Information Notice Newsletter

With reference to the processing of personal data provided by you under the contract signed with PERFORMANCE iN LIGHTING S.p.A., the company wishes to provide you, as the data subject, (the “Data Subject”), with the following information pursuant to Article 13 of Regulation (EU) 2016/679 (“GDPR”).

1. DATA CONTROLLER

The data controller is PERFORMANCE iN LIGHTING S.p.A. (the “Data Controller”), tax code and VAT number 08517220011, with registered office in Via Domenico Bosatelli, n. 1 - 24069 Cenate Sotto (BG) – Italy, email address: privacy.it@pil.lighting.

The Data Controller, as part of its organizational structure, appoints the Authorised Persons for the processing of personal data, assigning them specific tasks and roles by means of a specific deed of appointment.

2. DATA PROTECTION OFFICER

The Data Controller has appointed a Data Protection Officer (“DPO”) pursuant to Articles 37 – 39 of GDPR. If necessary, the DPO may be contacted at the following email address: dpo@pec.pil.lighting.

3. CATEGORIES OF PERSONAL DATA PROCESSED

The personal data ("Data") being processed are the following:

• Common personal data: such as forename and surname, job title and contact details.

4. PURPOSE OF PROCESSING AND LEGAL BASIS

The Data processing is carried out on the basis of the following purposes:
a)   Sending communications related to services and products offered by the Data Controller (newsletter).

The processing of Data by the Data Controller for the aforementioned purpose is based on the following legal bases:
‐ Purposes relating to point d) above, the processing is based on: consent (art. 6, par. 1, lett. a) of GDPR).

5. METHODS OF PROCESSING PERSONAL DATA

The Data will be processed by the Data Controller both in paper and digital form. The Data Controller may carry out operations of collection, registration, organization, storage, consultation, processing, modification, extraction, comparison, use, interconnection, communication, erasure and destruction and any other appropriate operation in compliance with the provisions of the law necessary to guarantee the confidentiality and security of the Data as well as their accuracy, updating, and relevance to the stated purposes.

6. PERSONAL DATA STORAGE PERIOD

The Data will be stored according to the specific purposes for which they are processed, in particular:

• Purposes mentioned above in letter a): the Data will be stored until withdrawal of the consent given by the Data Subject, in accordance with Article 7 par. 3 of GDPR and, in any case, for 24 months from the collection.

N.B.: If, in the event of litigation, it is necessary to ascertain, exercise or defend the rights of the Data Controller, the retention period of the Data collected, for the above purposes, may be extended due to the possibility that in that time frame it may be necessary to prepare defensive elements. In that case, the retention of said Data will take place exclusively until the conclusion of the litigation.

After the retention period has expired, the Data will be destroyed, erased, or anonymized.

7. CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA

The Data collected by the Data Controller, within the scope of the above-mentioned purposes, may be communicated to one or more of the categories of subjects appointed as Data Processors as indicated in detail below, such as, for example:

• External companies offering email services.
• External companies offering website maintenance services.
• External companies offering marketing and telemarketing services.

The Data may be communicated to external subjects acting as autonomous Data Controllers, for example authorities and supervisory and control bodies and, in general, subjects, either public or private, entitled to request the Data.

A complete and up-to-date list of Autonomous Data Controllers, Data Processors and Data Recipients in any capacity (art. 4, n. 9 of GDPR) can be obtained from the Data Controller’s offices or by writing to the email address: dpo@pec.pil.lighting.

8. TRANSFER OF PERSONAL DATA OUTSIDE OF EEA

The Data will be processed within the European Economic Area (“EEA”). If, for technical and/or operational reasons, it is necessary to use parties located outside the EEA, the processing of the data will be regulated in accordance with the GDPR, therefore, all necessary precautions will be taken to ensure the protection of the Data, pursuant to Article 46 and following of the GDPR.

9. RIGHTS OF DATA SUBJECTS

The Data Subject, in relation to the Personal Data provided, has the right to exercise at any time and in accordance with the provisions of the GDPR the rights established by the latter and shown below:

• Right to withdraw consent (art. 7, par. 3 of GDPR): the right to withdraw the consent given without affecting the lawfulness of the processing based on the consent before revocation.
• Right of access by the data subject (art. 15 of GDPR): the right to obtain confirmation of the existence or otherwise of one’s Data, and a copy thereof in intelligible form.
• Right to rectification (art. 16 of GDPR): the right to correct inaccurate Data.
• Right to erasure, the “right to be forgotten” (art. 17 of GDPR): the right to the erasure of one’s Data.
• Right to the restriction of processing (art. 18 of GDPR): the right to obtain the limitation of the processing of one’s Data, e.g., if the accuracy of the Data is disputed or in the case of unlawful processing.
• Right to data portability (art. 20 of GDPR): the right to receive in a structured, commonly used, and machine-readable format their Data provided to the Data Controller and the right to transmit such Data to another Data Controller where the processing is carried out on the basis of consent or a contract and is done by automated means.
• Right not to be subject to automated individual decision-making (art. 22 of GDPR): the right not to be subject to a decision based solely on automated processing.

You may assert your rights as set out in the GDPR by contacting the Controller directly at the following email address: privacy.it@pil.lighting.

10. RIGHT TO LODGE A COMPLAINT (ART. 77 OF GDPR)

If the data subject considers that their rights have been compromised or infringed, or that the processing of their Data is contrary to applicable law, they have the right to lodge a complaint with the competent Data Protection Authority.

11. NATURE OF THE PROVISION OF PERSONAL DATA

The provision of Data by the Data Subject for the purposes indicated at letter a) is optional. The failure by the Data Subject to provide Data will result in the impossibility of receiving communications relating to the services offered by the Data Controller that may be of interest to you. The processing will be carried out by the Data Controller only with its express and unequivocal consent, without prejudice to your right to revoke the consent given at any time.