Following artt. 13 and 14 of Regulation (EU) 2019/679, Embit s.r.l. (“we”, “us”, “the Company”) located in Modena, via Emilia Est 911-41122, P.IVA 02938050362, PEC embit@pec.confindustriamodena.com, as Data controller, informs you that personal data acquired with reference to quote request on Embit s.r.l. website, will be processed in compliance with the aforementioned law. With regards to the aforementioned treatment, it provides the following data.

Personal Data We inform you that the following data will be processed:

• Identification data: business name
• personal data: name and e-mail address

The aforementioned data were provided directly by the data subject

Purpose of the treatment
The purposes of personal data process are as follow:

• To carry out economic bargaining aimed at the quotation proposal and the possible subsequent
• subject to free and autonomous consent of the interested party, send promotional and advertising material by e-mail, send information regarding the products and services of the Data Controller and any other initiatives, commercial or otherwise, promoted by the same for marketing activities;

Methods of data processing
The provision of data and the related processing will be carried out in full compliance with the confidentiality and the information transmitted by the interested party. The Data Controller commits to not disclosing such information to unauthorized persons, nor to use it for purposes other than those for which it was collected or to transmit it to third parties.

Personal data processed in paper, computerized, electronic or video format and inserted in the relevant databases (customers, suppliers, administration, etc.) may be known and processed by the personnel of the Data Controller assigned to sales, delivery and / or shipment of the products, administration, marketing office and data controller (owner of Embit srl). Personnel dedicated to marketing activities can possibly access data, if specific consent is given. The aforementioned personnel is expressly designated by the writer as authorized persons to the processing of personal data, which may carry out operations of consultation, use, processing, comparison and any other appropriate operation, even automated, in compliance with the law.

Legal basis and nature of the provision of data
Data processing is based on legal basis that expresses the need to execute a contract of which the data subject is a party; or the need to execute pre-contractual measures taken at the request of the data subject, as well as by laws, regulations or collective or individual contracts, or by the Community legislation. To fulfill the requirements of legal and contractual obligations, the provision of data is mandatory. Any refusal to provide them, even if only partially, will result in the company being unable to execute the contract or to correctly perform all the obligations that derive from it. With reference to the marketing activities carried out by the Company, refusal to provide the data and / or refusal to consent their treatment will not allow advertising and information material to be sent.

Communication and dissemination of data
Without being in contrast with the communications made in compliance with legal and contractual obligations as well as the purposes already indicated, all data collected and processed may be communicated within the EU and transferred to non-EU countries exclusively for the purposes specified above to the following categories of recipients:

• Transport companies and forwarding agents regarding shipments of goods and customs procedures;
• Banks for receipts and payments management;
• Financial administrations and other companies or public bodies in fulfillment of regulatory obligations;
• Companies and law offices for the protection of contractual rights;

The obtained data will be stored for a period of time that will not exceed the maximum requested for the purposes for which they were collected or subsequently processed and in compliance with the prescription terms imposed by law. If the data is processed for marketing purposes, the data subject always has the right to revoke the consent given for that purpose and to object to the same processing for marketing purposes.

Rights of the interested parties
The interested party can exercise the rights referred to in articles 15 and following of EU Regulation 2016/679, including the right to request access to personal data, rectify, delete or limit them or to object to their treatment. The interested party can do it by directing each request to the administration by sending an e-mail to administration@embit.eu. The data subject also has the right to lodge a complaint with the competent supervisory authority on the subject, the Guarantor for the protection of personal data.