5. PROCESSING OF PERSONAL DATA
The data are processed lawfully and according to rules of fairness and confidentiality, in full compliance with Data Protection Act 2018 and the EU Reg. 2016/679 with both IT and manual / paper tools and in any case with tools that guarantee security and confidentiality.
Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, your personal data will be kept for a maximum period of ten years.
We may appoint external partners to perform tasks on our behalf, such as providing IT services or helping with marketing, administration of press releases, data analysis or statistics. The data may be made accessible for the purposes referred to in point 3., to employees and collaborators of the Data Controller, in their capacity as data processors and / or internal data processors; to subjects external to our organization such as subsidiaries or affiliated companies or others who perform tasks on behalf of the company (ex: tax obligations, sales network, shipping, filing, IT, consulting, transport, marketing and communication services etc.); to subjects foreseen or authorized by law.