Login private area
Forgot password
Password recovery
Password remembered
Sign in
By continuing to browse this site, you accept the use of cookies in order to ensure its proper functioning
It is necessary to have active cookies to use the website

Customer Information

Arts. 13-14 EU Regulation no. 679 of 27 April 2016 "General Data Protection Regulation"

Dear Customer, this information on the processing of personal data ("Privacy Policy") will allow you to know clearly and completely how your personal data (Data) is processed.

1. Who is the Data Controller?

The data controller is the company Potocco S.p.A., with registered office in 33044 Manzano (UD), via Indipendenza n. 4 (C.F. e P.I. 00648690303). You can contact the Data Controller at the following e-mail address info@potocco.it.

2. What Personal Data do we Collect and Process?

Your following personal data may be processed:

  • Personal data and contact data (telephone and e-mail);
  • Fiscal, administrative, accounting and commercial data;
  • Information relating to the products purchased and/or orders placed.

3. For What Purposes We Process Personal Data and What is the Legal Basis

a) Contractual relationships. The data requested is necessary to prepare any quotes, prepare the order and the offer you requested, execute the contract and the service you requested, as well as to manage commercial relations and organize the logistics and shipments necessary to execute the contract.
Legal basis: The condition that makes the processing lawful is the performance of the contract to which you are a party.

b) Legal obligations. Some data, such as invoicing data, are necessary to comply with legal obligations, including accounting and administrative management, and to meet communication obligations to Public Administrations or other Public Bodies.
Legal basis: it is constituted by the need to comply with legal obligations to which the data controller is subject and/or contractual obligations to which you are a party.

c) Management control. Some data may be used for internal management control purposes.
Legal basis: legitimate interest of the controller.

d) Litigation. Some data may be processed in order to ascertain, exercise or defend a right in court or in the event that the courts exercise their functions.
Legal basis: it is the legitimate interest of the Data Controller in the exercise or defence of a right.

4. Nature of Data Provision

The provision of the information required for the purposes referred to in point 3 lett. (a) and (b) it is necessary. Failure to provide the requested information would prevent the execution of the contract and/or compliance with current legislation.

5. How Long do we Keep the Data?

The data will be stored for a limited period of time that will vary depending on the type of activity that involves the processing of your personal data. After this period, your data will be permanently deleted or in any case irreversibly anonymized. Your personal data are stored in compliance with the terms and criteria specified below: the data will be stored for the period of time necessary for the pursuit of the purposes indicated above and in any case not beyond the terms provided for by specific legal obligations.

6. To Whom Could Your Personal Data be Disclosed?

Your personal data will be processed by appointed personnel, suitably trained and operating under the authority and responsibility of the Data Controller. Some of the information may be communicated, exclusively for the purposes specified above, to the following subjects:

  • Credit, financial institutions and banks;
  • Law or consulting firms to which the Company has given a specific mandate;
  • Freight forwarders;
  • IT systems assistance and maintenance companies or suppliers of computer storage systems;
  • Other subjects or companies that carry out activities instrumental to the purposes indicated above on behalf of the Data Controller.

A detailed list of all recipients is available upon request to the Data Controller.

7. Rights Provided by Law

European Data Protection Law ("GDPR") provides a number of rights that you can exercise to maintain control of your data. To exercise your rights, you can write to info@potocco.it. We are required to respond within 30 days of receiving your request, and we will try to be as fast as possible.

Right of access

The right to obtain information regarding the processing of personal data, to obtain access to and copy of it, including by means of commonly used electronic means. We undertake to provide you with an account of the data we hold about you, such as your personal data, contact details, or requests you have received via contact form or email.

Right to rectification

The right to obtain the updating, integration or correction of data. If you believe that the data is incorrect or outdated in any way, we will do our best to resolve the matter.

Right to portability

It is possible to request the portability of the data processed due to the execution of the contract or on the basis of your consent, also directly to other data controllers.

Right to erasure

The right to request the deletion of the data we have stored. In some cases it is possible to request direct cancellation, and we will take care to proceed as soon as possible. However, not all data can be deleted on request, because it may be necessary to comply with legal obligations or because it is still in use.

Right to restriction and objection

The right to request the restriction of processing or to object, in whole or in part, to the processing of personal data. In the event of a request for restriction of processing, we are obliged to suspend all data operations for a specified period.

If you believe that one or more of the processing activities carried out by us may be in violation of the law, or if you believe that your rights have not been protected, you may send a complaint to the Supervisory Authority of the place where you habitually reside or where the alleged violation occurred. In Italy, it is possible to contact the Privacy Authority.