Information document referring to art. 13 of the 2016/679 EU Regulation (GDPR)

This page describes how to handle personal data processed by Gram Equipment Italia S.R.L., Via Luigi Einaudi, 5, 20068 Peschiera Borromeo MI, can be contacted for each reply to the telephone number +39 02 6630 7120, email address sales@gram-equipment.com and through the section of the site dedicated to the privacy of the link https://catalogue.gram-equipment.com/gdpr-privacy-center/

The data processed by GRAM directly supplied by the interested parties are processed for the following purposes:

1. Performing activities and services related to the business object (legal basis execution of the contract)
2. Performing activities and services requested by the interested parties in the form within the sites managed by GRAM (legal basis for consent)
3. Fulfillment of legal obligations (legal basis execution of the contract)
4. Prevent fraud and abuse (legal basis legitimate interest to prevent fraud)
5. Sending newsletters or advertising material concerning the product or service for which the user has expressed interest – e.g. releasing personal data in the dedicated forms of the sites, registering in special lists at trade fairs or conventions, attending meetings at the company headquarters. (legal basis consent)

Navigation data automatically detectable by the sites managed by GRAM reachable through

are used for the sole purpose of obtaining anonymous statistical information on the use of the site and are stored by the data collector for 180 days and then deleted. (legal basis: consent issued through the acceptance of cookies referred to in privacy center of our site )

Data collected from publicly accessible sources may be processed for sending newsletters or advertising material; in this case, at the same time, the interested party is given the opportunity to be excluded from the list. (legal basis legitimate interest to make known their products)

The consent issued by the interested party can be revoked at any time without prejudice to the lawfulness of the treatment given before the revocation.

The provision of data is not mandatory, it takes place on a voluntary basis, but it is necessary to allow the provision of the requested services or products.

Failure to provide the Data does not allow the management of contractual or pre-contractual relationships or the provision of services or products of GRAM.

Personal data may be communicated to:

Our. responsible for the maintenance of IT systems;

Our. telecommunications operator;

Our administrative Office for administrative purposes;

Our Law Firm for what concerns the contractual and regulatory obligations;

Our Accounting firm for accounting and tax obligations;

Our Reference banking institutions for the management of contractual obligations;

Our employees in the context of the authorization profiles expressly envisaged;

Legal representatives of our Company, their collaborators and commercial partners for communications, contacts, commercial or contractual issues.

No data collected will be disseminated.

All personal data are processed at the headquarters of the owner and are only handled by technical staff specifically charged to this; the data are not transferred to third countries except in cases where, due to specific web services required such as the creation of sites, they must transit on servers located outside the European Union; in these cases GRAM relies on Amazon server, which ensures the positioning of the servers in countries considered appropriate by the European Commission and whose information is referred to for more details https://aws.amazon.com/it/compliance/eu-data -protection /

The processing of data will be carried out on paper and with the help of latest-generation computer systems, which will use Apple and Microsoft applications, for the time strictly necessary to achieve the purposes for which they were collected.

Specific security measures according to the law are observed to prevent the loss, damage or destruction of data, the illegal or unauthorized use of the same, unauthorized accesses.

The personal data necessary for the execution of contracts or pre-contractual measures of which the interested party is a party are held for the period necessary for their satisfaction and archived for the period required by law

Personal data optionally released by interested parties, which can be highlighted on commercial offers, newsletters, email addresses, are kept by the holder for the period necessary to perform the purposes for which they were released.

At any time the interested party can revoke the consent given, without prejudice to the impossibility for the owner to satisfy the previously permitted purposes.

The GDPR recognizes a series of rights, namely:

You have the right to access your data, to request correction, deletion or limitation of processing, to oppose their processing; You also have the right to the portability of your data. To better understand these rights, we remind you that they are listed in Articles 15 (right of access), 16 (right of rectification), 17 (right to cancel), 18 (right to limit the processing), 20 (right to the portability of data) and 21 (right of opposition) of the GDPR.

Furthermore, you have the right to lodge a complaint with the supervisory authority responsible for this, namely the Data Protection Authority https://www.cnil.fr/

We like to point outl that the rights referred to in the previous point may be exercised by contacting the Data Controller also through the pages of our website by connecting to the following link https://catalogue.gram-equipment.com/gdpr-privacy-center/