Privacy Policy
Pursuant to EU Regulation 679/2016 (the “GDPR“), Teruzzi Teo S.r.l., with registered office in (20861) Brugherio, via Belvedere, 30 (“Teruzzi Teo“) provides the following information on the processing by the same Teruzzi Teo of personal data (the “Data“) of users (the “Users“) registered on the restricted area (the “Private Area“) of the website https://teruzziteo.it/ (the “Site“).
Additional information may be provided where necessary if you make a request for a specific service.
Data controller and contact details
Teruzzi Teo is the data controller of the Users’ Data and can be contacted by mail at its registered office or by e-mail at info@teruzziteo.it.
Categories and types of Data collected and processed
The Data processed by Teruzzi Teo may include:
- personal and contact information (name and surname, email address, etc.);
Purposes and legal bases of the processing and nature of the conferment of the Data
Teruzzi Teo will process the Data to:
- assessing legal actions and defending itself in legal disputes. The legal basis for such processing is Teruzzi Teo’s legitimate interest in exercising and defending its rights, pursuant to Art. 6.1.b GDPR.
- to ensure the security of Teruzzi Teo’s IT environment and infrastructure, and to implement its compliance and risk management processes. The legal basis for this processing is Teruzzi Teo’s legitimate interest in protecting its business continuity, as well as its assets, from potential external risks, including regulatory risks, pursuant to Art. 6.1.f GDPR.
- to comply with legal and/or regulatory obligations applicable to Teruzzi Teo, pursuant to Art. 6.1.c GDPR.
The conferment of data for these purposes is necessary for the use of the website and in case of failure to provide them You will not be allowed access to it.
Who has access to the Data and with whom the Data are shared
The Data may be communicated:
- to third parties who need to perform specific activities in relation to the Data, in accordance with the purposes of the processing, or to provide services to Teruzzi Teo (IT services, hosting, etc.);
- to authorities, entities and/or subjects to whom the Data must be communicated, pursuant to binding legal or contractual provisions.
International Data transfers
As for the possible transfer of Data to countries outside the European Economic Area, the processing will take place according to one of the legally permitted methods and therefore through the selection of recipients established in countries considered adequate by the European Commission or through the stipulation of standard contractual clauses, as well as taking into account the recommendations of the European Data Protection Board.
Data retention period
The Data will be kept only for the time necessary for the purposes for which it was collected, respecting the principles of retention limitation and minimization defined in Article 5.1, letters c) and e) of the GDPR. In particular, the Data collected will be kept for a maximum of ten years after the termination of the relationship with the User.
In any case, the Data will be kept to comply with regulatory obligations and pursue the aforementioned purposes, in accordance with the principles of necessity, minimization and adequacy.
Teruzzi Teo may retain the Data after the end of the contractual relationship in order to comply with regulatory, contractual and/or tax obligations or in case of legal action.
Data subjects’ rights
Any Data Subject may exercise the following rights defined in Articles 15-22 GDPR by sending a written request to Teruzzi Teo at the above contact details:
- Access: you may obtain information regarding the processing of Your Data and a copy thereof.
- Deletion: you may request the deletion of your Data, to the extent permitted by law.
- Objection: you may object to the processing of your Data, based on your situation. In cases of objection to the processing of Data pursuant to art. 21 GDPR, Teruzzi Teo reserves the right to evaluate the request, which will not be accepted if there are legitimate reasons to proceed with the processing that override your freedoms and your interests and rights.
- Rectification: if you consider that your Data is inaccurate or incomplete, you may request that it be amended accordingly.
- Limitation: you may request the limitation of the processing of your Data.
- Data Portability: where legally applicable, you may have the Data returned to you or, where technically feasible, transferred to a third party.
If you believe that the processing of your Data is contrary to applicable law, you may lodge a complaint with the relevant data protection authority.
Last update: april 13th, 2023.