PRIVACY POLICY - CUSTOMER SATISFACTION SURVEY

Pursuant to and for the purposes of EU Regulation no. 679/2016 (commonly known as GDPR General Data Protection Regulation) and Legislative Decree no. 196 of 30 June 2003 as subsequently amended.

Premise

This privacy policy is provided pursuant to Articles 12, 13 and 14 of EU Reg. 2016/679, in accordance with the legislation on the processing and protection of personal data, in order to illustrate the methods of processing of personal data of Bonfiglioli's customers ("Customers") who fill in the customer satisfaction questionnaire ("Customer Satisfaction Questionnaire").

The processing will be carried out in compliance with the principles of correctness, lawfulness, transparency, relevance, completeness and non-excessiveness, accuracy and with organisational and processing logics strictly related to the purposes pursued and in any case in such a way as to guarantee the security, integrity and confidentiality of the data processed, in compliance with the organizational, physical and logical measures provided for by the provisions in force.

Pursuant to the General Data Protection Regulation (GDPR – EU Reg. 2016/679), the undersigned company, the data controller, informs of the following.

Data Controller

Bonfiglioli S.p.A. (hereinafter "Bonfiglioli" or "Data Controller") with registered office in Via Cav. Clementino Bonfiglioli 1, 40012 Calderara di Reno (BO), e-mail: customer.experience@bonfiglioli.com in its capacity as Data Controller of personal data pursuant to Article 4 point 7 of the GDPR, informs you that personal data will be processed as follows.

Categories of personal data

The personal data processed will be the name, surname, role, company to which the Customer belongs and email address of the Customers, for the purposes of the facultative completion of the Customer Satisfaction Questionnaire.

Purpose of the processing and legal basis

The personal data and the answers to the questions collected with the Customer Satisfaction Questionnaire will be processed by the Data Controller with the sole purpose of measuring the degree of customer satisfaction with the use of the services and products offered by Bonfiglioli to its Customers, in order to further improve them.

It is therefore a data processing that finds its legal basis in the contractual relationship between Bonfiglioli and the Customers, with a view to evaluate and increase the quality of the services and products provided on the basis of the contract. The completion of the Customer Satisfaction Questionnaire is in any case completely facultative, therefore failure to communicate data to the Data Controller through the Customer Satisfaction Questionnaire will only result in the impossibility of participating in it.

Processing methods

Personal data will be processed by the Data Controller pursuant to the aforementioned legislation with the aid of electronic tools and manually, ensuring the use of suitable measures for the security of the data processed and guaranteeing the confidentiality of the same, in accordance with the principles applicable to the processing of personal data pursuant to art. 5 of the GDPR.

Within the organisational structure of the Data Controller, personal data will be processed by persons authorised to process the data acting under the authority of the Data Controller, within the scope of their respective functions and in accordance with the instructions given by the Data Controller.

To achieve the purposes of this policy, automated decisions based on personal data are not implemented.

Data retention period and criteria used for its determination

Personal data will be processed for the period of time necessary to pursue the purposes indicated in this privacy policy and, in any case, for a period not exceeding 5 years from the time of collection.

Categories of subjects to whom the data may be communicated

Personal data may be communicated to the subjects delegated to carry out the services and activities requested, as well as to the activities to which the Data Controller is required on the basis of legal obligations. If necessary or appropriate, the subjects to whom the data are transmitted to carry out activities on behalf of the Data Controller will be appointed as Data Processors pursuant to art. 28 of EU Reg. 679/2016.

Bonfiglioli designates as "authorised subjects" all employees who perform tasks that involve the processing of personal data. These authorized persons operate under the supervision of the Data Controller and are required to comply with appropriate security measures in order to ensure the confidentiality and protection of personal data.

Transfer of personal data outside the EU

Bonfiglioli does not transfer personal data outside the European Economic Area (EEA). However, should personal data be transferred to countries located outside the European Economic Area (EEA), in the absence of adequacy decisions by the Commission of the European Union, the Data Controller will ensure appropriate safeguards to protect personal data in these countries. Therefore, in this case, the "Standard Contractual Clauses" (SCCs) established by the European Commission pursuant to art. 46, par. 1, GDPR.

Rights of data subjects and right to lodge a complaint with the Supervisory Authority

As a data subject to the processing of their personal data, the data subject may exercise at any time the rights recognized by articles 15 to 22 of the GDPR.

In particular, in the manner and within the limits of the law, the data subject has the right to ask the Data Controller for access to his or her personal data, the rectification, erasure or limitation of the processing of personal data concerning him or her and to object of their processing.

To exercise their rights, the data subject may use the contact channels provided in this document. Without prejudice to the possibility of contacting the Data Controller to obtain any information or to exercise their rights, the data subject may lodge a complaint with the Data Protection Authority (GPDP): https://www.garanteprivacy.it

To exercise their rights, the data subject may use the contact channels provided in this document and send a request as indicated below: registered letter with acknowledgement of receipt – Via Cav. Clementino Bonfiglioli 1, 40012 Calderara di Reno (BO) or email: customer.experience@bonfiglioli.com.