EU Regulation 2016/679 (General Regulation on Data Protection, or "GDPR") requires that the processing of personal data is carried out in respect of the rights, fundamental freedoms, and dignity of the data subjects. For these reasons, C.E.I.A. S.p.A. (hereinafter "CEIA"), in its role as Data Controller, is required to provide You as Data Subject, in accordance with Article 13 of the aforementioned Regulation, the following information on the processing of personal data that you provide us. This Privacy Policy applies to the personal information we obtain through: - https://www.ceia.net ("Website"), and through other websites of Data Controller property; - offline collection in connection with sales, marketing events, partner engagement. This Privacy Policy does not apply in every cases in which is provided a specific and separate privacy notice. The use of any information that is collected through cookies or other web tracking technologies is detailed in the Website disclaimer. Website may contain links to external sites, with reference to them CEIA is exempt from any liability of privacy protection practices. We therefore recommend reading carefully the privacy policies of these external sites. 1. Processing purposes, legal basis Primarily, personal data will be processed for the following purposes (ex art. 6 par.1 lett. B of GDPR): - establish and manage contractual or professional relationships; - send, receive and process sales offers and purchase proposals; - meet customer needs (from the Website: general information, requests for quotes, warranty registration, intention to become a reseller); - determine the quality of products/services offered (satisfaction survey). Personal data will be processed on the following legal basis: - compliance with Data Controller legal obligations i.e. anti money laundering regulations (ex art. 6 par.1 lett. C of GDPR); - your consent where required (ex art. 6 par.1 lett. A of GDPR); - legitimate interests of Data Controller related to information security CEIA and related to the business management between CEIA distribution companies and companies of CEIA’s group (ex art. 6 par.1 lett. F of GDPR). Personal data will not be subject to any automated decision-making process including profiling. 2. Data recipients, categories and communications. Personal data are pertain to the Data Subject that acts for or represents the legal entity with which the Data Controller will enter in contact for the purposes above mentioned (i.e. customers, suppliers, consultants, partners even potential). Personal data will be (e.g.): - name, surname, role, telephone numbers and email address ("data contact"); - commercial name, fiscal code, tax or VAT number, bank account and financial details ("administrative data"); - websites username, password ("online account data"). Data Subject may communicate to the Data Controller the ID card or passport details for visa purpose in case of authorized visits or technical trainings in Data Controller’s factories. Recipients of personal data are primarily Data Controller’s employees (i.e. commercial and administrative personnel) and managers appointed to perform the purposes indicated above. For the same purposes, personal data may be communicated to external subjects carrying out services for the Data Controller (i.e. legal and financial advisors, banks, IT technicians). Personal data may be communicated to CEIA distribution companies and to companies of CEIA group ("Official Distributors" and "Authorized Dealers") that You may identify in Website after having selected the country of interest. In cases of transfer of personal data to non-European countries in which do not operate international conventions or other comparable guarantees, the transfer of your data will be considered necessary for the performance of a contract or pre-contractual measures (ex art. 49 par. 1 lett. B and C of GDPR). 3. Nature of data provision The provision of your personal data is optional, however the refusal to provide them prevents the possibility to pursuing the purposes mentioned or the inability to follow up with and receive your communications\requests. 4. Data storage To the extent permitted by applicable law, Data Controller retains personal data obtained as long as it is needed for the purposes mentioned and until your request about their erasure, restriction, destruction or revoke your consent to the processing of data. 5. Data Controller contacts and Data Subject rights We also inform you that the Data Controller is C.E.I.A. S.p.A. with registered office at Strada Provinciale di Pescaiola 54 â€" Civitella in Val di Chiana, Viciomaggio, 52041, Arezzo (IT). You can contact the Data Controller at this mail address: privacy@ceia-spa.com asking for access to and rectification or erasure of personal data or restriction of processing concerning the Data Subject or to object to processing as well as the right to data portability. CEIA will take your request into consideration and work with you on how best to fulfil it. Likewise, you may revoke your consent to the processing of your data at any time, without prejudice to the legitimacy of its processing prior to such revocation. Please note that CEIA can proceed your request in accordance of art. 13 of GDPR and if there is no legal obligation or prevailing right of CEIA as regards its retention. You have the right to lodge a complaint with the Authority for the Protection of Personal Data.