Privacy Policy

General Data Protection Regulation -Privacy Notice Update

Calpierre srl.

Viale Olimpico, 5b
Casandrino (NA)
VAT IT01391091210

In the light of the new European Regulation on the Protection of Personal Data (so-called “GDPR” General Data Protection Regulation) we have updated our Privacy Notice.

The disclosure simply summarizes the essential points concerning: – type of Personal Data processed,
reasons and purposes for which we process your Personal Data,
– rights that can be exercised as an interested party.

Best Regards.

Dear Customer,

Personal Data Protection Policy

Calpierre srl based in Casandrino (NA) – Viale Olimpico, 5b, constantly strives to adopt technical and organizational solutions to ensure high standards of lawfulness, security and protection in the processing of personal data. For this purpose, the requirements of the General Data Protection Regulation of the European Union  (hereafter in the text “GDPR” acronym of General Data Protection Regulation) and other provisions of law are implemented, including those of the Code regarding the protection of personal data (hereafter “Privacy Code” or “Code“).

1) Who is the data controller?
Calpierre srl based in Casandrino (NA) – Viale Olimpico, 5b (hereafter in the text “Calpierre srl” or “we“), is the holder of the processing of your personal data according to the meaning of the GDPR and the Code.
For the preparation of estimates, orders, delivery and sale of goods or services, for the provision of assistance services, for the stipulation of the contract (hereafter in the text “operations”) and to implement it, Calpierre srl will treat certain personal data for the purposes indicated in this data protection statement.
2. What data do we process?
Personal data means any type of information relating to an identified or identifiable natural person (hereafter “Data“). As for the preparation of operations, the conclusion and execution of the contract between you and Calpierre srl, we process your personal data within the limits of what is permitted by law, taking into account above all the principle of data minimization. It concerns  the following information in particular:

  • Data provided by you:
    in requesting and receiving a quote, in ordering us material or services, in entering into a contract (hereafter “Contract“), Or during the execution of this Contract, you will have to provide some information. Depending on the type of transaction you requires, you may provide us with the following information (the list below is not intended to be exhaustive, but is given just as an example): your first and last name, your contact details (including address, number phone and e-mail), profession, balance or income data, date and place of birth, bank account data, VAT number, tax code, information about your company. The provision of such information is a necessary requirement for the conclusion of the Contract with Calpierre srl; the failure to communicate such data may make it impossible to conclude the Contract and  to provide related services and products to you.

  • Data collected by third parties:
    as for the initial phase of the Contract we will also use some Personal Data that may be provided by third parties. These data include, for example, a series of data from public and private creditworthiness assessment databases (such as, SIC – credit information systems), and other third parties and databases such as the public system SCIPAFI for the prevention of identity theft.

    In this context, we will cover in particular the following categories of personal data:

    • information relating to your creditworthiness, including any kind of insolvency with respect to other contracts known to the aforementioned databases;
    • information provided to the said databases by other banks, such as other existing banking and / or financial relationships;
    • information used for identifying groups of connected clients, such as interests in companies or proprietary relationships;
    • information used for defense against administrative offenses. Such information is necessary in order to process your request; without it, the request can not be executed.
  • Particular categories of personal data:
    Particular categories of personal data are information revealing your racial or ethnic origin, your political opinions, your religious or philosophical beliefs, or union membership, as well as genetic data, biometric data aimed at unambiguously identifying a physical person, data on health or sex life and on the sexual orientation of a person. As a rule, we do not collect or process particular categories of personal data. In specific cases, if we have to treat particular categories of personal data (for example during computerized inquiries on possible data breaches), in order to achieve the purposes indicated below, we will always process these data in accordance with the provisions of the law and the requirements indicated in this data protection statement.

3. On what legal bases will we treat your data?
We will treat your data only where permitted by applicable legal provisions. Specifically, we will treat your data on the basis of the art. 6 and 9 GDPR and on the basis of consent pursuant to art. 7 GDPR, as well as in accordance with the corresponding provisions of the Code:

  • Consent (Article 6 (1) paragraph 1 (a), Article 7 of the GDPR, and, if applicable, Article 9 (2) (a): We will only process certain data in the presence of your preliminary, free and express consent. You have the right to revoke your consent at any time with effect for the future.
  • Execution of a contract or pre-contractual measures (art6 (1) paragraph1 (b) GDPR):in order to stipulate your contract with Calpierre srl and to execute it, we need to have access to certain data.
  • Compliance with a legal obligation (Article 6 (1) paragraph 1 (c) GDPR): Calpierre srl is subject to a series of regulatory requirements. In order to ensure compliance with these requirements, we must process certain data.
  • Safeguarding legitimate interests (Article 6 (1) paragraph 1 (f) GDPR): Calpierre srl will process certain data in order to protect its interests, or interests of third parties. However, this applies only if, in the specific cases, your interests do not prevail.

4. For what purpose will we process your data?

We will process your data exclusively for the purposes permitted by data protection legislation and in particular: 1) purposes previously approved by you;

2) processing of data in order to execute our Contract;

3) execution of pre-contractual measures

4) fulfillment of legal obligations to which we are subject (including obligations and provisions of law established by the competent authorities)

5) safeguarding our legitimate interests or legitimate interests of third parties, except in the case where your interests prevail over them

6) exercise of our rights and fulfillment of our obligations under the law

7) assessment, exercise or defense of a legal right or claim

8) marketing and advertising, direct and indirect marketing activities in particular.


Among other things, we will treat your data for the specific purposes listed below. Please note that this is not a complete and exhaustive list of the individual purposes, but only a series of examples aimed at illustrating the aforementioned purposes.


4.1 Purposes of processing related to the Contract
We must process your data above all to execute the Contract with you. In the context of the Contract, we will process your data in particular to perform the following tasks / activities:

  1. Formulation of estimates: in order to formulate one or more estimates based on the services requested by you, we need to process some of your personal data.
  2. Decision on the conclusion of the Contract: inorder to decide whether to stipulate a Contract with you, and possibly under which conditions, we must examine and process some Data concerning you,
  3. Contact you in relation to the Contract: as for the initial phase of the pre-contractual and contractual relationship and for the duration of the Contract, there may be an opportunity or need to contact you for reasons related to your service contract. For this purpose, we need your personal information.
  4. Contract Management: the contract management activities include the management, modification, execution and updating of what is established in it and of our agreements in general. In this context, we will process your personal data and information regarding the latter.
  5. Customer care: in order to offer you a valid customer service, we will process your data on a regular basis, for example, to provide advice adequately. For the sole purpose of improving the quality of the processes of customer care and staff training, moreover, we may process personal data collected through the sample registration of phone calls, in compliance with privacy regulations and the provisions of the Guarantor for the protection of personal data.
  6. Credit recovery: as part of payment agreements, we have the right to carry out activities aimed at the recovery of receivables due, in accordance with the contracts stipulated with you. For the performance of these activities we will process your data, especially in the presence of debts to be paid.

g) Management of claims for damages: in the event of a claim for compensation from you or us , we will process your data.

h) Management of the termination of the Contract: We will process your data even if the Contract with you is terminated, with or without notice. During this process, we may also contact you to discuss the terms of the termination of the contract.

  1. Collaboration with  affiliated suppliers  and third parties: in the context of the stipulation of the Contract, the management of the Contract and the customer service, Calpierre will collaborate, as appropriate, with trust providers, technical personnel, service companies, which provide all the services within their competence. In order to ensure optimal customer service, as part of this collaboration, Calpierre srl will share the necessary data with the aforementioned subjects
  2. Transfer to third parties during the execution of the Contract: Calpierre srl may transfer the processed data and its own archives even by third parties, in the context of the execution of a contract, always in compliance with the rules summarized herein and in compliance with the laws and GDPR itself.

4.2 Purposes of processing subject to consent
In some cases, we will process your data only if you have given your consent to do so.

a) Market research, possibly based on profiling activities: We conduct market research regarding the interests of our customers in order to offer them attractive and targeted offers. For these activities, however, we may also process your personal data in an anonymous and aggregate form.

  •  Advertising and marketing: if you have previously agreed to do so, we will process your data to inform you of any offers that may be of your interest  and we will contact you using the communication channels authorized by you.
  • Creation of Customer Profiles for marketing purposes: we process personal data to create customer profiles through the use of statistical methods. Based on the customer profile obtained in this way, you will receive communications for your interests, such as personalized invitations to events or gifts related to particular occasions.

4.3 Purposes of treatment to comply with legal obligations
We are subject to various legal obligations. Where necessary, we will process your personal data to ensure compliance with these obligations.

  • Management of the internal compliance: conformity means the observance of any norm or provision of law that we intend and must respect.
  • Purposes of data security: Data security is a relevant legal obligation. If necessary, we will also process your data as part of the measures necessary to evaluate and ensure data security, for example by simulating a cyber-attack.
  • Preventive measures, legal obligations and legal defense: Calpierre srl is subject to compliance with numerous legal obligations, for example in the field of IT security (such as the communication of local cybernetic attacks to its systems and / or server farms) We will process your data to the extent necessary to comply with these obligations, and we may forward your data to the competent authorities, in case of legal obligations regarding communication. We may also process your data in the event of a legal dispute, if requested.
  • In the field of computer fraud prevention: If, in the execution of your orders and / or contract, we should find violations originated from your system, your data will not be widespread, but may be communicated to the Authorities and to the Supervisory and Control Bodies and / or used in court.
  • Administrative, accounting and tax purposes: Calpierre srl will also process your data to manage your contract for administrative, accounting and tax purposes.

4.4 Purposes of processing based on legitimate interests

We process part of your data in order to safeguard the legitimate interests of Calpierre srl, except in the case where your interests prevail over the latter.

  • Business intelligence and reports: in order to continuously improve our products and services, we conduct certain automated analyzes, based on the information related to the contract, and prepare the relative reports. Based on these analyzes, we develop new products or measures to improve, for example, programmes, software, verification services and information security for customers. As a rule, we prepare the above analyzes and reports in an anonymized and aggregated form.
  • Fraud prevention:strictly necessary processing of data in order to prevent computer fraud from your systems within the execution of the contract with you.
  1. Automated data processing operations
    Your data may also be the subject of an automated decision-making process, in particular with regard to the assessments conducted by Calpierre srl aimed at ascertaining the Vulnerability of your IT systems.
  2. How long will we store your data for?
    In accordance with the art. 5, co. 1, lett. e) of the GDPR, we will retain your data only for the time necessary to process them for the purposes for which they are processed. If we process the Data for multiple purposes, they will be deleted automatically or saved in a format that does not allow to reach any direct conclusion in relation to your identity, as soon as the last specific purpose has been fulfilled. In order to delete all your data or made them anonymous in line with the principle of data minimization and in compliance with art. 5, co. 1, lett. e) of the GDPR, Calpierre srl has developed an internal cancellation program. The fundamental principles according to which your personal data are deleted on the basis of this program are described below.
    In general, in compliance with the provisions on the obligations to keep documents for accounting purposes and the general rules relating to the ordinary limitation period for contractual actions, we will delete the data relating to the contractual relationship after the ten-year term set by law.
  3. How are my data secured?
    We will process your personal data on the basis of the security obligations related to the processing of data pursuant to art. 32 GDPR. In order to guarantee an adequate level of data protection aimed at limiting the risk of using them improperly or illicitly, technical and organizational measures have been implemented,respecting internationally recognized IT standards.
  4. Who will we share your data with?
    If necessary, we will share your data for the execution of the contract with third parties external to Calpierre srl for the purposes indicated in this data protection statement. We will always take measures during the communication and the transfer of your data to guarantee that they are processed, protected and transferred in accordance with the applicable legal provisions.  The updated list of third parties identified as “independent owners” and “responsible” is available at the Calpierre srl office indicated above. A copy of this list may be provided upon written request to Calpierre srl

8.1Data transfer
Generally, Your personal data remain with Calpierre srl, where possible. In this regard, we also adhere to the principle of data economy. However, Calpierre srl may need to transfer your data to other companies that host such data on their systems. Such data transfer, for example, could take place under the following circumstances and for the purposes described below:

  • If you have given us your prior consent to share your data with other companies
  • Within the scope of the services provided to you as a customer.
  • professional advice and assistance.

Calpierre srl will designate such third parties as Data Processors, in the event that the related conditions exist, and in any case will bind such third parties to maintain confidentiality in relation to your Data. In compliance with the obligations established by the legislation on data protection, Calpierre srl has concluded agreements with third parties to which Calpierre srl will be able to transfer your data.

8.6Transfer of data to countries outside the European Union
Normally your data are processed within countries of the European Union.If within the data processing procedures described in point 8 above your data are processed in countries outside the European Union or the European Economic Area (“EEA“), Calpierre srl will ensure that your data are processed in accordance with European data protection standards. To the extent necessary and to ensure the security of data transfers to recipients in third countries outside the EU or the EEA, we will use contracts on the transfer of data on the basis of the EU standard contractual clauses pursuant to art. 46, co. 2 of the GDPR or other provisions allowing data transfer under the data protection legislation, which also include the adoption of appropriate technical and organizational measures for the protection of the transferred data.
Several countries outside the EU have already been officially recognized by the EU as countries that guarantee a similar and adequate level of data protection (an updated list of these countries is available at the following link: http://ec.europa.eu/justice/data-protection/international-transfers/adequacy/index_en.htm). This means that, in accordance with the applicable data protection provisions, any transfer of data to these countries does not require separate official approval.

9.Your rights of person concerned and your right to lodge a complaint with the supervisory authority
As person concerned, you may exercise certain rights to us under the GDPR and other applicable data protection provisions, with specific reference to the Code. The following point contains explanations regarding your rights as a person concerned under the GDPR and the Code.
9.1 Rights of the people concerned

As person concerned,you have the following rights under the GDPR against Calpierre srl:

  • Right of access (Article 15 of the GDPR): you may request at any time to be provided with information about your data stored by us. This information refers, among other things, to the categories of data processed by us, the purposes of the processing, the origin of the data in case we did not obtain it directly from you, as well as the recipients to whom we may have transferred your data , where applicable. You may receive a free copy of your data which is the subject of the contract. If you wish to obtain further copies, we reserve the right to request a fee.
  • Right of rectification (Article 16 of the GDPR): yoyu may request a correction of your data. We will take appropriate measures to ensure that the data we maintain and process on an ongoing basis is kept correct, complete, up-to-date and relevant, based on the most recent information you provide.
  • Right to cancel (Article 17 of the GDPR): may request the deletion of your data, provided that the conditions required by law exist. For example, this could occur based on the art. 17 of the GDPR:
    • if the Data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
    • if the consent on which the Processing is based is revoked and there is no other legal basis for the Processing;
    • if you oppose the processing of your data and there are no legitimate reasons to proceed with processing, or if you oppose the processing of data for direct marketing purposes;
    • if the Data have been processed illegally; unless the treatment is necessary:
      -for the fulfillment of a legal obligation that requires the processing of your data; in particular regarding the periods of conservation of the documents required by law;
      – for the assessment, exercise or defense of a legal right or claim.

Right to limit processing (Article 18 of the GDPR): you can obtain a limitation on the processing of your data

  • if you disputes the accuracy of the Data, for the period that allows us to verify the accuracy of such Data;
  • if the processing is illegal and you oppose the deletion of your data and require instead that its use is limited;
  • if we no longer need your data, but these are necessary for you to ascertain, practice or defend a right in court;
  • If youopposed to processing, waiting for the verification of the possible prevalence of our legitimate reasons, as data controller, over yours

  • Right to data portability (Article 20 GDPR): You are entitled to receive a copy of your data previously provided directly to Calpierre srl upon your explicit request, we will transfer your data – to the extent that this is technically feasible to another data controller.
  • Opposition right (Article 21 of the GDPR): You can oppose at any time, for reasons connected to your particular situation, to the processing of your data, pursuant to art. 6, paragraph 1, letters e) of) of the GDPR, or if personal data are processed for direct marketing purposes. In that case, we will no longer process your data. This last condition does not apply if we can demonstrate the existence of binding legitimate reasons that justify the processing and that prevail over your interests, or if we need your data to ascertain, exercise or defend a right in court.
  • Right to request a copy of the protection measures (Article 13 of the GDPR)prepared for the transfer of data to third countries, if applicable.
  • Right to withdraw consent at any time (Article 13 of the GDPR) – if the processing is based on consent – without prejudice to the lawfulness of the processing based on consent given prior to revocation, by sending the request to the contacts listed below or through the technical procedures made available by Calpierre srl for the related processing.

9.2 Terms of performance in relation to the rights of people concerned

We always try to handle requests within a period of 30 days. However, this period may be extended for reasons related to the specific right of the person concerned or the complexity of your request.
9.3Limitation relating to the disclosure of information during the fulfillment of obligations relating to the rights of people concerned.
In certain situations, we may not be able to provide you with information about all your data due to legal provisions. If we are obliged in this case to decline your request for information, we will also clarify the reasons for our denial.
9.4 Complaint with the supervisory If you do not consider exhaustive any feedback provided by Calpierre srl to any requests and / or reports you have the right to file a complaint with a competent authority on data protection, pursuant to art. 77 of the GDPR.
You will find the contact details of the local Authority responsible for data protection elow: Guarantor for the protection of personal data.
Addresses available on: http://www.garanteprivacy.it/web/guest/home/footer/contatti

11. Normative requirements Full text of the GDPR can be consulted by accessing the following website:http://eur-lex.europa.eu/legal-content/IT/TXT/?uri=CELEX%3A32016R0679

Further relevant national legislation on data protection can be consulted on the website of the Guarantor available at the following link www.garanteprivacy.it

12. Changes to this data protection information: Should there be any substantial changes to the way your data are processed, we will inform you promptly of such changes.


13. Contacts

For any requests for information and for the exercise of your rights, you may contact Calpierre srl at the following addresses:

  • By mail: Calpierre s.r.l. Viale Olimpico, 5 b –  Casandrino (NA)
  • by email: privacy@calpierre.it PEC: calpierre@pcert.postecert.it TEL: 081.5055589 (from Monday to Friday from 09:00 a.m. to 5:00 p.m.)
  • You can also contact our Data Protection Officer at the following e-mail addresses: giovanni@soriano.it

EXPRESSION OF CONSENT

I declare that I have read and understood this information and I freely express my consent regarding:Mandatory treatments referred to in this statement for the execution of contracts and possible transfer to third parties: 

I give my consent I deny consent

Treatments for marketing purposes referred to in this statement 

I give my consent I deny consent

Treatments for marketing purposes to third parties in charge   

I give my consent I deny consent

Date Signature of the party concerned