Information on the processing of personal data pursuant to Articles 13-14 of EU Regulation 2016/679 

Data Subjects: Clients.

Diamanti Italia S.p.a., in its capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Reg. 2016/679, hereinafter 'GDPR', hereby informs you that the aforementioned legislation provides for the protection of the data subjects with regard to the processing of personal data and that such processing will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.

Your personal data will be processed in accordance with the provisions of the above-mentioned law and the confidentiality obligations therein.

Purpose of the processing: in particular, your data will be processed for the following purposes related to the implementation of legislative or contractual obligations:

• fulfilment of legal obligations relating to anti-money-laundering legislation (Law no. 197 of 5 July 1991, as amended; Legislative Decree no. 56 of 20 February 2004; Law no. 29 of 25 January 2006; Decree D.D.M.M. nos.141, 142 and 143 of 3 February 2006; UIC (Italian Foreign Exchange Office) Regulation of 24 February 2006);
• compulsory fulfilment by law in the tax and accounting field;
• after-sales assistance;
• consultancy activities;

The processing of functional data for the fulfilment of these obligations is necessary for a correct management of the relationship and their provision is obligatory in order to implement the above-mentioned purposes. The Data Controller also informs that any failure to communicate, or incorrect communication, of part of the mandatory information may make it impossible for the Data Controller to guarantee the adequacy of the processing itself.

Processing modalities. Your personal data may be processed in the following ways:

• processing by means of electronic calculators;
• manual processing by means of paper files.

Each processing operation shall be carried out in compliance with the procedures set out in Articles 6 and 32 of the GDPR and through the adoption of appropriate security measures.

Communication: your data will be communicated exclusively to competent and duly appointed subjects for the performance of the services necessary for a correct management of the relationship, with guarantee of protection of the rights of the interested party.

Your data will be processed only by personnel expressly authorised by the Data Controller and, in particular, by the following categories of employees:

• consultants;
• Administration and Marketing Office.

Your data may be communicated to duly appointed third parties as Data Processors, in particular to:

• freight forwarders, carriers, small independent carriers, post offices, logistics companies;
• subcontractors;
• consultants and freelancers, also in associate form;
• banks and credit institutions.

Disclosure: Your personal data will not be disseminated in any way.

Retention Period. Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to Article 5 of the GDPR, the retention period of your personal data is:

• established for a period of time not exceeding the attainment of the purposes for which it is collected and processed for the execution and fulfilment of the contractual purposes;
• established for a period of time not exceeding the performance of the services provided;
• established for a period of time not exceeding the attainment of the purposes for which it is collected and processed and in compliance with the mandatory time limits prescribed by law.

Data Controller: the Data Controller, in accordance with the Law, is Diamanti Italia S.p.a. (Viale Achille Papa, 30 – 20149 Milan); email: info@diamantiitalia.com;

Telephone: + 39 02 36706100; VAT: IT09224260969 in the person of its pro tempore legal representative.

You have the right to obtain from the owner the deletion (right to be forgotten), restriction, updating, rectification, portability, or objection to the processing of personal data concerning you, and in general you can exercise all the rights provided for in Articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.

EU Reg. 2016/679: Articles 15, 16, 17, 18, 19, 20, 21, 22 – Rights of the data subject

1. The data subject has the right to obtain confirmation of the existence or not of personal data concerning him/her, even if not yet recorded, and communication of it in an intelligible form.
2. The data subject has the right to obtain the indication:
3. the origin of the personal data;
4. the purposes and methods of processing;
5. the logic applied in case of processing carried out with the aid of electronic tools;
6. the identification details of the data controller, data processing managers and the representative appointed pursuant to Article 5, paragraph 2;
7. of the entities or categories of entity to whom or which the personal data may be communicated and who or which may become aware of said data in their capacity as designated representative(s) in the state territory, as data processor(s) or person(s) in charge of the processing.
8. The data subject has the right to obtain:
9. updating, rectification or, when interested, addition of data;
10. the deletion, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed;
11. certification to the effect that the operations as per letters a) and b) have been notified, also in terms of their content, to the entities to whom or which the data was communicated or disclosed, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
12. data portability.
13. The data subject has the right to object, in whole or in part:
14. for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of collection;
15. the processing of personal data concerning him/her for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.