Privacy Policy

INFORMATION PURSUANT TO ART. 13-14, GDPR UE / 2016/679 and Legislative Decree 101/2018 The European Regulation EU / 2016/679 (hereinafter “ Regulation “) establishes rules relating to the protection of individuals with regard to the processing of personal data, as well as rules relating to the free circulation of such data. In compliance with the principle of transparency provided for by art. 5 of the Regulations, Good For Puglia by Raffaele Asselta Via Madrid, 33 76123 Andria (BT), as Data Controller, provides you with the information required by art. 13 and 14 of the Regulation. Purpose of the processing The processing of your personal data will be based on principles of correctness, lawfulness and transparency, protecting your privacy, your rights and in accordance with the privacy policy of the Entity / Company. The Entity / Company also undertakes to process your data in compliance with the principle of “minimization”, or by acquiring and processing the data limited to what is necessary with respect to the following purposes:

• For the treatment Customer management :

1. Personal safety
2. Sending information / advertising material
3. Complaint Management
4. Customer Contracts Management
5. After-sales assistance activities
6. Activities of sending information on new services / products
7. Management of tax compliance
8. Protection of company assets

Treatment	Customer Management
Criteria	Purpose	Consent
the processing is necessary for the pursuit of the legitimate interest of the data controller or of third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data do not prevail, in particular if the interested is a minor	• Personal safety • Protection of company assets	In relation to the related purposes, the processing may be carried out without your consent
the interested party has given consent to the processing of their personal data for one or more specific purposes	• Sending information / advertising material • Sending information on new services / products	In relation to the related purposes, the processing can only be carried out if the interested party has given consent to the processing of their personal data.
the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same	• Management of complaints • Management of contracts with customers • After-sales assistance activities	In relation to the related purposes, the processing may be carried out without your consent
the processing is necessary to fulfill a legal obligation to which the data controller is subject	• Management of tax compliance	In relation to the related purposes, the processing may be carried out without your consent

• For the treatment Privacy Compliance :

1. Management of obligations regarding the protection of personal data

Treatment	Privacy Compliance
Criteria	Purpose	Consent
the processing is necessary to fulfill a legal obligation to which the data controller is subject	• Management of obligations regarding the protection of personal data	In relation to the related purposes, the processing may be carried out without your consent

The provision of your personal data and consent to the processing is mandatory, for the purposes of:

• For the treatment Customer management :

1. Personal safety
2. Complaint Management
3. Customer Contracts Management
4. After-sales assistance activities
5. Management of tax compliance
6. Protection of company assets

• For the treatment Privacy Compliance :

1. Management of obligations regarding the protection of personal data

and your refusal to provide the data will result in the total impossibility of signing the contract. The provision of your personal data and consent to the processing for the purposes of:

• For the treatment Customer management :

1. Sending information / advertising material
2. Activities of sending information on new services / products

it is optional and your refusal does not prevent the correct stipulation and subsequent execution of the contract. Processing methods The processing of your personal data will be carried out using paper and IT tools in compliance with the provisions on the protection of personal data and, in particular, with the appropriate technical and organizational measures referred to in art. 32.1 of the Regulations, and with the observance of any precautionary measures that guarantee their integrity, confidentiality and availability. Source from which the data originate

Treatment	Customer Management
DATA COLLECTED FROM THE INTERESTED PARTY	DATA COLLECTED FROM THIRD PARTIES
TYPE OF DATA	SOURCE
Customers

Treatment	Privacy Compliance
DATA COLLECTED FROM THE INTERESTED PARTY	DATA COLLECTED FROM THIRD PARTIES
TYPE OF DATA	SOURCE
Customers

Categories of recipients Your personal data may be communicated, in close relation to the purposes indicated above, to the following subjects or categories of subjects:

• For the treatment Customer management :

1. Banks
2. Consultants and freelancers also in associated form
3. IT services company

We also inform you that:

• the communication of your data to the categories of subjects referred to in letters c) constitutes a legal obligation which the Data Controller must comply with;
• the communication of your data to the categories of subjects referred to in letters a), b), c) is necessary to execute the contract to which you are a party.
• For the treatment Privacy Compliance :

1. Police Forces

In relation to these categories of recipients, the Data Controller undertakes to rely exclusively on subjects who provide adequate guarantees regarding data protection, and will appoint them as Data Processors pursuant to art. 28 of the Regulation. The list of Data Processors is available at the Institution / Company and can be viewed upon request to the Data Controller. Furthermore, your data will be processed, exclusively for the aforementioned purposes, by the employees and / or collaborators of the Body / Company, specifically authorized and instructed by the Data Controller pursuant to art. 29 of the Regulation. Your personal data will not be disseminated, except when required by a law or regulation or by community legislation. Transfer of personal data

• For the treatment Customer management :

Your personal data will not be transferred to non-European countries or to international organizations.

• For the treatment Privacy Compliance :

Your personal data will not be transferred to non-European countries or to international organizations. Retention period

Treatment	Customer Management
DATA CATEGORIES	STORAGE PERIOD	REGULATORY REFERENCES
Contact details for credit and debit cards	Art. 5.1 letter e) EU Reg. 2016/679: personal data must be kept for a period of time not exceeding the achievement of the purposes for which they are processed	Reg. 2016/679 General Regulation for the Protection of Personal Data
Personal data (name, surname, sex, place and date of birth, residence, domicile)	Art. 5.1 letter e) EU Reg. 2016/679: personal data must be kept for a period of time not exceeding the achievement of the purposes for which they are processed	Reg. 2016/679 General Regulation for the Protection of Personal Data
Identification documents details	Art. 5.1 letter e) EU Reg. 2016/679: personal data must be kept for a period of time not exceeding the achievement of the purposes for which they are processed	Reg. 2016/679 General Regulation for the Protection of Personal Data
Data relating to the sales contract (contract value, object, terms, conditions, etc.)	10 years	Art. 2946 of the Italian Civil Code Ordinary limitation period
Contact details (telephone number, e-mail, etc.)	Art. 5.1 letter e) EU Reg. 2016/679: personal data must be kept for a period of time not exceeding the achievement of the purposes for which they are processed	Reg. 2016/679 General Regulation for the Protection of Personal Data
Bank details	Art. 5.1 letter e) EU Reg. 2016/679: personal data must be kept for a period of time not exceeding the achievement of the purposes for which they are processed	Reg. 2016/679 General Regulation for the Protection of Personal Data
Video recordings

Treatment	Privacy Compliance
DATA CATEGORIES	STORAGE PERIOD	REGULATORY REFERENCES
Contact details (telephone number, e-mail, etc.)	Art. 5.1 letter e) EU Reg. 2016/679: personal data must be kept for a period of time not exceeding the achievement of the purposes for which they are processed	Reg. 2016/679 General Regulation for the Protection of Personal Data
Bank details	Art. 5.1 letter e) EU Reg. 2016/679: personal data must be kept for a period of time not exceeding the achievement of the purposes for which they are processed	Reg. 2016/679 General Regulation for the Protection of Personal Data

Automated decision making

• For the treatment Customer management :

We also inform you that in relation to the purposes of:

• Personal safety
• Sending information / advertising material
• Complaint Management
• Customer Contracts Management
• After-sales assistance activities
• Activities of sending information on new services / products
• Management of tax compliance
• Protection of company assets

the processing of your data will be carried out through an automated decision-making process that will follow the following logic: THE COMPANY USES IT TOOLS FOR DATA ACQUISITION; IN SUBSTANCE FOR THE SALE AND MANAGEMENT OF THE SERVICES OFFERED. Rights recognized to the interested party. At any time you can exercise, towards the Data Controller, your rights provided for by articles. 15-22 of the Regulation. In particular, at any time, you will have the right to request:

• access to your personal data;
• their correction in case of inaccuracy;
• deletion;
• the limitation of their treatment.

It will also have:

• the right to object to their processing if processed for the pursuit of a legitimate interest of the Data Controller, if they believe their fundamental rights and freedoms have been violated;
• the right to withdraw your consent at any time in relation to the purposes for which this is necessary;
• the right to the portability of your data, i.e. the right to request and receive your personal data in a structured format, commonly used and readable by an automatic device.

Identity and contact details of the Data Controller

• For the treatment Customer management :
• The Data Controller is: Good For Puglia di Raffaele Asselta , registered office: Via Madrid, 33 76123 Andria (BT), tel .: 3663200193, e-mail: info@goodforpuglia.com < / li>
• For the treatment Privacy Compliance :
• The Data Controller is: Good For Puglia di Raffaele Asselta , registered office: Via Madrid, 33 76123 Andria (BT), tel .: 3663200193, e-mail: info@goodforpuglia.com < / li>

Contact details of the Data Protection Officer For all questions relating to the processing of your data and the exercise of your rights deriving from the Regulations, you can contact the Data Protection Officer (DPO) at the following email address: info@goodforpuglia.com