NOTICE PURSUANT TO ARTICLE 13 OF REGULATION (EU) 2016/679 ON THE PROTECTION OF PERSONAL DATA AND REQUEST FOR CONSENT TO THE PROCESSING OF PERSONAL DATA COLLECTED FROM THE DATA SUBJECT.

This Privacy Policy is provided to inform you about the processing of your personal data.

The Data Controller is ARC S.r.l. (hereinafter, the “Controller”), with registered office at Via Bottego 38, Cognento (MO), Tax ID and VAT No. 01640020366, email: federico@arcsrl.com - Tel. +39 059341880, Fax +39 059341609

The Data Controller processes the personal identification data (e.g., first name, last name, company name, address, phone number, email address, bank and payment details)—hereinafter referred to as “personal data” or simply “data”—that you provide when entering into contracts for the sale of the Data Controller’s products.

Your personal data is processed without your express consent for the following Service Purposes:

• to conclude contracts for the sale of the Data Controller’s products;
• to fulfill pre-contractual, contractual, and tax obligations arising from existing relationships with you;
• to fulfill obligations required by law, regulation, EU legislation, or an order from the Authority (such as those regarding anti-money laundering);
• to exercise the Data Controller’s rights, such as the right to defend itself in court.

Please note that if you are already our customer, we may send you commercial communications regarding the Data Controller’s services and products similar to those you have already used, unless you object.

The processing of your personal data is carried out through the following operations: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, disclosure, erasure, and destruction of data.

Your personal data is processed both in paper and electronic form.

The Data Controller will process personal data for the time necessary to fulfill the purposes described above and, in any case, for no longer than 10 years from the termination of the relationship for Service Purposes.

Your data may be disclosed for the purposes set forth in point 2:

• to employees and collaborators of the Data Controller, in their capacity as data processors and/or system administrators;
• to third-party companies or other entities (such as, for example, credit institutions, professional firms, consultants, insurance companies providing insurance services, etc.) that perform outsourced activities on behalf of the Data Controller, in their capacity as “external data processors.”

Without the need for your express consent, the Data Controller may disclose your data for the purposes set forth in section 2.A) to supervisory bodies, judicial authorities, insurance companies for the provision of insurance services, as well as to those parties to whom disclosure is required by law for the fulfillment of the aforementioned purposes.

These entities will process the data in their capacity as independent data controllers.

Your data will not be disclosed.

I dati personali sono conservati in archivi informatici e non presso il Titolare o presso i destinatari indicati al punto 5, all’interno dell’Unione Europea. Resta in ogni caso inteso che il Titolare, ove si rendesse necessario, avrà facoltà di spostare gli archivi informatici (server) anche extra-UE.
In tal caso, il Titolare assicura sin d’ora che il trasferimento dei dati extra-UE avverrà in conformità alle disposizioni di legge applicabili, previa stipula delle clausole contrattuali standard previste dalla Commissione Europea.

Providing data for the purposes described in Section 2.A) is mandatory. Without such data, we will not be able to provide you with the Services or the Sale described in Section 2.A).

Providing data for the purposes described in Section 2.B) is, however, optional. You may therefore decide not to provide any data or subsequently withdraw consent to the processing of data already provided: in such a case, you will not be able to receive newsletters, commercial communications, and advertising material regarding the products offered by the Data Controller.

You will, however, continue to be entitled to the Services referred to in Section 2.A).

As a data subject, you have the following rights:

1. to obtain confirmation as to whether or not personal data concerning you exists, even if not yet recorded, and to receive such data in an intelligible form;
2. to obtain information regarding:
   a) the origin of the personal data;
   b) the purposes and methods of processing;
   c) the logic applied in the case of processing carried out with the aid of electronic tools;
   d) the identification details of the data controller and data processors;
   e) the subjects or categories of subjects to whom the personal data may be disclosed or who may become aware of it in their capacity as data processors or “persons in charge”;
3. obtain:
   a) the updating, rectification, or, where interested, the integration of the data;
   b) the erasure, anonymization, or blocking of data processed in violation of the law, including data no longer necessary for the purposes for which they were collected or subsequently processed;
   c) confirmation that the operations referred to in letters a) and b) have been brought to the attention, including with regard to their content, of those to whom the data have been communicated or disclosed, except in cases where this proves impossible or involves a manifestly disproportionate effort compared to the right being protected;
4. object, in whole or in part:<b

You may exercise your rights at any time by sending:

• a certified letter with return receipt to the Data Controller (see point 1);
• an email to federico@arcsrl.com