Privacy Policy

Pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data

Vernice S.r.l. (hereinafter also "Vernice" or "Company") informs you, pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data ("GDPR"), that the personal data you provide through the use of the website www.vernice.it (hereinafter "Site" or "Website"), may be subject to processing, in compliance with the obligations of confidentiality provided for by the regulations in force.

1. Data Controller

The Data Controller, i.e., the person who makes the decisions regarding the purposes and methods of data processing, is Vernice S.r.l., P. IVA 04015141205, with headquarters at Via Maccaferri 2, 40069 Zola Predosa (BO). The Company has appointed a Data Protection Officer ("DPO") who can be contacted for clarification regarding the processing of personal data at the following address: DATAPROTECTIONIT@ima.it.

2. Categories of data processed

Depending on the service you requested by accessing the Site, Vernice may process personal data of different types:

• Navigation data: the computer systems and software used for the operation of this website acquire, in the course of their normal operation, certain personal data whose transmission is implicit in the navigation of the websites. This information is not collected to be associated with identified data subjects; however, by its very nature it could allow users to be identified.
• Personal data provided voluntarily: the Company will process the personal and contact data you provide through the website, or by e-mail or other means of electronic and non-electronic communication. Specifically, the Company may process your personal data essential for identification, such as but not limited to: first and last name, addresses (email and/or PEC), employer company, telephone number, role and/or company classification.
• Cookies: for more information on the collection and processing of Cookies on this site, please refer to the specific Cookie Policy, which is also always available via a link located in the footer of each page.

At any time, you will be able to ensure that the Personal Data processed for the purposes set out in this policy is correct and, in the event of any changes to the same, you may request an update by sending an email to: privacy@vernice.it or by accessing your user profile on the site.

3. Purposes and methods of processing, legal bases

Vernice's processing of your personal data will be based on the principles of fairness, lawfulness, transparency and protection of your privacy and rights, in accordance with the principles expressed by the GDPR. Your personal data will be processed exclusively for purposes related and/or instrumental to the services you have requested, in particular:

• ensure the proper operation of the Site;
• enter into a sales contract for the purchase of one of our products, perform a service, including any registration with our Site, or one or more transactions requested by you;
• fulfill any legal and/or regulatory obligations (e.g., billing, bookkeeping);
• to carry out the operational and managerial requirements internal to Vernice and inherent to the services and/or products offered to you;
• to carry out soft spam campaigns, i.e. to send commercial communications relating to products or services similar to those already the subject of existing business relationships with the Company (if any);
• to carry out marketing campaigns, i.e., sending commercial communications (via email, telephone, paper mail, Whatsapp and social media such as Instagram, Facebook and Linkedin) concerning the goods and services produced by the Company, which we believe may be of interest in order to be able to establish future business relationships with your company.

The above treatments, are made legitimate by the following legal bases:

• art. 6, par. 1 lett. b) of the GDPR - the processing is necessary for the performance of a contract or the execution of pre-contractual measures taken at your request;
• Article 6(1)(c) of the GDPR - processing is necessary for compliance with a legal obligation to which the controller is subject;
• art. 6, par. 1 lett f) of the GDPR - processing is necessary for the pursuit of the legitimate interest of the data controller;
• art. 6, par. 1 lett. a) of the GDPR - you have given your consent to the processing of your personal data for that specific purpose.

The processing of the aforementioned data will take place by means of instruments suitable to guarantee their security as well as confidentiality and may be carried out by automated tools suitable to store, manage and transmit the data. Vernice guarantees the logical and physical security of the data and, in general, the confidentiality of the personal data processed, putting in place all the necessary technical and organizational measures appropriate to prevent the loss of personal data, illicit or otherwise incorrect use thereof, as well as unauthorized access by third parties.

4. Nature of the provision of data and consequences of any refusal to respond

The provision of your personal data for the purposes referred to in Article 3, lett. a), b), c) and d), above, is necessary in order to take advantage of the services made available on our Site (i.e. purchase goods through the e-commerce service; registration on the site). The provision of your personal data for the purposes referred to in Article 3 (e) and (f) is optional, with the consequence that you can decide to exercise your right to object or - in the case of (f) - not to provide your consent, or to withdraw it at any time.

5. Data Retention Times

Your personal data will be kept for the amount of time strictly necessary to pursue the purposes of the processing for which it was collected, as indicated in Article 3 above. In particular, the data collected for the purposes referred to in letters b), c) and d) will be kept for the time necessary to provide you with the requested services; it is understood that the data necessary to fulfill legal obligations (such as bookkeeping), will be kept for a period of 10 years from the termination of the existing business relationship.

6. Communication of data

Your Personal Data will not be disclosed or transferred to third parties. The Company, for the purposes set forth in Article 3 above, may make your Personal Data available:

• to its employees and collaborators, who will act in their capacity as authorized data processors (or so-called "data processors") and/or to consultants engaged by the Data Controller who need to process your Personal Data in order to perform their duties;
• to third parties who perform outsourced activities on behalf of the Data Controller by providing specific services as Data Processors pursuant to Article 28 GDPR. For information on the names and related references of the Data Processors, you may contact us at the following address: privacy@vernice.it or by mail at the Company's registered office;
• to judicial or supervisory authorities, administrations, public bodies and entities (domestic and foreign), in accordance with the provisions of the law and upon formal legitimate request by such entities.

Personal Data will not be transferred outside the European Union.

7. Rights of the data subject

In relation to your Personal Data you may exercise, at any time, the rights recognized by the GDPR, set out below:

• <strong>access to Personal Data ex art. 15</strong>: to obtain confirmation as to whether or not data concerning you is being processed and, if so, access to the following information: the purposes, the categories of data, the recipients, the retention period, the right to lodge a complaint with the Supervisory Authority;
• <strong>request for rectification of Personal Data ex art. 16</strong>: obtain, without undue delay, the rectification of inaccurate Personal Data concerning you and the possible integration of the same if incomplete;
• <strong>deletion of Personal Data ex art. 17</strong>: obtain, without undue delay, the deletion of Personal Data concerning you;
• <strong>limitation of processing ex art. 18</strong>: "limitation" means the marking of the data stored with the aim of limiting its processing in the future;
• <strong>data portability ex art. 20</strong>: in the case of automated processing carried out on the basis of consent or in performance of a contract, to receive in a structured, commonly used and machine-readable format the data concerning you;
• <strong>objection to processing ex art. 21</strong>: object to the processing of your Personal Data, unless there are reasons of legitimate interest of the Data Controller to continue the processing;
• <strong>object to automated decision making, including profiling ex art. 22</strong>, your Personal Information shall not be subject to any automated decision making by Vernice through the use of your Personal Information or profiling, unless you consent;
• <strong>revocation of consent</strong>: in case you have provided consent to the collection, processing and transfer of your Personal Data, you have the right to revoke it for such specific processing at any time.

The Company also informs you that you can lodge a complaint under Article 77 with the competent Supervisory Authority. For Italy, the competent authority is the Garante per la protezione dei dati personali, which can be contacted through the contact details given on the website http://www.garanteprivacy.it/. The aforementioned rights may be exercised by sending a request to us by e-mail, to privacy@vernice.it, or by registered mail to the Company's registered office. Finally, it should be noted that the Company may amend or update this notice, including to comply with new obligations imposed by applicable laws or for technical necessity.