Dear Customer
M.A.T. s.r.l., with registered office in Teolo (PD), Via Alessandro Volta No. 16 (hereinafter also the "Company"), Data Controller pursuant to and for the purposes of EU Regulation 679/2016 (hereinafter also the "GDPR"), hereby, pursuant to Article 13 of the GDPR, intends to inform you of the purposes and methods of processing the personal data collected, the scope of their communication and dissemination, as well as the nature of their provision and the retention period.

PURPOSE OF DATA PROCESSING

The personal data (consisting of first name, last name, and email address) provided by the interested party via the form on the Data Controller's website will be disclosed and processed, in compliance with applicable legislation, by Company personnel designated as data processors.
Personal, identifying, and commercial data are processed in the context of the organization's normal business activities and for the following purposes:
To carry out operations strictly related and instrumental to the initiation of contractual relationships with the Client, including the acquisition of information prior to the conclusion of the Contract;
To send communications containing information and/or promotional content.

LAWFULNESS OF THE PROCESSING

The Data Controller's processing of personal data is legitimized pursuant to Article 6 of the GDPR by obtaining the data subject's express consent.

TREATMENT METHODS

Data processing is performed using paper and electronic media. The data is stored in electronic archives, fully ensuring the minimum security measures required by EU legislation.

SCOPE OF DISSEMINATION AND CATEGORIES OF SUBJECTS TO WHOM THE DATA MAY BE COMMUNICATED

The personal data collected by the organization may be disclosed, within the limits strictly relevant to the aforementioned purposes, to the following entities or categories of entities:
Entities to whom disclosure is required by law, regulation, or national and EU legislation, as well as for the fulfillment of contractual or pre-contractual obligations.
Legal and accounting consultants, for the purpose of studying and resolving any legal issues relating to the existing contractual position.
Consultants and professionals (technicians, designers, etc.) or companies that collaborate with the organization to provide the requested service or sell the purchased product.
External firms specializing in accounting and tax consultancy (e.g., accountants, auditing firms, etc.)

DATA RETENTION PERIOD

Data is retained only for the period necessary for the purposes for which it is processed or within the timeframes established by laws, EU regulations, secondary legislation, and other standards to which the organization must comply (e.g., accounting and tax regulations, etc.).
A periodic annual review of the data processed is expected, as well as the possibility of deleting it if it is no longer necessary for the intended purposes.

RIGHTS OF THE INTERESTED PARTY

The GDPR guarantees data subjects a series of rights regarding their personal data processed by the Data Controller. Data subjects may exercise their rights at any time by writing to the Data Controller at the Company's registered office listed below, or by emailing info@mat.pd.it.
Specifically, we inform you that the law recognizes the rights set forth in Articles 15, 16, 17, 18, 20, 21, 77, and 82 of the GDPR (e.g., to obtain confirmation of the existence or otherwise of their data, the erasure of data processed unlawfully, rectification, objection to their use for legitimate reasons, etc.).

The Data Controller undertakes to respond within 30 days and, if unable to comply with these deadlines, to justify any extension of the deadlines. The investigation will be free of charge, except in cases of unfounded or excessive requests, for which a fee may be charged, not exceeding the costs actually incurred for the research carried out.

DATA PROVISION AND CONSEQUENCES OF FAILURE TO PROVIDE MANDATORY/NON-MANDATORY DATA

Providing data is optional; however, refusal to respond will make it impossible for the data controller to process data subjects' requests. Pursuant to Art. 6 of the GDPR, consent to the processing of the aforementioned data is required as it is collected outside of prior contractual agreements, as well as for promotional and commercial communication purposes. Consent is deemed given by checking the box below and may be revoked at any time.