Privacy Policy

INFORMATION ON THE PROTECTION OF PERSONAL DATA

Potent S.a.s. di Vettorazzi Gian Luca & C., with registered office in Via Regio Parco 87/Bis/D – 10036 Settimo Torinese (TO), Tax Code and VAT No. 02318210016, as Data Controller, informs you that, pursuant to Article 13 of EU Regulation 2016/679 (“GDPR”), your personal data will be processed in the manner and for the purposes described below.

Data Controller

The Data Controller is Potent S.a.s. di Vettorazzi Gian Luca & C., with registered office at Via Regio Parco 87/Bis/D – 10036 Settimo Torinese (TO).
The updated list of data processors and persons in charge of the processing is available at the Controller’s registered office.

Types of Data Collected

The personal data collected include

Name and surname
Company name
Address
Telephone number
E-mail address
Bank and payment details

The data are voluntarily provided when concluding contracts for products or services or via the website’s contact form.

Purpose of the Processing

A) Service Purposes

To conclude contracts for products or services.
To fulfill pre-contractual, contractual, and fiscal obligations.
To comply with legal, regulatory, or EU obligations or orders from authorities.
To exercise the Controller’s rights (e.g., right of defense in court).

B) Marketing Purposes

To send newsletters, promotional communications, and advertising materials via email, mail, or phone.
To measure customer satisfaction regarding the quality of products/services.

Legal basis

Processing for Service Purposes (point A) does not require consent as it is necessary for the performance of a contract.
Processing for Marketing Purposes (point B) requires explicit consent.

Processing Methods

Processing will be carried out using both paper and electronic tools, adopting measures to guarantee data security.
Data will be retained as follows

For service and fiscal purposes: up to 10 years after the end of the relationship.
For marketing purposes: up to 2 years from data collection.

Data Security

The Controller adopts security measures compliant with Article 32 of the GDPR, including encryption technologies (AES) and secure transmission protocols (HL7, HTTPS).

Access to Data

Data may be accessible:

To employees and collaborators, authorized and trained in data processing.
To third-party companies providing outsourced services (e.g., banks, professional firms, IT providers, couriers).

Data Disclosure

Data may be disclosed, without the need for consent, to:

Supervisory bodies,
Judicial authorities,
Insurance companies,
Entities to whom disclosure is mandatory by law.
These entities will act as autonomous Data Controllers.

Data will not be disseminated.

Data Transfer

Data are stored within the European Union.
Should it be necessary to transfer data outside the EU, it will be done in compliance with the GDPR, using the European Commission’s standard contractual clauses.

Nature of Data Provision

Providing data for Service Purposes is mandatory.
Failure to provide such data will make it impossible to provide the requested services.

Data Subject Rights

As a data subject, you have the right to:

Access your personal data.
Request correction or updating of your data.
Request deletion (“right to be forgotten”).
Request restriction of processing.
Object to processing, especially for direct marketing purposes.

Exercising Your Rights

You may exercise your rights by sending:

A registered letter with return receipt to Potent S.a.s. di Vettorazzi Gian Luca & C., Via Regio Parco 87/Bis/D, 10036 Settimo Torinese (TO).
An email to: info@pec.potent.it.