall occur for the entire duration of the commercial relations, thereby absolving all the legislative and contractual provisions, in particular tax and commercial legislation, which could involve obligations to conserve the data beyond the end of the commercial relations.

f) Transfer of data abroad The personal data may be transferred to countries of the European Union or third countries with respect to those of the EU, or to an international organisation, under the scope of the purposes set out under point b).

g) Rights of the data subject and data breach The data subject, at any time, has the right to access their personal data held by the data controller and the right to ask for it to be corrected, deleted, for the processing concerning it to be restricted, or to oppose its processing. The data subject also has the right to know whether its personal data has been transferred to another data controller and to request and obtain its personal data in a structured format that can be read by an automatic device, also in order to communicate this data to another data controller (so-called right to data portability). In the event of a data breach, it is the data controller's duty to inform the competent Data Protection Authority and the data subject in the cases and terms laid down by the General Data Protection Regulation. The data subject has the right to withdraw its consent to the processing of its personal data at any time by communicating this wish to the data controller.

h) Right to complain Should the data subject be of the opinion that its data has been processed unlawfully, it has the right to submit an appeal to the competent Data Protection Authority.

i) Provision of data and refusal The conferment of personal data is necessary in order to perform the activities set out under point b) and refusal by the data subject to confer its personal data shall make it impossible to fulfil the activities set out under point b).

j) Automated decision-making processes The personal data is in no way subject to automated decision-making processes, nor is it used for profiling purposes.

Lana, 03/09/2018

Information Notice pursuant to art. 13 of General Data Protection Regulation no. 679/2016 of the European Union as PDF for printing: download english