CUSTOMER PRIVACY POLICY

pursuant to Article 13 of European Regulation 2016/679

Voilàp Digital S.r.l., a company of the Voilàp S.p.A. Group, in its capacity as Data Controller (hereinafter, the "Company" or the "Data Controller") wishes to inform you, pursuant to Article 13 of European Regulation 2016/679 on the protection of personal data (hereinafter the "Regulation") and national legislation, including individual provisions of the Supervisory Authority (hereinafter the "Data Protection Authority" or "Supervisor"), where applicable, that the personal data you provide will be processed in compliance with the legal and contractual provisions in force for the purposes and in the manner indicated below.


Data Controller
The Data Controller of your personal data is Voilàp Digital S.r.l., in the person of its pro tempore legal representative, with registered office in Via Archimede 10, 41019 Limidi di Soliera (Mo) – Italy; email address privacy@voilap.com; VAT No./Tax Code 03556220360.


Data Protection Officer
The Data Protection Officer is Dr Donato Eugenio Caccavella, email address: dpo.voilap@amicadpo.eu.


Data processed, purposes and legal basis for data processing
The Data Controller intends to process your personal and contact details (such as, for example, name and surname, email address, postal address, telephone numbers, etc.), as well as any other data relevant to the commercial relationship (such as VAT number or tax code, commercial conditions, type of products and services purchased, etc.), for the following purposes:

  • establishment, management and execution of the contractual relationship (legal basis: Art. 6(1)(b) GDPR);
  • compliance with legal obligations (legal basis: Art. 6(1)(c) GDPR);
  • to ascertain, exercise and/or defend legal claims (legal basis: Art. 6(1)(f) GDPR);
  • direct marketing (legal basis: Art. 6(1)(f) GDPR – legitimate interest);
  • promotional communications and market research (legal basis: Art. 6(1)(a) GDPR – consent);
  • profiling and targeted promotion (legal basis: Art. 6(1)(a) GDPR – consent).

Data processing methods
The data will be processed using both paper and electronic/IT/telematic tools/media, in full compliance with the law, in accordance with the principles of lawfulness and fairness and in such a way as to protect the confidentiality of the data subject and their rights by adopting appropriate technical and organisational measures to ensure a level of security appropriate to the risk.


Nature of data provision
The provision of your data is necessary for contractual and legal purposes and optional for marketing and profiling purposes. Failure to provide the mandatory data may prevent the establishment or continuation of the contractual relationship.


Recipients of the data
Data may be disclosed to third parties such as: legal consultants, IT providers, companies of the Voilàp Group, authorised and external data processors, and public authorities. Under no circumstances will the data be disseminated.


Retention period
The data will be retained:

  • for contractual and legal purposes: for the duration of the contract + 10 years;
  • for legal disputes: until expiry of limitation periods;
  • for marketing and profiling: until withdrawal of consent and in any case no longer than 2 years.

Transfer of data abroad
Data will not normally be transferred outside the EU. If necessary, appropriate measures such as standard contractual clauses will be applied.


Rights of the Data Subject
Pursuant to Articles 15–22 of the GDPR, you may exercise the following rights:

  • Access, rectification, erasure, restriction;
  • Data portability and objection to processing;
  • Withdrawal of consent at any time;
  • Objection to automated decision-making, including profiling.

Complaint to the Data Protection Authority
You have the right to lodge a complaint with the Supervisory Authority if you believe the processing of your data violates the GDPR, pursuant to Article 77.