DATA CONTROLLER.

Below is the information pursuant to Article 13 of EU Regulation 2016/679 ("GDPR"), concerning the protection of the processing of personal data collected from the data subject.

The data controller is Cristiano Corsini - registered office: Via Taddeini, 222 - 50025 Montespertoli (Fi) P.IVA 06407560488, tel. 3357406648, e-mail: info@ceramicadesign.shop.

DATA PROTECTION OFFICER.

Since we do not fall within the cases specified in Article 37 of EU Reg. 2016/679, also taking into account the indications of the WP243 guideline, the Data Protection Officer has not been designated.

LEGAL BASIS, PURPOSE AND OBLIGATION OF PROCESSING.

The processing of your personal data in our possession or which will be requested from you or communicated to us by you or third parties will be carried out in order to fulfil: Legal obligations: invoicing, entries, records and other administrative/accounting purposes; Contractual obligations: supply of goods and/or services; Fulfilment of a request made by the data subject. The communication of the data constitutes a legal obligation with regard to administrative/accounting operations and an essential requirement with regard to contractual obligations, so the expression of consent is not necessary. Failure to provide personal data will result in the impossibility of fulfilling contractual obligations.

LAWFULNESS OF PROCESSING.

The processing is lawful because: The processing is necessary for the performance of a contract to which the data subject is party or of pre-contractual measures required by the data subject; The processing is necessary for compliance with a legal obligation to which the data controller is subject; The processing is necessary for the pursuit of a legitimate interest (performance of a contract, pursuit of its corporate purpose).

RECIPIENTS OF PERSONAL DATA.

Personal data are processed not only by the personnel in charge within the company, but also by the following subjects to whom they may be communicated tax, legal and labour consultants; consultants for specific areas (health and safety in the workplace, maintenance/administration of computer hardware/software systems, auditing); subjects who can access your data by virtue of regulatory provisions; control bodies, also following inspections or audits; transport and logistics companies (in performance of contractual obligations); companies or professional contractors or subcontractors (in performance of contractual or regulatory obligations). The names of the subjects listed above are available at any time upon request by the interested party. .

TRANSFER OF PERSONAL DATA TO THIRD COUNTRIES OR INTERNATIONAL ORGANISATIONS.

Personal data will not be transferred outside the European Community or to international organisations.

PERIOD OF RETENTION OF PERSONAL DATA

The duration of data retention, where there are no legal obligations or where no request for deletion is received from the data subject, is determined on the basis of the existence of the purposes referred to in letter "c", the need for the regular performance of work or on the basis of specific legal obligations.

RIGHTS OF THE DATA SUBJECT

The data subject has the right at any time to request access, rectification and portability of personal data concerning him/her, as well as to object to the processing, revoke consent or lodge a complaint with the Data Protection Authority.

AUTOMATED DECISION-MAKING PROCESSES.

Data are not processed by automated processes.