PRIVACY POLICY STATEMENT FOR KITCHEN REGISTRATION REQUESTS

Please view the privacy policy adopted by Ernestomeda S.p.a.

PRIVACY NOTICE FOR THE PROCESSING OF PERSONAL DATA RELATING TO KITCHEN REGISTRATION

Pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data (“GDPR”)

1. Identity of the Data Controller
   The Data Controller is Ernestomeda S.p.A., with registered office in Montelabbate (PU), Via dell’Economia 2/8, 61025, Italy.
   The contact details of the Data Controller are as follows: privacy@ernestomeda.com.
    
2. Contact details of the Data Protection Officer (DPO)
   The Data Controller has appointed a Data Protection Officer (DPO) in accordance with Article 37(2) of the GDPR.
   The DPO can be contacted at dpo@ernestomeda.com or through the Data Controller’s registered office.
    
3. Purposes and legal bases of processing
   Your personal data will be processed for the following purposes:

   a) To allow product registration and collect information regarding satisfaction with purchased products and/or services received for statistical purposes. The Data Controller will use such information to improve its products and services. Processing is based on the data subject’s consent pursuant to Article 6(1)(a) GDPR.

   b) To transmit certain personal data (first name, last name and email address) to TRUSTPILOT A/S so that you may freely submit a review of the service received on the TRUSTPILOT platform. Processing is based on the data subject’s consent pursuant to Article 6(1)(a) GDPR.

   For the purpose referred to in point a), failure to provide personal data may make product registration impossible.

   For the purpose referred to in point b), failure to provide consent will make it impossible to pursue the purpose described above.

4. Categories of data processed
   For the purposes described above, personal data provided during the product registration process will be processed.
   In particular, the following personal data will be processed:

   Common personal data: identification and contact details (surname, first name, residential address, policy number, email address).
    

5. Data disclosure
   Personal information may be shared with third parties only where necessary to achieve the purposes described above, including service providers, professional advisers, etc.

   All third parties receiving your information are bound by confidentiality obligations and, where required, are formally appointed as Data Processors pursuant to Article 28 GDPR.

   The Data Controller ensures that only the data strictly necessary for the relevant purposes are disclosed.

6. Data transfers abroad
   The Data Controller will retain:
   - data processed for the purpose referred to in point a) for a maximum period of 90 days, or until withdrawal of consent, whichever occurs first;

   - data processed for the purpose referred to in point b) for the time necessary to transmit the data to TRUSTPILOT A/S and, in any case, for a maximum period of 30 days (after which the personal data will no longer be retained by either Ernestomeda S.p.A. or TRUSTPILOT A/S), or until withdrawal of consent, whichever occurs first.

7. Data subject rights
   To exercise the rights provided for in Articles 15–22 GDPR (including the right of access, rectification, updating, portability, erasure, restriction or objection to processing, and the right to lodge a complaint with a supervisory authority), you may contact the Data Controller or the DPO using the contact details indicated above.

   You also have the right to withdraw your consent at any time. Withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

   You also have the right to lodge a complaint with a Supervisory Authority, such as the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali), Piazza Venezia 11, 00187 Rome, Italy, email: garante@gpdp.it, PEC: protocollo@pec.gpdp.it.