PRIVACY POLICY – Policy for the processing of personal data in accordance with article 13 of the General Regulations on Data Protection (EU) 2016/679 (GDPR).
In accordance with the provisions of EU Reg. 2016/679 (European Regulation for the protection of personal data) we provide you with the due information regarding the processing of supplied personal data. The policy must not be considered valid for other web sites which may be consultable through links resulting from domino effects of the internet site of the proprietor, who must not be considered in any way responsible for third party internet sites. This is a policy formulated in accordance with art. 13 of EU Reg. 2016/679 (European Regulation for the protection of personal data) based on the provisions of Directive 2002/58/CE, updated by Directive 2009/136/CE, concerning Cookies as well as what is expected from the Provisions of the Guarantor Authority for the protection of personal data dated 08.05.2014 regarding cookies.
PERSONAL DATA
Personal data means “any information relating to an identified or identifiable natural person (“data subject”); the natural person is one who can be identified directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identification or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person” (art.4 no. 1 GDPR).
SPECIFIC INFORMATION
Specific information could be presented in the pages of the www.unopiu.com website regarding specific services or the processing of supplied data.
Cookies – The Unopiù S.p.A websites use Google Analytics cookies to collect data in aggregate form and cookies of third parties to better the experience of the user. Unopiù S.p.A wishes to formulate its web sites in the best way possible. For this reason so-called “tracking” instruments are used to technically improve its web offer. Tracking instruments permit Unopiù S.p.A. to measure the utilization of their offer. For further information on cookies used by the present website see the cookies policy on the following link.

1. PROCESSING OFFICIAL
In accordance with arts. 4 and 24 GDPR, Unopiù S.p.A., whose legal headquarters are in Milan (MI) – 20122, via Pompeo Litta, no. 9 and whose operational headquarters are in Soriano nel Cimino (VT), S.S. Ortana, km. 14,500, is in the person of the pro-tempore legal representative. The contact email of the Processing Official is: privacy@unopiu.it or one can write to: Unopiù S.p.a. – Privacy Processing Official – S.S. Ortana, km. 14,500 – 01038 Soriano nel Cimino (VT)

2. TYPE OF DATA PROCESSED
Personal and Contact data
We can use the personal and contact data supplied to us at the time of the conclusion of a purchase contract of Unopiù products, a request for a quote and/or information regarding our products, registration on the www.unopiu.com website or a subscription to our newsletter.
In order to be able to request information and/or complete the registration process on www.unopiu.com, all data on the relative forms marked with an asterisk must be supplied.
Further data
With your permission, we can also use data concerning you, collected in a different way to that described above.
More precisely, we can collect:
- optional information that may be transmitted through order forms, quote requests and forms for website registration on www.unopiu.com;
- information which we can acquire examining your interaction with us, through email and newsletters, through our Internet sites and through Apps that may be developed by ourselves or third parties (for further information, we invite you to consult the relative privacy policies);
- your purchasing behaviour, which includes information concerning acquisitions made by you and quotes requested by you at Unopiù S.p.A. sales points;
- information that you may share through social networks of which you are a member;
- data automatically registered entering the www.unopiu.com site through cookies and “tracking” instruments used by the present website, such as Google Analytics and Google Adwords and third party cookies.

3. PURPOSE AND LEGAL BASIS OF PROCESSING
Data of a personal nature will be subject to processing for the following purposes:
1. Execution of a contract, in conformity with the General Conditions of Sale between yourself and Unopiù S.p.A., which include relative administrative, fiscal and accounting obligations for the purchase of Unopiù S.p.A. goods and services.
2. Registration on the www.unopiu.com website to access Unopiù S.p.A. services: user registration – creation of an account on the website; registration for the architect area; contact and information request; request for the new printed Unopiù Catalogue – request for the new Unopiù Contract Catalogue; correlated administrative/accounting activities and requests; supply of goods and services and the safeguarding of credit positions deriving from them.
3. Direct marketing, market research and other sample research, direct sales: to be received by automatic means via email, SMS, as well as by phone, traditional post or other means of communication, from information to ascertain the level of satisfaction, promotional, commercial and/or publicity regarding proposed products and services, programs and contests with prizes as well as events organized by Unopiù S.p.A.
4. Profiling: to allow Unopiù S.p.A. to profile consumers and analyze habits and consumer choices in order to provide better sales and services.
The LEGAL BASIS of the purpose of 1) and 2) is the contract (art. 6 par.1 lett. b) GDPR); the legal basis of of direct marketing 3) is consensus (art. 6 par. 1 lett. a) GDPR); the legal basis of profiling (not automated) 4) is consensus (art. 6 par. 1 lett. a) GDPR).
Without having first obtained the consensus of the data subject, personal data of the individual will not be used for purposes pertaining to point 3. and/or 4. At the time of supply of personal information, the data subject has the option of choosing in favour of this service.

4. CATEGORY OF RECIPIENTS OF PERSONAL DATA AND THEIR DIFFUSION
Data will not be diffused, but may be communicated by Unopiù S.p.A. to companies with contracts with Unopiù S.p.A. and/or companies belonging to the Unopiù group, to third parties belonging to the following catagories: those responsible for actions directly connected and instrumental in the execution of the contract with which Unopiù S.p.A or other companies of the Unopiù Group have stipulated commercial agreements for the execution of the contract, particularly shipping agents, direct marketing, call centres and managers of internet activities; - individuals that supply services for the management of information systems and telecommunication networks used by Unopiù S.p.A. (including therein electronic post); - also external individuals for the management and archiving of documentation both on paper and computer; - individuals whose job is to assist clients; - agencies and public Administrations that verify and control compliance with fiscal and civil obligations. Individuals who fall within these categories are Responsible for data processing, or operate in total autonomy as distinct Processing Officials. The list of those responsible for this processing is continually being updated and is available at both the Registered and Operational offices of Unopiù S.p.A. Any other communication or diffusion will only occur after your direct consent.

5. TRANSFER OF DATA OUTSIDE THE EU
Your personal details could be transferred outside the area of the European Union, even to Countries where the level of protection of personal data could be inferior to that guaranteed by European regulations.
In any case, this transfer will take place respecting adequate guarantees for the protection of your data and in particular of the standard contractual clause approved by the EU Commission through decision no. 2010/87/CE and in accordance with arts. 45-47 and 49 of the GDPR.

6. PERIOD OF CONSERVATION OF PERSONAL DATA
Processing will be carried out both automatically and manually, with specific means and instruments to guarantee maximum security and confidentiality, by individuals who have been especially employed to comply with the provisions of art. 32 GDPR.
The conservation period of your data will be limited to the time necessary to carry out the various processing purposes or as required by law (current civil, fiscal and tax obligations).
For the purpose of point no. 1 of the previous paragraph no. 3, information relative to your purchases will be processed for no longer than 10 years from the date of collection.
For the purpose of points no. 2., 3., and 4. of the previous paragraph no. 3, your personal and contact details will be processed until such time as you decide to revoke your consent (or for 24 months).

7. THE RIGHTS OF DATA SUBJECTS
You can claim your rights as expressed in EU Regulation 2016/679, by addressing the Official, sending an e-mail to the address privacy@unopiu.it or by writing to the Processing Official at the above mentioned Office.
In particular, you have the right, at any time, to ask the Processing Official for access to your personal data (art. 15), rectification (art. 16) or cancellation (art. 17) of same and the limitation of processing (art. 18). Besides, you have the right to data portability (art. 20) and the right to oppose their processing (art. 21), as specified in detail below:
Right of access
You have the right to know whether your personal details are being processed or not and in this case obtain access to personal data and receive information contained in the present Privacy Policy.
Right to rectification
You have the right to obtain, without unjustified delay, the rectification of your own incorrect personal details.
Right to cancel
You have the right to cancel your personal data, without unjustified delay, if one of the following reasons exists:
a) personal data are no longer required for the purpose for which they were collected or otherwise processed;
b) you have withdrawn your consent for processing and there is no other legal basis for this processing;
c) you are opposed to processing and there is no legitimate prevailing reason for processing to continue;
d) the personal data were illicitly processed;
e) the personal data must be cancelled to satisfty a legal obligation;
Right to limit processing
You have the right to obtain the restriction of processing in the following hypothesese:
a) you dispute the exactness of the personal data, for the period necessary for the Processing Official to verify the exactness of this personal data;
b) the processing is illicit and you oppose cancellation of the personal data and request that their use be limited;
c) although the Official no longer needs them for processing purposes, your personal data are necessary to ascertain, carry out or defend a right under law;
d) you are opposed to the processing, awaiting verification of the possible priority of our legitimate reasons;
Right to opposition
You have the right to oppose at any given time the processing of your personal data carried out for direct marketing purposes, including profiling if connected to marketing purposes.
Right to data portability
You have the right to receive in a structured format, in the normal way and legibile by an automatic device, your personal data in our possession and have the right to transmit this data to another processing official without impediment on the part of the Processing Official to whom you have supplied your data if:
a) processing is based on consent or contract; and
b) processing is carried out by automated means.
At your request, and if technically possible, you can obtain the direct transmission of personal data to another processing proprietor.
In any case, in order not to receive further automatic direct marketing communications (e-mail, SMS, MMS or by other means) it will suffice to write an email at any time to privacy@unopiu.it with the subject “cancellation from automation” or use our automatic email cancellation system and you will no longer be disturbed. In order not to receive traditional direct marketing communications (telephone calls from an operator, traditional post) it will suffice to write an email to privacy@unopiu.it at any time with the subject “traditional cancellation” and you will no longer be disturbed. In order not to receive direct marketing communicatons it will suffice to write a mail to privacy@unopiu.it at any time with the subject “marketing cancellation” and you will no longer be disturbed. To be excluded from profiling activity at any time, just write a mail to privacy@unopiu.it with the subject “no profiling”.

8. WITHDRAWAL OF CONSENT
If processing is based on consent, you have the right to revoke consent at any time without prejudicing the legality of processing based on consent given before this withdrawal.

9. RIGHT TO LODGE CLAIMS
You have the right to lodge claims to a control authority.

10. NATURE OF CONFIRMATION AND REFUSAL
It is necessary to confirm data for the purpose of point a) to be able to take advantage of Unopiù S.p.A services. Possible refusal of confirmation of data necessary for point a) means being unable to access Unopiù S.p.A. services. Confirmation and consent of processing for points 2., 3., and 4. from the previous paragraph no 3. is optional. Possible refusal of consent for points 2. and/or 3. from the previous paragraph no. 3 means one cannot be supplied with the requested services.

11. AUTOMATED DECISIONAL PROCESS
There is no totally automated decisional process because, through the intervention of an operator, Unopiù S.p.A. carries out profiling, in particular elaborating consumer profiles and consumer choices to improve sales and services.

12. MODIFICATIONS TO THE PRIVACY POLICY
The Privacy Official reserves the right to modify, update, add or remove part of the present privacy policy at his discretion at any given moment. The interested party must periodically verify possible modifications to this page.

Privacy Policy updated on 25.05.2018.