Privacy Policy

Privacy Policy 

According to art. 13 of EU Regulation 2016/679, regarding natural person’s protection, personal data processing, and free movement of such data (hereinafter GDPR), below the information regarding your personal data processing is provided. 

  1. Data controller

 Società Lugami S.A.S. (P.I.: 01410540460) with registered office in Lungomare Roma n.70 – Pietrasanta (LU)

info@bagnograzia.it 

  1. Type of personal data processed

Only Your data and your relatives’ ones – provided directly by you – will be processed during data processing. 

  1. Processing purpose and legal basis

Your data is collected and processed for the following purposes as well as the legal basis: 

Purpose: a. customer management legal basis: rule of law;

Purpose: b. fulfillment of tax and accounting obligations legal basis: rule of law;

Purpose: c. literature and merchandising, marketing material sending legal basis: consent. 

Any refusal from the involved person to provide personal data in the case referred to in point 3, letters a. and b. implies the impossibility of carrying out the above-mentioned activities. 

We will use the collected data – including your address, email address and contact number, and/or your computer contact details – for promotional purpose, marketing and to inform you about any future commercial initiative referred to in point 3, letter c., only if you will give us specific and discretionary consent.  

  1. Data processing scope

Your data will be processed manually, through the support of IT, telematics, and papery tools. 

  1. Personal data’s recipients 

Your data will not be disseminated but could be sent to: 

  1. People providing assistance and consultancy in accounting, administrative, legal, tax, and financial matters located in the European Union; 

  2. Subjects, entities or authorities, to whom personal data communication is mandatory according to law or authority order; 

  3. Employees and collaborators.

The subjects or categories of subjects to whom your data will be communicated may process them as data processors, as independent data controllers, or as joint data controllers.

The complete Data Controllers’ list can be found at the registered office, where you can ask for further information through a written request to the addresses indicated in paragraph 9 “Contacts for the exercise of the rights of the interested party and further information” below.

  1. Transferring personal data outside UE

Your data and other parties’ one will not be transferred outside the European Union.

  1. The personal data retention period

In application of the principle of proportionality, we inform you that:

– Your data will be retained for the time necessary for the related services’ execution and management for the purposes referred to in paragraph 3 a) (Customer Management);

– your data will be retained for the time set by the reference legislation for the purposes referred to in paragraph 3 b) (Fulfilment of tax and accounting obligations);

– Your data will be retained for a period not exceeding twenty-four months from their registration for the purposes referred to in paragraph 3 c) (Sending informative and promotional material, marketing). 

8. Exercise of rights by the data subject

Following Article 7 of the Code as well as with Articles 13, paragraph 2, letters (b) and (d) and with GDPR Articles 15 to 22, we inform you that:

 a) You have the right to ask the Data Controller for access to personal data, to rectify or erase it, or to limit your data processing or to object to their processing. You can withdraw consent, in addition to the right to data portability;

 b) You have the right to complain with the Guarantor, following the procedures and indications published on the Guarantor’s official website on www.garanteprivacy.it;

c) Any processing rectification, cancellation or restriction carried out on request will be communicated by the Data Controller to each recipient – unless it is not possible or involves a disproportionate effort. The Data Controllers may communicate these recipients to you on request.

 Your requests for the exercise of your rights must be put down in writing to the Data Controller at the contact details indicated in paragraph 9 “Contacts for the exercise of the rights of the data subject and further information” below.

 The exercise of rights is not subject to any form of constraint and is free of charge.

Code Article 7 text can be found below:

Art. 7. Right of access to personal data and other rights.

 1. The data subject shall have the right to obtain confirmation of the (non-)existence of personal data concerning it, even if not yet recorded, and their communication in intelligible form.

2. The person concerned shall have the right to obtain information on:

a) personal data origin;

b) processing purposes and methods;

c) The logic applied in the case of processing carried out through electronic means;

d) the owner, managers, and appointed representative’s identification details according to Article 5, co. 2;

e) Subjects or third parties to whom the personal data may be communicated.  

3. The person concerned has the right to obtain:

a) The updating, the rectification whereas (if interested) data integration;

b) The cancellation, the transformation in an anonymous form, or the block of the data processed in violation of the law, including those whose storage is not necessary for relation to the purposes for which the data were collected or subsequently processed;


c) certification that the operations referred to in points a) and b) have been brought to the attention (including as regards their content) of those to whom the data have been communicated or disseminated, except where such fulfilment proves impossible or involves the use of means manifestly disproportionate to the right being protected.

4. The person concerned has the right to partly or oppose:

 a) for legitimate reasons to his/her personal data processing, even if pertinent to the purpose of the collection;

 b) his/her data processing to send advertising material or direct sales or for carrying out market research or commercial communication.

9. Person interested rights exercise contacts and for further information.

Please send a written communication to the address of the registered office indicated in point 1, if you desire to exercise your rights concerning the purposes referred to in paragraph 3 above and/or to obtain any type of information that you may need under this privacy policy. You can also send an e-mail to the following address: info@bagnograzia.it.