Privacy Policy Italian Shower s.r.l.

​

Application of European Regulation No. 679 of April 27, 2016

​

General Data Protection Regulation (GDPR) concerning the protection of natural persons with regard to the

processing of personal data collected for the purpose of providing and using services and products.

Privacy Policy

This data processing policy document (privacy policy) describes the purposes and methods of processing the

personal data of customers, potential customers, and all stakeholders of ITALIAN SHOWER SRL.

Pursuant to EU Regulation 2016/679, the consent of the legal entity, organization, association, or similar

entity is required for the sending of advertising or direct sales material, for conducting market research, or

for commercial communication through the use of automated calling systems or communication without

operator intervention, as well as through electronic communications carried out via email, MMS (Multimedia

Messaging Service), SMS (Short Message Service), or other types.

Purposes and Methods of Processing

The data provided by the natural person, legal entity, organization, association, or similar entity and/or acquired:

 During the request for the first service and/or main service or during the contractual relationship;

 During a subsequent request for any additional main and/or supplementary service or during the

contractual relationship;

will be processed by ITALIAN SHOWER SRL to fulfill the request of the natural person, legal entity,

organization, association, or similar entity and/or for:

 Fulfilling obligations arising from both the initial and any subsequent contracts entered into;

 Compliance with legal obligations;

 Meeting specific requests before the conclusion of the contract;

 Activities related to and instrumental to the management of the contractual relationship, including

relationships related to any additional optional services and/or products requested by the natural

person, legal entity, organization, association, or similar entity.

For these purposes, the provision of data is necessary. Failure to provide data will make it impossible to supply the requested product and/or service.

​

ITALIAN SHOWER SRL may also use the data, with prior consent, for participation in quality surveys regarding the provision of services. However, the individual is free not to participate in such surveys and may also object free of charge to the processing of their data for this specific purpose by contacting the Data

Controller.

Furthermore, pursuant to the aforementioned regulation, the personal data provided are:

 Collected for specific, explicit, and legitimate purposes and subsequently processed in a manner that

is not incompatible with those purposes;

 Stored in a form that allows the identification of the data subjects for a period not exceeding the achievement of the purposes for which they are processed;

 Processed in a manner that ensures adequate security of personal data, including protection through

appropriate technical and organizational measures against unauthorized or unlawful processing and

against accidental loss, destruction, or damage.

 

CATEGORIES OF DATA: The company will process personal and sensitive health-related data communicated and collected in the contracts entered into between the parties.

​

SOURCE OF PERSONAL DATA: The personal data obtained by the company are collected directly from the data subject at the time of completing the contract for the provision of services and/or products.

​

DATA CONTROLLER: The data controller is ITALIAN SHOWER SRL, located at Via Edison, 27 - 27/a 25050 Provaglio d'Iseo (BS) - Italy, VAT and Tax Code 03524420985 | info@italianshower.com | PEC:

italianshower@legalmail.it

PURPOSES OF DATA PROCESSING AND LEGAL BASIS: The processing of data collected and stored in connection with the contract completion is based on the individual's consent and is carried out for the following purposes: provision of management system services; provision of consulting services for

management systems; responding to information requests; providing assistance and support services; sending

training, informational, and commercial communications; managing commercial profiling activities via the

website.

DATA RECIPIENTS: Within the limits of the aforementioned processing purposes, the collected data may

be communicated to partners, consulting companies, private companies, appointed as Data Processors by the

Data Controller. Your data will not be disclosed in any way. The Data Processors and the appointed persons

responsible for processing are specifically identified in the Privacy Document, which is updated periodically.

DATA TRANSFER ABROAD: The collected data will not be transferred abroad.

DATA RETENTION PERIOD: The collected data will be retained for a period not exceeding the

achievement of the purposes for which they are processed ("storage limitation principle," Art. 5, GDPR) or

based on deadlines provided by legal regulations and as specified in the privacy document. The obsolescence

of stored data is periodically reviewed in relation to the purposes for which they were collected.

DATA SUBJECT RIGHTS: The data subject has the right to request access, rectification, or deletion of

their personal data from the Data Controller, to restrict processing, to object to processing, to request data

portability, and to withdraw consent at any time by simply communicating with the Data Controller. The

data subject may also file a complaint with a supervisory authority.

MANDATORY OR OPTIONAL NATURE OF DATA PROVISION: The provision of data is mandatory

for the aforementioned purposes. Failure to provide mandatory data will result in the inability to provide the

requested service and/or product.

CONSENT: Consent to data processing is given by affixing a legible signature in the designated spaces. The

data subject has the right to withdraw consent at any time.

DATA PROCESSING METHODS: The personal data provided by the data subject will be processed in

accordance with the aforementioned regulations and confidentiality obligations to which the Data Controller

is bound. The data will be processed using both computerized tools and paper supports, as well as any other

suitable means, in compliance with appropriate technical and organizational security measures provided by

the GDPR.