Privacy Policy
Subject: Pursuant to art. 13 of EU Regulation 2016/679, the personal data provided by you, concerning the contractual relationship and the provision of the service, may be subject to processing which will be processed in order to allow the management of the contractual relationship and the provision of the service in compliance with the legislation provided for by EU Regulation 679/2016.
Purpose: The personal data provided at the time of signing the contract will be used for the contractual purpose relating to the sale and assistance of electric and non-electric vehicles, research activities for the development of services and accessories to support the vehicles themselves, homologation activities and testing, including all technical, administrative, fiscal and organizational requirements necessary and connected to the processes and services indicated above.
Data controller: The data controller is Pretto Srl.
Method of processing and storage: The processing will be carried out using IT tools and paper, in compliance with the provisions of the art. 32 of the GDPR 2016/679 by specifically appointed individuals. We inform you that, in compliance with the principles of lawfulness, limitation of purposes and minimization of data, pursuant to articles. 5 and 6 of EU Regulation 2016/679, your personal data will be stored for a period not exceeding 10 years.
Scope of communication and dissemination: Your data may be communicated, or may become known to employees or collaborators of our company, expressly appointed by us as "data processor" and/or "external data controller". The data will be processed by all companies belonging to the group.
Special categories of personal data: For the purposes of providing the service, the company does not need to process personal data of a "particular" nature pursuant to art. 9 of EU Regulation no. 2016/679.
Existence of an automated decision-making process, including profiling: Pretto Srl does not adopt any automated decision-making process, including profiling, referred to in Article 22, paragraphs 1 and 4, of EU Regulation no. 679/2016.
Mandatory/optional nature of consent: The provision of personal data for contractual purposes in the ways and terms indicated in the information is mandatory, as failure to provide or incorrect provision makes processing relating to the aforementioned purposes impossible. With reference to the processing of personal data provided, consent is not required.
Rights of the interested party: At any time you may exercise the rights provided for by EU Regulation 2016/679 in articles 15 to 22 and in particular the right to: a) request confirmation of the existence or otherwise of your personal data; b) obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period; c) obtain the rectification and deletion of data; d) obtain the limitation of processing; e) obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments; f) object to the processing at any time and also in the case of processing for direct marketing purposes; g) oppose an automated decision-making process relating to natural persons, including profiling. h) ask the data controller to access personal data and to rectify or cancel them or limit the processing that concerns them or to oppose their processing, in addition to the right to data portability; i) revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation; j) lodge a complaint with the Guarantor Authority.
You can exercise your rights with a written request sent to the email address info@gruppopretto.it
Data Protection Officer (DPO): Pretto Srl does not require the role of a Data Protection Officer pursuant to art. 37 of EU Regulation 679/2016.