PRIVACY POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA
PURSUANT TO ART. 13 OF EU REGULATION 679/2016 (GDPR)

As required by Article 13 of the European Union General Data Protection Regulation 2016/679 (hereinafter also the “Regulation” or “General Data Protection Regulation” or “GDPR”), before proceeding with the processing of personal data (hereinafter also “Data”), the Data Subject (user of the website proagri.eu) must be informed that their Data collected through the website are processed by Interiors Italia Srl using IT and/or telematic tools, for the purposes indicated in this policy. To this end, the prepared privacy policy is submitted to the Data Subject (hereinafter also “the Controller”).

1. Data Controller and Data Protection Officer

The Data Controller is Interiors Italia Srl, with registered office in Via K. Marx 15F - 06012 Città di Castello - PG. For further information regarding the rights of the Data Subject, please refer to the section entitled “Rights of the Data Subjects” of this policy.

2. Legal Basis and Purposes of Processing

The Data you provide while browsing the website intriorsitalia.it are processed by the Controller in accordance with current regulations. The legal basis of the processing is identified in the provision of its services by Interiors Italia Srl, in the management and facilitation of the website, in the management of the reserved areas present on the site, and in your consent, where given, to the processing of your Data. The processing of your Data by Interiors Italia Srl is aimed at pursuing the following purposes:

• “Contact Interiors Italia Srl” section: in the event that you decide to contact us through the specific area of the Interiors Italia Srl website, the Data you provide by filling out the appropriate form may be processed by the Data Controller to fulfill your request and provide you with feedback regarding it. In this context, the legal basis of the processing is identified in the Controller's interest to fulfill your request for information;
• “Subscribe to the newsletter” section: in the event that you decide to subscribe through the specific section of the proagri.eu website, the Data you provide will be processed by the Data Controller for sending commercial data and related updates. In this context, the legal basis of the data processing is identified in the relationship established between you and Interiors Italia Srl through the subscription to the Newsletter service.

3. Processed Data

On the website, in particular:

• Name, surname, e-mail address: in the event that you wish to contact us via the “Contacts” section.
• E-mail address: in the event that you request a subscription to the Newsletter service.
• Personal data: for information requests or to join marketing campaigns.

4. Nature of the Processing

In relation to the purpose referred to in point 1) of paragraph 2 “Legal basis and purposes of processing”, the provision of Data is mandatory. Your refusal to provide the Data would make it impossible to take charge of and subsequently fulfill your request for information.

In relation to the purpose referred to in point 2) of paragraph 2 “Legal basis and purposes of processing”, the provision of Data is mandatory. Your refusal to provide the data would make it impossible to subscribe to the newsletter service.

5. Methods of Processing and Data Retention

The processing of Data is carried out by the Controller in compliance with the provisions of the legislation currently in force. The Controller processes the Data using IT and/or telematic tools and with organizational and logical methods strictly related to the pursuit of the purposes indicated in this policy, as well as by adopting appropriate security measures to prevent unauthorized access, disclosure, modification, or destruction of the Data, their loss, and their illicit and incorrect use. Interiors Italia Srl also undertakes to process the Data according to the principles of fairness, lawfulness, and transparency, to collect them to the extent necessary and exact for the processing, and to allow their use only by authorized personnel for this purpose. The management and storage of the acquired Data will take place in archives or on servers located within the European Union owned by the Controller and/or by third-party companies appointed as External Data Processors and, in any case, currently located in Italy.

In relation to the different purposes for which they are collected, the Data will be kept for the time strictly necessary to achieve them and, in any case, in accordance with the current regulatory provisions. In any case, Interiors Italia Srl takes care to avoid using the data indefinitely by proceeding, on a periodic basis, to verify the actual permanence of the interest of the subject to whom they refer.

6. Recipients and Data Processors

Collected Data will not be disseminated or communicated to Third Parties in any way, except in the cases provided for by the policy and/or by law and, in any case, in the manner permitted thereby. The Data will be processed within the limits and for the purposes described by the employees of Interiors Italia Srl. Some Data processing may also be carried out by third parties, acting as Data Processors, specifically designated by the Controller and which the Controller uses or could use in the management of the contractual relationship, the provision of the services offered, and for organizational needs of its activity. In particular, the Data could be communicated, by way of example, to

• Subjects who need to access the Data for purposes related to the existing contractual relationship between the parties, within the limits strictly necessary for the performance of auxiliary tasks (such as, for example, banks and credit institutions, technical service providers, hosting providers, IT companies, communication agencies, postal couriers, and shipping companies);
• Consultants, within the limits necessary for the performance of their professional assignment.

Public and private subjects may also access them if access to them is mandatory pursuant to provisions of law, regulations, or EU legislation, within the limits established by these rules.

7. Transfer of Data Abroad

The Data will not be transferred outside the European Union. It is understood in any case that the Controller, where necessary, will have the right to move the location of the servers to non-EU countries. In this case, the Controller guarantees from now on that the transfer of non-EU Data will take place in accordance with Articles 44 et seq. of the GDPR and the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection.

8. Data Subject's Rights

As the Data Subject of the Data processing, we inform you that you have the possibility to exercise the rights provided by the GDPR, and specifically:

• The right, pursuant to Art. 15, to obtain confirmation as to whether or not Data concerning you is being processed and, in this case, to obtain access to the Data and the following information: i) the purposes of the processing; ii) the categories of Data in question; iii) the recipients or categories of recipients to whom the Data have been or will be communicated, in particular if third countries or international organizations; iv) where possible, the envisaged period for which the Data will be stored, or, if not possible, the criteria used to determine that period; v) the existence of the right to request from the Controller rectification or erasure of Data or restriction of processing concerning the data subject or to object to such processing; vi) the right to lodge a complaint with a supervisory authority, pursuant to Articles 77 et seq. of the GDPR; vii) where the Data are not collected from the Data Subject, any available information as to their source; viii) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) of the GDPR and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the Data Subject; ix) the right to be informed of the appropriate safeguards pursuant to Article 46 of the GDPR relating to the transfer, if the Data are transferred to a third country or to an international organization;
• The Data Subject will also have (where applicable) the right to exercise the rights referred to in Articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object).

The Data Subject may at any time exercise the aforementioned rights and request the updated list of Data Processors by sending a request to the following e-mail address: inf@interiorsitalia.it

Interiors Italia Srl undertakes to respond to the Data Subject's requests within one month from receipt of the request, except in cases of particular complexity for which it could take a maximum of three months. In any case, the Data Controller will provide the Data Subject with evidence of the reason for the delay within one month of the request. The outcome of the request will be provided in writing or in electronic format. In the case of a request for rectification, cancellation, as well as limitation of processing, the Data Controller undertakes to communicate the results of the requests received from the Data Subject to each of the recipients of your Data, unless this proves impossible or involves a disproportionate effort.

9. Changes to this Policy

The Data Controller reserves the right to make changes to this Privacy Policy at any time by advertising them to users on the Interiors Italia Srl website. Therefore, please consult this page often, referring to the date of the last modification indicated at the end of the document.

Interiors Italia Srl