Privacy information

PRIVACY POLICY PURSUANT TO ARTICLE 13 OF

REGULATION (EU) 2016/679

This Privacy Policy covers the processing of data provided by you or otherwise obtained within authorised points of sale or when registering on the website www.roncato.com (hereinafter referred to as the "Site") as well as when registering the products purchased through the aforementioned channels or over the phone on 049 929 0555.

Please read this information carefully in accordance with Regulation (EU) 2016/679 (hereinafter "GDPR").

DATA CONTROLLER AND CONTACT DETAILS

Pursuant to Article 4 of the Regulation, the Data Controller is Valigeria Roncato S.p.A. (hereinafter referred to as the "Data Controller"), with registered office in Via Frattina 1/C - 35011 Campodarsego (Padua), VAT number IT00332950286.

For any information or to assert the rights referred to in point 5, the Data Controller can be contacted at the following email addresses: valigeriaroncato@legalmail.it (certified email) and privacy@roncato.com (for the exercise of GDPR rights)

CATEGORIES OF DATA PROCESSED, PURPOSES AND RETENTION PERIODS

The categories of personal data processed by the Data Controller may be:

Personal and identification data (name and surname, place and date of birth, home address, tax number, etc.);
Contact details (address, email address, telephone number);
Data relating to the services used and purchases made.

Purposes

The personal data collected will be used by the Data Controller only for the purpose of providing the information and/or services requested. In particular, personal data are collected in order to fulfil contractual obligations (e.g. after-sales warranty) as well as to manage related administrative processes.

Retention period

Personal data is retained for 10 years from the date of registration through one of the aforementioned channels. This period may be extended in the event of litigation or due to special contractual provisions.

It should also be noted that the validity of consent given for marketing purposes will be reassessed before its expiry by sending an email requesting confirmation of the same, in order to ensure that the legal basis for processing the data provided is maintained.

On the other hand, with regard to registering the product on the "warranty" site, the personal data provided will be retained for the entire period of validity of the warranty on the products purchased and registered, in accordance with the following terms:

Legal warranty: Two years from the date of delivery of the product.
Warranty extension: 2 years + 1 additional year (or 5 years and 10 years) if the user registers the product on the relative website within the established terms.

In addition, the data will be stored for an additional grace period of one year during which the data will be stored in non-anonymised form to allow any checks or for support purposes. Finally, at the end of the overall period, the data will be anonymised or deleted, unless it is necessary to retain them further in order to comply with legal obligations or to exercise or defend a right in court

Legal basis

Personal data collected in this way will be used by the Data Controller solely for the purposes of:

Providing the information and/or services requested through company contacts
Responding to any subsequent related communications
Marketing purposes (by way of example but not limited to: informative newsletter campaigns, promotional newsletter campaigns without the use of automated means, retail campaigns, creation of broadcast channels)
Statistics intended for the internal use of the Data Controller
On request, extension of the product warranty period (warranty site)
- The data registered on this site will be processed for the purposes of:
  - managing the extension of the warranty on the purchased product, in particular, the extension of the coverage period, in accordance with the provisions of the law and the terms and conditions of the warranty extension offered
  - Recall of defective goods (if this data is provided by the user).

The legal basis for the purposes referred to in points a), b) and e) is the performance of a contract to which the data subject is a party or the performance of pre-contractual measures adopted at the request of the same. Provision of data is optional but any refusal will make it impossible for the Data Controller to respond to the requests of the customer. The legal basis for the purposes referred to in point f) is the legitimate interest of the Data Controller.

It should be noted that in cases where the legal basis is the performance of a contract or the pursuit of the legitimate interest of the Data Controller, the consent of the data subject is NOT necessary.

The legal basis for the purposes referred to in point c) is, instead, the consent of the data subject. The provision of data for these purposes is optional and the data subject must be able to freely give their informed and unequivocal consent at the time of registration to the provision of data specifically for each of the various marketing purposes. Please note that consent may be subsequently withdrawn at any time by contacting the Data Controller, who undertakes to erase the data processed on the basis of consent, without prejudice to the processing of data for the purposes of performing the contract entered into with the data subject or of pursuing legitimate interests.

Any refusal to provide consent for marketing activities will make it impossible for the Data Controller to carry out marketing activities (e.g. sending information on current offers, discounts reserved for registered users, etc.) and/or profiling.

In any case, the Data Controller and the appointed Data Processor guarantee that the data processed for marketing and warranty extension purposes are subject to technical and organisational measures aimed at preventing confusion or misuse.

In this case, the personal data will be kept for as long as the data subject maintains their consent.

Legal warranty: Two years from the date of delivery of the product.
Warranty extension: 2 years + 1 additional year (or 5 years and 10 years) if the user registers the product on the relative website [insert link] within the established terms.

At the end of the warranty period, the data will be stored for an additional grace period of one year during which the data will be stored in non-anonymised form to allow any checks or for support purposes. Finally, at the end of the overall period, the data will be anonymised or deleted, unless it is necessary to retain them further in order to comply with legal obligations or to exercise or defend a right in court

RECIPIENTS OF PERSONAL DATA

The Data Controller may share your data with its own internal offices and departments for all the purposes indicated above, as well as with:

Specially appointed third-party companies that provide accounting, administrative and tax services;
IT service providers;
Third-party companies that offer marketing services, exclusively for the purposes of performing the activities described in this policy.

Said parties will act as Data Processors pursuant to Article 28 of Regulation (EU) 2016/679 (GDPR) and will ensure data processing in accordance with the laws in force. The list of Processors can be consulted at the premises of the Data Controller upon specific request.

Your personal data will NOT be disseminated.

DISCLOSURE OF PERSONAL DATA TO THIRD PARTIES

Personal data provided by users may be disclosed to certain third parties for purposes strictly related to the management of the requested service, such as advertising agencies and marketing service providers.

Specifically, subject to the explicit consent of the data subject, the data may be transferred to third parties for direct marketing, market analysis and profiling purposes, with regard in particular to the collection of information for targeted and personalised promotional activities.

Data relating to the goods purchased and registered may be transferred to third parties for statistical purposes, market analysis or to improve services, in compliance with current regulations and in such a way as to ensure anonymisation where possible.

The complete list of third parties to whom data is communicated or transferred is available at the request of the data subject (privacy@roncato.com).

DATA PROCESSING METHODS

Your personal data will be processed in accordance with the principles of correctness, lawfulness and transparency, in protection of your privacy and rights. The Data Controller also undertakes to process your data in compliance with the principle of "minimisation", or by limiting the collection and processing data to what is necessary, using organisational means and criteria that are strictly relevant to the declared purposes. These data will be stored on computer media, on paper and on any other type of suitable medium, adopting security measures commensurate with the processing risks, aimed at preventing unauthorised access, disclosure, modification or destruction of the data.

RIGHTS OF THE DATA SUBJECT

Please note that you that you have the right to request from the Data Controller:

Access to your data (Article 15 of the Regulation)
Rectification of your data (Article 16)
Erasure of your data (Article 17)
Restriction of processing (Article 18)

You also have the right to:

Object to the processing of your data (Article 21)
Data portability (Article 20)

Further information on the rights of the data subject may be obtained by contacting the Data Controller at privacy@roncato.com

Finally, please note that you have the right to lodge a complaint with the supervisory authority if you believe that there has been a breach of your data, as well as the right to withdraw your consent at any time, without prejudice to the lawfulness of any processing performed prior to withdrawal.

TRANSFER OF DATA ABROAD

Personal data is managed and stored in the cloud and on servers within the European Union and will not be transferred outside the European Economic Area (EEA). It remains understood that the Data Controller, if necessary, will have the right to relocate the servers within Italy to non-EU countries. In such cases, the Data Controller undertakes to give prior notice to the data subject and to ensure adequate levels of protection in accordance with the provisions of the GDPR.

Last revision: 19/12/2024