TECNICA GROUP S.P.A. (hereinafter, for brevity, also only the “Controller” or “Company”), in compliance with art. 13 of Regulation (EU) 2016/679 (hereinafter, “GDPR”), provides you with information relating to the processing of your personal data (hereinafter “Data”), which will be processed in the manner and for the purposes set out below. 

	THE CONTROLLER (IN TERMS OF PROCESSING PERSONAL DATA)	Tecnica Group S.p.A. Sede legale: Via Fante d’Italia, 56 – 31040 Giavera del Montello (TV) VAT number: 00195810262 E-mail: privacy@tecnicagroup.com
	DATA PROTECTION OFFICER (DPO)	The Controller has appointed a Data Protection Officer (DPO) who may be contacted at the following email address: privacy@tecnicagroup.com

CATEGORIES OF PERSONAL DATA PROCESSED  The data subject of processing regard first name, last name, tax code, email address, telephone number, place of birth, residence and/or address for service, personal traits such as, by way of example, weight, height, foot length (regarding the category referred to as “Common Data”)

WHY IS PERSONAL DATA PROCESSED AND WHAT IS THE CONDITION THAT MAKES SUCH PROCESSING LAWFUL?		HOW LONG WILL PERSONAL DATA BE STORED?
For performing the test/equipment test activities organised by the Company and which you adhered to and/or for the purposes of the consent statement signed by you.	The condition that makes the processing lawful is the one referred to in art. 6, co. 1, lett. b) of the GDPR, that is the performance of the contract measures taken upon request of the applicant.	The personal data collected are retained for a period of time not exceeding the achievement of the purpose indicated herein and, in any case, for a period of time not exceeding the status of limitation or forfeiture established by law and/or the duration of the dispute, including the terms for the possibility of an appeal.
Direct marketing: sending of communications of a promotional, business and advertising nature, on events, Tecnica initiatives, through the aid of paper mail, telephone contacts via operator (so-called “traditional methods”), e-mail, text messages, push notifications and use of social networks (so-called “automated methods”). Furthermore, the data provided will be processed with the purpose of carrying out analysis and reporting activities connected to promotional communication systems.	Your consent, optional and revocable at any time (art. 6, par. 1, letter a) GDPR).	Personal data will be retained for a maximum period of 24 months or until your consent is revoked. With reference to ski products and ski boots and related accessories, data will be retained for a maximum period of 7 years or until your consent is revoked.
Profiled marketing: analysis of your preferences, habits, behaviours, interests, also for the purpose of sending you customised business communications/carrying out targeted promotional actions.	Your consent, optional and revocable at any time (art. 6, par. 1, letter a) GDPR).	Personal data will be retained for a maximum period of 12 months or until your consent is revoked. With reference to ski products and ski boots and related accessories, data will be retained for a maximum period of 7 years or until your consent is revoked.
If necessary, to ascertain, exercise or defend the rights of the Controller in judicial and extrajudicial proceedings.	Legitimate interest art. 6, par. 1, letter f), GDPR.	For the entire duration of the dispute, until the deadline for appeals has been enforced.
Once the aforementioned retention periods have expired, the Data is destroyed, deleted or made anonymous, compatibly with the technical cancellation and backup procedures.

THE NATURE OF PROVIDING PERSONAL DATA The submission of Data is compulsory, given that it is bound to a contractual obligation. Any decline to submit Data would deny the Data Controller the possibility to pursue the purposes indicated above.

PARTIES AUTHORISED TO PROCESS PERSONAL DATA The Data will only be processed by the Company’s personnel and operators, duly assigned to fulfil the aforementioned purposes, who have been expressly authorised to process such data by the Controller and who have received appropriate operational instructions regarding such processing and who are bound by professional secrecy.

RECIPIENTS OF PERSONAL DATA The Data may be communicated, in the cases envisaged by the law, to individuals, bodies or authorities, who act as independent data Controllers. The Data may also be processed, on behalf of the Company, by external parties duly assigned as Processors, pursuant to article 28 of the GDPR, and who have been given suitable operational instructions.

TRANSFERRING PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION The personal data collected shall not be transferred to third countries and/or international organisations outside the European Union.

RIGHTS OF THE DATA SUBJECT and WITHDRAWAL OF CONSENT By contacting the Data Controller at the email address privacy@tecnicagroup.com, the data subject can request, at any time:  access to data concerning them (art. 15 GDPR); their rectification and integration (art. 16 GDPR); the erasure of Data (art. 17 GDPR); the limitation of processing (art. 18 GDPR); to oppose the processing in the hypothesis of legitimate interest of the Data Controller (art. 21 GDPR); the receipt of the Data in a structured format, commonly used and readable by an automatic device, as well as, if technically feasible, to send it to another controller without impediments (“right to Data portability”, art. 20 GDPR). Finally, please note that the data subject, by contacting the Data Controller at the email address privacy@tecnicagroup.com, is able to revoke the consent given at any time. On this point, we also remind you that the revocation of consent does not affect the lawfulness of the processing based on consent before revocation.  The data subject is also entitled to lodge a complaint with the competent supervisory authority, in compliance with art. 77 of the GDPR, if they believe that the processing of their data is in conflict with the legislation in force.