{"id":3566,"date":"2022-02-14T17:02:30","date_gmt":"2022-02-14T17:02:30","guid":{"rendered":"https:\/\/www.costepetrai.com\/?page_id=3566"},"modified":"2026-09-28T10:42:38","modified_gmt":"2026-09-28T10:42:38","slug":"informative-privacy","status":"publish","type":"page","link":"https:\/\/www.costepetrai.com\/en\/informative-privacy\/","title":{"rendered":"Privacy Notice"},"content":{"rendered":"
\n\t
\n\t\t
\n\t\t\t
\n
Go to the customer privacy policy<\/a><\/div>\n
Go to Supplier Information<\/a><\/div>\n<\/div>\n

<\/p>\n

INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATED TO THE RELATIONSHIP WITH CUSTOMERS AND PROSPECTIVE CUSTOMERS<\/b><\/h2>\n

The following information is intended for natural persons, including professionals, sole proprietor businesses and representatives\/liaison officers of companies, entities, associations and foundations, hereinafter referred to as the \"Data Subjects\".<\/span><\/p>\n

Identity and contact details of the Data Controller<\/b><\/h2>\n

Coste Petrai s.r.l., hereinafter also referred to as \u201cCoste Petrai\u201d or the \u201cData Controller\u201d, having its registered office in Via Montello n. 7 \u2013 31030, Arcade (TV). Contact details: email address <\/span>info@costepetrai.com<\/span><\/a>, to the certified email address <\/span>info@pec.costepetrai.com<\/span><\/a> or at the phone number +39 0438\/82535.<\/span><\/p>\n

Purposes and legal bases<\/b><\/h2>\n

A. Prior to entering into a contract<\/b>: personal data are processed for all needs related to the processing of enquiries and\/or quotations.<\/span><\/p>\n

B. Collection of business information \u2013 Personal data are processed to collect information for the purpose of verifying the economic and financial situation of the Data Subjects, as well as their stability, solvency and reliability.<\/strong> Personal data are processed to gather information for the purpose of verifying the economic, financial, and asset-related status of the data subjects, as well as their stability, solvency, and reliability.<\/p>\n

C. Management of the contractual phase<\/b>After entering into a contract \u2013 Personal data are processed for all needs related to the management of the contractual relationship in all its phases (e.g. managing appointments, organising logistics, managing customer support activities and complying with regulatory obligations incumbent on the Data Controller).<\/span><\/p>\n

D. Marketing<\/strong>: transmit commercial communications containing information on its products or services, as\nwell as promotions or invitations to attend events in which the Data Controller will participate.<\/p>\n

E. Defending legal claims<\/b> : the Data Controller may need to process personal data to defend legal claims in out-of-court or court-based proceedings.<\/span><\/p>\n

 <\/p>\n\n\n\n\n\n\n\n\n
Purpose<\/b><\/td>\nLegal basis (common data)<\/b><\/td>\nLegal basis (special data)<\/b><\/td>\n<\/tr>\n
\n

A.<\/p>\n<\/td>\n

Steps to be taken prior to entering into a contract.<\/span><\/td>\n\/<\/span><\/td>\n<\/tr>\n
\n

B.<\/p>\n<\/td>\n

Legitimate interest of the Controller in connection\nwith the analysis and definition of business strategies and policies, the identification of suitable parties with whom to start or continue of business relations, definition of the terms and conditions of payment, and the prevention of fraud.<\/span><\/td>\n\/<\/span><\/td>\n<\/tr>\n
\n

C.<\/p>\n<\/td>\n

\n

Contract performance;<\/span><\/p>\n

Compliance with legal obligations.<\/span><\/p>\n<\/td>\n

\/<\/span><\/td>\n<\/tr>\n
\n

D.<\/p>\n<\/td>\n

Consent<\/span><\/td>\n\/<\/span><\/td>\n<\/tr>\n
\n

E.<\/p>\n<\/td>\n

Legitimate interest of the Data Controller in establishing, exercising or defending a legal claim.<\/span><\/td>\nEstablishing, exercising or defending a legal claim.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Retention period<\/b><\/h2>\n\n\n\n\n\n\n\n\n
Purpose<\/b><\/td>\nRetention time<\/b><\/td>\n<\/tr>\n
\n

A.<\/p>\n<\/td>\n

Time required to process the requests submitted and ensuing replies.<\/span><\/td>\n<\/tr>\n
\n

B.<\/p>\n<\/td>\n

Time required to carry out the checks.<\/span><\/td>\n<\/tr>\n
\n

C.<\/p>\n<\/td>\n

10 years after termination of the contract.<\/span><\/td>\n<\/tr>\n
\n

D.<\/p>\n<\/td>\n

24 months after collection.<\/span><\/td>\n<\/tr>\n
\n

E.<\/p>\n<\/td>\n

10 years after final resolution of a dispute.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Nature of the data provided and consequences arising from denial to provide the data<\/b><\/h2>\n\n\n\n\n\n\n\n\n
Purpose<\/b><\/td>\nNature<\/b><\/td>\nConsequences<\/b><\/td>\n<\/tr>\n
\n

A.<\/p>\n<\/td>\n

Required<\/span><\/td>\nInability to receive the requested information.<\/span><\/td>\n<\/tr>\n
\n

B.<\/p>\n<\/td>\n

Not applicable<\/span><\/td>\n\/<\/span><\/td>\n<\/tr>\n
\n

C.<\/p>\n<\/td>\n

Required<\/span><\/td>\nInability to start or continue a business relationship.<\/span><\/td>\n<\/tr>\n
\n

D.<\/p>\n<\/td>\n

Optional<\/span><\/td>\nInability to receive commercial communications.<\/span><\/td>\n<\/tr>\n
\n

E.<\/p>\n<\/td>\n

Required<\/span><\/td>\nInability to handle litigation.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Disclosure scope<\/b><\/h2>\n

Data are processed by authorised internal staff for specific tasks and are disclosed to external parties according to the following rules<\/span><\/p>\n\n\n\n\n\n\n\n\n
Purpose<\/b><\/td>\nGroups of external recipients<\/b><\/td>\n<\/tr>\n
\n

A.<\/p>\n<\/td>\n

Agents, business consultants, business brokers.<\/span><\/td>\n<\/tr>\n
\n

B.<\/p>\n<\/td>\n

Business information companies, agents.<\/span><\/td>\n<\/tr>\n
\n

C.<\/p>\n<\/td>\n

Agents, business information companies, IT service companies, companies providing infrastructure\nhosting and cloud systems, auditing firms, carriers and forwarding agents, board of auditors,\ninsurance brokers, companies providing document archiving systems, lending institutions, entities\nto whom disclosure is required by law, business partners (customers\/suppliers).<\/span><\/td>\n<\/tr>\n
\n

D.<\/p>\n<\/td>\n

Marketing consultancy firms, companies offering hosting\/management services for technology\nplatforms.<\/span><\/td>\n<\/tr>\n
\n

E.<\/p>\n<\/td>\n

Law firms; debt collection or factoring companies; judicial authorities<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Since the data are also processed using IT equipment, they may also be viewed by individuals\nservicing\/maintaining such systems.<\/span><\/p>\n

Data transfer to a third country or an international organisation<\/b><\/h2>\n

The Data Controller will not transfer personal data outside the European Economic Area.<\/span><\/p>\n

Data subject rights\u00a0<\/b><\/h2>\n

The data subjects have the following rights:<\/span><\/p>\n

Access<\/b>: Data subjects can find out whether their personal data are being processed and if so, to obtain access to such data and request a copy thereof.<\/span><\/p>\n

Rectification<\/b>: Data subjects may request that their personal data be updated, rectified (if inaccurate) and amended if incomplete.<\/span><\/p>\n

Deletion<\/b>: Data subjects may obtain the deletion of their personal data under certain conditions (for more information, please reach out to the Data Controller).<\/span><\/p>\n

Limitation<\/b>: Data subjects may request that data be flagged \u2013 so as to limit their processing in the future \u2013 if certain conditions are met (for more information, please reach out to the Data Controller).<\/span><\/p>\n

Objection<\/b>: Data subjects may object to the processing of their personal data \u2013 on grounds relating to their particular situation \u2013 where such processing is based on a legitimate interest or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller. They may also object to the processing of their personal data for direct marketing purposes.<\/span><\/p>\n

Portability<\/b>: The personal data provided to the Data Controller may be received in a structured format and transmitted to another\ncontroller if the processing is based on consent or contract and is carried out by automated means.<\/span><\/p>\n

Withdrawal of consent<\/b>: Data subjects may withdraw their consent for the purposes for which it was requested, without prejudice\nto the lawfulness of the processing carried out until then.<\/span><\/p>\n

 <\/p>\n

Below are the actual rights that can be exercised with respect to the processing operations performed:<\/span><\/p>\n\n\n\n\n\n\n\n\n\n
Purpose<\/b><\/td>\nRight that can be exercised<\/b><\/td>\n<\/tr>\n
\u00a0<\/td>\nAccess<\/span><\/td>\nRectification<\/span><\/td>\nDeletion<\/span><\/td>\nLimitation<\/span><\/td>\nObjection<\/span><\/td>\nPortability<\/span><\/td>\nWithdrawal of consent<\/span><\/td>\n<\/tr>\n
\n

A.<\/p>\n<\/td>\n

X<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
\n

B.<\/p>\n<\/td>\n

X<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
\n

C.<\/p>\n<\/td>\n

X<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\n\u00a0<\/td>\nX<\/span><\/td>\n\u00a0<\/td>\n<\/tr>\n
\n

D.<\/p>\n<\/td>\n

X<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\n\u00a0<\/td>\nX<\/span><\/td>\nX<\/span><\/td>\n<\/tr>\n
\n

E.<\/p>\n<\/td>\n

X<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

To exercise the aforementioned rights, the Data Subjects may use the form available at <\/span>https:\/\/www.garanteprivacy.it\/web\/guest\/home\/docweb\/-\/docweb-display\/docweb\/1089924<\/span><\/a> Once completed, the form must be sent to the following email address: privacy@costepetrai.com. Data Subjects may use the same address to obtain further details in relation to the above information (e.g. legitimate interest balancing test or list of data controllers).<\/span><\/p>\n

Complaints may be filed with a supervisory authority (in Italy: Autorit\u00e0 Garante per la protezione dei dati personali<\/span>www.garanteprivacy.it<\/span><\/a>).<\/span><\/p>\n

 <\/p>\n

____________________________________________________________<\/span><\/p>\n

<\/p>\n

\n
Back to the customer privacy policy<\/a><\/div>\n<\/div>\n

<\/p>\n

INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATED TO THE RELATIONSHIP WITH CUSTOMERS AND PROSPECTIVE CUSTOMERS<\/b><\/h2>\n

The following information is intended for natural persons, including professionals, sole proprietor businesses and representatives\/liaison officers of companies, entities, associations and foundations, hereinafter referred to as the \"Data Subjects\".<\/span><\/p>\n

Identity and contact details of the Data Controller<\/b><\/h2>\n

Coste Petrai s.r.l., hereinafter also referred to as \u201cCoste Petrai\u201d or the \u201cData Controller\u201d, having its registered office in Via Montello n. 7 \u2013 31030, Arcade (TV). Contact details: email address <\/span>info@costepetrai.com<\/span><\/a>, to the certified email address <\/span>info@pec.costepetrai.com<\/span><\/a> or at the phone number +39 0438\/82535.<\/span><\/p>\n

Categories of data and their source<\/b><\/h2>\n

Coste Petrai processes personal data of a general nature (e.g., personal details, contact information, data regarding identification documents, and employment-related data, including professional certificates and qualifications) as well as data of a special nature (e.g., data regarding fitness for work); such information may be collected from the data subject themselves and\/or from third parties (e.g., other company employees and collaborators).<\/span><\/p>\n

Purposes and legal bases<\/b><\/h2>\n

A. Prior to entering into a contract<\/b>: i dati personali vengono trattati per tutte le necessit\u00e0 correlate all\u2019ottenimento di informazioni e\/o preventivi.<\/span><\/p>\n

B. Management of the contractual phase<\/b>: i dati personali vengono trattati per tutte le necessit\u00e0 correlate alla gestione del rapporto contrattuale in tutte le sue fasi (es. gestione degli appuntamenti, organizzazione della logistica e adempimento di obblighi normativi che gravano sul Titolare).<\/span><\/p>\n

C. Defending legal claims<\/b> : the Data Controller may need to process personal data to defend legal claims in out-of-court or court-based proceedings.<\/span><\/p>\n\n\n\n\n\n\n
Purpose<\/b><\/td>\nLegal basis (common data)<\/b><\/td>\nLegal basis (special data)<\/b><\/td>\n<\/tr>\n
\n

A.<\/p>\n<\/td>\n

Legitimate interest of the Data Controller related to searching for potential suppliers and collecting information and\/or price quotes.<\/span><\/td>\n\/<\/span><\/td>\n<\/tr>\n
\n

B.<\/p>\n<\/td>\n

\n

Legitimate interest of the Data Controller in properly conducting business relationships in compliance with applicable regulations;<\/span><\/p>\n

Contract performance;<\/span><\/p>\n

Compliance with legal obligations.<\/span><\/p>\n<\/td>\n

Fulfillment of labor law obligations.<\/span><\/td>\n<\/tr>\n
\n

C.<\/p>\n<\/td>\n

Legitimate interest of the Data Controller in establishing, exercising or defending a legal claim.<\/span><\/td>\nEstablishing, exercising or defending a legal claim.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

Retention period<\/b><\/h2>\n\n\n\n\n\n\n
Purpose<\/b><\/td>\nRetention time<\/b><\/td>\n<\/tr>\n
\n

A.<\/p>\n<\/td>\n

Time required to process the requests submitted and ensuing replies.<\/span><\/td>\n<\/tr>\n
\n

B.<\/p>\n<\/td>\n

10 years after termination of the contract.<\/span><\/td>\n<\/tr>\n
\n

C.<\/p>\n<\/td>\n

10 years after final resolution of a dispute.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

Nature of the data provided and consequences arising from denial to provide the data<\/b><\/h2>\n\n\n\n\n\n\n
Purpose<\/b><\/td>\nNature<\/b><\/td>\nConsequences<\/b><\/td>\n<\/tr>\n
\n

A.<\/p>\n<\/td>\n

Required<\/span><\/td>\nInability to receive the requested information.<\/span><\/td>\n<\/tr>\n
\n

B.<\/p>\n<\/td>\n

Required<\/span><\/td>\nInability to start or continue a business relationship.<\/span><\/td>\n<\/tr>\n
\n

C.<\/p>\n<\/td>\n

Required<\/span><\/td>\nInability to handle litigation.<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

Disclosure scope<\/b><\/h2>\n

Data are processed by authorised internal staff for specific tasks and are disclosed to external parties according to the following rules<\/span><\/p>\n\n\n\n\n\n\n
Purpose<\/b><\/td>\nGroups of external recipients<\/b><\/td>\n<\/tr>\n
\n

A.<\/p>\n<\/td>\n

Companies belonging to the same corporate group, external consultants.<\/span><\/td>\n<\/tr>\n
\n

B.<\/p>\n<\/td>\n

Agents, business information companies, IT service companies, companies providing infrastructure\nhosting and cloud systems, auditing firms, carriers and forwarding agents, board of auditors,\ninsurance brokers, companies providing document archiving systems, lending institutions, entities\nto whom disclosure is required by law, business partners (customers\/suppliers).<\/span><\/td>\n<\/tr>\n
\n

C.<\/p>\n<\/td>\n

Law firms; debt collection or factoring companies; judicial authorities<\/span><\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

Since the data are also processed using IT equipment, they may also be viewed by individuals\nservicing\/maintaining such systems.<\/span><\/p>\n

Data transfer to a third country or an international organisation<\/b><\/h2>\n

The Data Controller will not transfer personal data outside the European Economic Area.<\/span><\/p>\n

Data subject rights\u00a0<\/b><\/h2>\n

The data subjects have the following rights:<\/span><\/p>\n

Access<\/b>: Data subjects can find out whether their personal data are being processed and if so, to obtain access to such data and request a copy thereof.<\/span><\/p>\n

Rectification<\/b>: Data subjects may request that their personal data be updated, rectified (if inaccurate) and amended if incomplete.<\/span><\/p>\n

Deletion<\/b>: Data subjects may obtain the deletion of their personal data under certain conditions (for more information, please reach out to the Data Controller).<\/span><\/p>\n

Limitation<\/b>: Data subjects may request that data be flagged \u2013 so as to limit their processing in the future \u2013 if certain conditions are met (for more information, please reach out to the Data Controller).<\/span><\/p>\n

Objection<\/b>: Data subjects may object to the processing of their personal data \u2013 on grounds relating to their particular situation \u2013 where such processing is based on a legitimate interest or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller. They may also object to the processing of their personal data for direct marketing purposes.<\/span><\/p>\n

Portability<\/b>: The personal data provided to the Data Controller may be received in a structured format and transmitted to another\ncontroller if the processing is based on consent or contract and is carried out by automated means.<\/span><\/p>\n

Withdrawal of consent<\/b>: Data subjects may withdraw their consent for the purposes for which it was requested, without prejudice\nto the lawfulness of the processing carried out until then.<\/span><\/p>\n

 <\/p>\n

Below are the actual rights that can be exercised with respect to the processing operations performed:<\/span><\/p>\n\n\n\n\n\n\n\n
Purpose<\/b><\/td>\nRight that can be exercised<\/b><\/td>\n<\/tr>\n
\u00a0<\/td>\nAccess<\/span><\/td>\nRectification<\/span><\/td>\nDeletion<\/span><\/td>\nLimitation<\/span><\/td>\nObjection<\/span><\/td>\nPortability<\/span><\/td>\nWithdrawal of consent<\/span><\/td>\n<\/tr>\n
\n

A.<\/p>\n<\/td>\n

X<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n
\n

B.<\/p>\n<\/td>\n

X<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\n\u00a0<\/td>\n<\/tr>\n
\n

C.<\/p>\n<\/td>\n

X<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\nX<\/span><\/td>\n\u00a0<\/td>\n\u00a0<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n

 <\/p>\n

To exercise the aforementioned rights, the Data Subjects may use the form available at <\/span>https:\/\/www.garanteprivacy.it\/web\/guest\/home\/docweb\/-\/docweb-display\/docweb\/1089924<\/span><\/a> Once completed, the form must be sent to the following email address: privacy@costepetrai.com. Data Subjects may use the same address to obtain further details in relation to the above information (e.g. legitimate interest balancing test or list of data controllers).<\/span><\/p>\n

Complaints may be filed with a supervisory authority (in Italy: Autorit\u00e0 Garante per la protezione dei dati personali<\/span>www.garanteprivacy.it<\/span><\/a>).<\/span><\/p>\n

\u00a0<\/p>\n\n\t\t<\/div>\n\t<\/div>\n<\/div><\/div><\/div><\/div>","protected":false},"excerpt":{"rendered":"Vai a Informativa Clienti Vai a Informativa Fornitori INFORMAZIONI SUL TRATTAMENTO DEI DATI PERSONALI CORRELATE AL RAPPORTO CON CLIENTI E POTENZIALI CLIENTI Le informazioni che seguono sono destinate a persone fisiche, inclusi professionisti, titolari di imprese individuali e rappresentanti\/referenti di societ\u00e0, enti, associazioni e fondazioni, di seguito \u201cInteressati\u201d. Identit\u00e0 e dati di contatto del Titolare

Read More<\/a><\/p>","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-3566","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.costepetrai.com\/en\/wp-json\/wp\/v2\/pages\/3566","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.costepetrai.com\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.costepetrai.com\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.costepetrai.com\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.costepetrai.com\/en\/wp-json\/wp\/v2\/comments?post=3566"}],"version-history":[{"count":31,"href":"https:\/\/www.costepetrai.com\/en\/wp-json\/wp\/v2\/pages\/3566\/revisions"}],"predecessor-version":[{"id":3679,"href":"https:\/\/www.costepetrai.com\/en\/wp-json\/wp\/v2\/pages\/3566\/revisions\/3679"}],"wp:attachment":[{"href":"https:\/\/www.costepetrai.com\/en\/wp-json\/wp\/v2\/media?parent=3566"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}