Privacy Policy - Trade Fairs

Articles 13-14, EU Regulation April 27, 2016 No. 679 "General Data Protection Regulation"

Dear Visitor, this privacy notice ("Privacy Policy") is intended to clearly and fully inform you about how Potocco S.p.A. processes the personal data ("Data") you provided during a trade fair, for example by handing over your business card or otherwise sharing your contact information with our staff.

1. Who is the Data Controller?

The Data Controller is Potocco S.p.A., with its registered office in 33044 Manzano (UD), via Indipendenza n. 4 (P.I. 00648690303). You can contact the Data Controller at the following email address: info@potocco.it.

2. What personal data do we collect and process?

We may process the following categories of personal data:

• Identification and contact details (e.g., name, phone number, email address);
• The subject matter of your request, such as the specific products or services you asked information about.

3. For what purposes do we process your personal data and what is the legal basis

a) Contractual or pre-contractual purposes. Your data is processed to provide the commercial information you requested and/or to manage existing or potential business relationships.
Legal basis: performance of a contract or pre-contractual steps.

b) Sending communications. We may use your email address to occasionally send you, also through our newsletter, technical or promotional information about our products or services and communications relative to events, initiatives and fairs of our industry.
Legal basis: your freely given and explicit consent. You may withdraw your consent at any time by clicking the "unsubscribe" link found at the bottom of each communication or by emailing info@potocco.it.

4. Nature of data provision

Providing your data for the purposes under point 3(a) is necessary. Without it, we cannot provide the requested information or manage business relationships.

Providing your data for the purposes under point 3(b) is optional. Refusing or withdrawing consent will only prevent you from receiving marketing communications.

5. How long do we store your data?

We retain your data for different periods depending on the purpose of processing:

• Data collected for contractual or pre-contractual purposes: for the duration of the business relationship;
• Data used for marketing communications: until consent is withdrawn.

After these periods, data will be securely deleted or anonymized.

6. Who may access your data?

Your data may be accessed by personnel who are properly trained and authorized by the Data Controller. Data may also be shared, solely for the purposes described above, with:

• IT service providers (e.g., system maintenance, cloud storage);
• Other third parties performing services on behalf of the Data Controller.

A full list of recipients is available upon request.

7. Your Rights

European data protection law ("GDPR") provides a series of rights that can be exercised to maintain control of your data. To exercise your rights, you can write to info@potocco.it. We are obliged to respond within 30 days of receiving the request, and we will try to be as quick as possible.

Right of access

The right to obtain information about the processing of personal data, gain access to them, and copy them even via common electronic means. We commit to providing a report of the data we possess, such as personal and contact data, or the requests received via contact forms or e-mail.

Right to rectification

The right to get data updated, supplemented, or corrected. If you believe that the data are in some way incorrect or outdated, we will do our best to resolve the issue.

Right to data portability

You can request the portability of data processed on the basis of contract execution or your consent, even directly to other data controllers.

Right to erasure

The right to request the deletion of stored data. In some cases, direct deletion can be requested, and we will take care to proceed as quickly as possible. However, not all data can be deleted upon request, as they may be necessary to fulfill legal obligations or because they are still in use.

Right to restriction and opposition

The right to request the limitation of processing or to oppose, in whole or in part, the processing of personal data. In case of a request for limitation of processing, we are obliged to suspend, for a determined time, any operation on the data.

If you believe that one or more processing activities carried out by us may violate the regulations, or you feel that your rights have not been protected, you can file a complaint with the Control Authority of the place where you usually reside or where the alleged violation occurred. In Italy, you can contact the Authority for the Protection of Personal Data.

8. Right to withdraw consent

Where the processing of your personal data is based on consent (Art. 6(1)(a) GDPR), you may withdraw your consent at any time without affecting the lawfulness of the processing carried out before the withdrawal.