Privacy policy

Pursuant to Article 13 of EU Regulation 2016/679 of 27/04/2016, hereinafter referred to as GDPR (General Data Protection Regulation), Esquisito S.r.l., with registered office in via dei Carrettieri n. 11, Bologna (BO), Italy, as Data Controller, informs you about the following:

Purposes for the processing:
The personal data you provide will be used exclusively for the following purposes: a) stipulation and performance of the contract and all related activities, such as, by way of example, invoicing, credit protection, administrative, management, organizational and functional services for the performance of the contract; b) fulfilment of obligations under the law, regulations, applicable legislation and other provisions issued by authorities empowered by the law and by supervisory and control bodies.

The processing of personal data for the above purposes does not require your express consent (art. 6 letter. b) and e) of the GDPR).
Mandatory or optional nature of data provision and consequences of any refusal to provide personal data:
The data required for the purposes referred to in letters a) and b) above must be mandatorily provided for the fulfilment of legal obligations and/or for the conclusion and performance of the contractual relationship and the provision of services requested. Therefore, your refusal, even partial, to provide such data would make it impossible for the Controller to establish and manage the relationship and provide the requested service.

Methods of data processing:
The processing of personal data is carried out by means of the operations set out in art. 4 no. 2) GDPR, for the purposes mentioned above, both on paper and computer, by means of electronic or otherwise automated tools, in compliance with current legislation in particular on confidentiality and security and in accordance with the principles of correctness, lawfulness and transparency and protection of Consumer rights.
Processing is carried out directly by the organization of the controller, its managers and/or persons in charge.

Communication and Disclosure:
Personal data may be communicated, within the limits strictly pertinent to the obligations, tasks and purposes referred to above and in compliance with current legislation on the subject, to the following categories of subjects: 1. persons to whom such communication must be made in order to fulfil or to demand the fulfilment of specific obligations provided for by laws, regulations and/or Community legislation; 2. external natural and/or legal persons that provide services instrumental to the activities of the Controller for the purposes referred to above (e.g. agents, suppliers, consultants, carriers, bodies, professional firms). These persons will act as data processors. Personal data will in no way be disclosed.

Period of retention of personal data:
Personal data will be kept for the entire duration of the contract with the Controller, after which data will be kept for the completion of the terms required by law for the storage of administrative documents, and then will be deleted.

Data transfer:
Personal data are stored on servers located within the European Union. In any case, it is understood that the Controller, if necessary, will have the right to move the servers even outside the EU. In this case, the Controller hereby guarantees that the transfer of data to non-EU countries will take place in accordance with the applicable legal provisions, subject to the stipulation of the standard contractual clauses provided for by the European Commission.

Rights of the data subject:
As an interested party, you are entitled to the rights set out in Article 15 of the GDPR, namely the rights to:

1. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in intelligible form;

2. obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the case of processing carried out with the help of electronic means; d) the identity of the controller, managers and representative appointed pursuant to art. 5, paragraph 2 of Privacy Code and art.

3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or which can learn about them as appointed representative in the territory of the State, managers or agents;

3. obtain: a) the updating, rectification or, when interested, integration of data; b) erasure, anonymization or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) attestation that the operations set out in letters a) and b) have been notified, including their contents, to those to whom data were communicated, unless this fulfilment proves impossible or requires the use of means clearly disproportionate to the right being protected;

4. oppose, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of collection; Where applicable, you also have the rights set out in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right of restriction of processing, right to data portability, right to object), as well as the right to complain to the Supervisory Authority.

To exercise your rights under Art. 15 of the GDPR or for questions or information about the processing of your data and the security measures taken, you can in any case forward the request to our company at the following address:


ESQUISITO SRL
Bologna, Via dei Carrettieri 11
Tel.: +39 051.433005
Fax: +39 051.3514375
e-mail: info@numero10bags.it