PRIVACY POLICY FOR CONTACT
PRIVACY POLICY FOR CONTACT FORM PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679 (GDPR)
In accordance with Art. 13 of Regulation (EU) 2016/679 (GDPR), RAK Ceramics PJSC - Ras Al Khaimah, United Arab Emirates, e-mail info@rakceramics.com, as data controller, informs users of the processing of personal data resulting from the completion of this contact form.
Data controller and Representatives of controllers or processors not estabilished in the Union
RAK Ceramics PJSC - Ras Al Khaimah, United Arab Emirates, e-mail info@rakceramics.com, in the person of the legal representative pro tempore. The controller has appointed a Representatives of controllers or processors not estebilished in the Union, who can be contacted at the following e-mail address: gdpr.italy@rakceramics.com
Data subjects
All the internet users interested in contacting the data controller and registering to the website using the contact form.
Data processed
Data processed are those entered in the contact form or identification data such as name and surname and contact details such as personal e-mail, address and city. Data collected are those strictly necessary in relation to the purposes for which they are processed, respecting the principle of ‘data minimisation’ enshrined in Art. 5 of the Regulation (EU) 679/2016.
Data provided will be processed by the controller in order to re-contact the user upon request.
Purpose of the processing
Personal data entered in the contact form, intentionally and voluntarily sent by the user, will be used to fulfil user’s requests or the contact requested in the form itself. The information systems of this process rely on an e-mail protocol that guarantees the confidentiality and integrity of the information.
Nature of the provision and legal basis of processing
The provision of personal data is mandatory in order to satisfy user’s request. The legal basis for processing is Article 6(b) of Regulation (EU) 679/2016, which establishes that processing is necessary to take steps at the request of the data subject prior to entering into a contract.
Processing modalities
The data processing is carried out through digital procedures or telematic means and in paper form by internal or external subjects, specifically appointed, authorised, and committed to confidentiality. The data are processed and stored with instruments that guarantee security, integrity, and confidentiality through the adoption of appropriate measures as required by law.
Data retention periods
Data will be stored in a form that allows identification of the data subject for two years from the submission of the contact request to the data controller.
Communication, disclosure, transfer
Data collected will not be disclosed, sold, or exchanged with third parties without the express consent of the data subject, except for any communications to authorised third parties - committed to confidentiality or appointed as data processors in compliance with Article 28 of Regulation (EU) 2016/679. The complete and updated list of data processors can be obtained, upon request, through the methods indicated in this information notice.In addition, data may be communicated to the competent authorities, in accordance with the law.
Transfers to third countries
Personal data is transferred to countries outside the European Union and passed on to institutional bodies. The transfer of data takes place exclusively in the following conditions:
- Countries covered by adequacy decisions - Art. 45 GDPR 679/16 EU;
- in the absence of adequacy decisions, the processing, Art. 46 GDPR 678/16 EU, takes place after agreement with the recipient of the data in compliance with binding corporate clauses and rules in accordance with Article 47; the standard data protection clauses adopted by the Commission in accordance with the examination procedure referred to in Article 93(2);
- in the absence of adequate safeguards, the data controller, pursuant to Article 49 GDPR 679/16 EU, if the transfer is necessary to fulfil contractual and/or legal obligations, shall disclose the data by putting in place all technical-organisational security measures such as, where possible, minimisation, pseudonymisation of the data, verification of the recipient's reliability
- the data is processed by personnel of RAK Ceramics PJSC or one of our service providers based in the United Arab Emirates. Rak Ceramics has taken all necessary safeguards to protect your personal data when it is transferred outside the European Economic Area ("EEA"), including the data transfer agreement with the recipients of the information. To access copies of these agreements please contact us via the website or at the contact details below
Rights of the data subjects
Data subjects, at any time, have the right to access their personal data, to ask for them to be corrected, updated, and erased. It is also possible to object to the processing of personal data and request its limitation.
The aforementioned requests shall be addressed to RAK Ceramics PJSC - Ras Al Khaimah, United Arab Emirates, e-mail info@rakceramics.com, in the person of the legal representative pro tempore. The controller has appointed a Representatives of controllers or processors not estebilished in the Union, who can be contacted at the following e-mail address: gdpr.italy@rakceramics.com.
In addition, if data subjects consider that the processing has been carried out in violation of the legislation on the protection of personal data, they have the right to lodge a complaint with the Guarantor Authority for the protection of personal data, with registered office in Piazza Venezia, 11 - 00187 - Rome.