Following the abovementioned Regulation, the personal data treatment will be characterized on the lawfulness, fairness, transparency, and protection of Your privacy and rights.

Photonia S.r.l., having his legal seat in Via Larga 36 – 40138 Bologna (BO) as Controller of the data processing, informs You that following artt. 13 and 14 of GDPR that Your personal data will be processed with the following modality and according to the following purpose(s).

  • Object of the processing

The Controller processes personal, distinctive and non-sensitive data (in particular, name, family name, email, telephone number – hereinafter referred to as the “Personal Data” or “Data”) that it will collect with reference to Your use of the Site.

  • Purpose of the processing

The basis of Your Data processing is the execution of a contract (letter a.), consent (b.), and legitimate interest of the Controller (c. and d.),

  1. for the management and execution of the contract and the pre-contractual negotiation between You and the Controller;
  2. for direct marketing purposes, such as forwarding newsletter and/or for setting up mailing lists, for advertising, event planning,
  3. to fulfill legal duties deriving from national of European rules and regulations, or from an order coming from a jurisdictional authority;
  4. to grant the Controller the possibility to exercise his right, e.g. to defend himself in front of a competent Court.
  • Data processing procedure

Data processing is performed on the basis of the operations listed under art. 4 n. 2) GDPR and precisely: collection, registration, organization, storage, consultation, elaboration, modification, selection, extraction, comparison, utilization, interconnection, interdiction, communication, cancellation and destruction, Your Personal Data are subject to both in paper and electronic/automated format processing.

  • Data access

Data will be made accessible for the purposes listed under 2 above, to employees and consultants of Photonia S.r.l., as appointed operators and/or system administrators.

  • Data transmission

Your Data may be transmitted to Data Processors appointed by the Controller. We inform you that all collected Data will not be subject to communication unless upon your explicit consent, except for communications to public bodies, consultants, or other processors to whom the transmission of Your Data is mandatory.

  • Data transfer

The management and conservation of Data will be implemented by mean of the servers that are located in the Controller’s and/or Processors’ seat.

Data will be transferred outside the EU according to art. 45 of the GDPR. It is understood that the Controller, if needed, at its own discretion, may move the company server to another location. In such case, the Controller will guarantee that the Data transfer will be performed according to the regulation in force.

  • Data dissemination. Data subject profiling.

Your Data are not subjet to dissemination. Your data are not subject to profilation.

  • Data subject rights

The Regulation grants Data subject certain rights, amongst which:

(a) to obtain confirmation that a Data treatment of his personal data is in place, and get to access such Data (art. 15 GDPR);

(b) to obtain the correction of  inaccurate personal data (art. 16 GDPR);

(c) to obtain erasure of any persona data referring to him, following the “right to be forgotten” (art. 17 GDPR);

(d) to obtain the limitation of Data treatment by the Controller (art. 18 GDPR);

(e) to receive the personal data concerning him, which he has provided to the Controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the Controller (art. 20 GDPR);

(f) to object at any time to processing of personal data concerning him (art. 21 GDPR).

You can anytime revoke the consent you gave to the Controller, without such revocation affecting Data processing that has already been put in place by the Controller.

  • How to exercise your rights

You can anytime exercise any of the rights listed above by mean of a written request to be addressed either to the Controller’s seat, or to the email address

  • Underage data subject

The Controller does not collect intentionally underage persons’ personal data. In case such data are somehow stored, the Controller will promptly delete them, upon request.

  • Data processing duration

We underline that, following the principles of lawfulness, limitation of purposes and minimization of Data, according to art. 5 GDPR, your Personal Data will be retained for the period of time not exceeding the scope they have been collected for. The verification of the obsolescence of the  retained data with reference to the scope they have been collected for will be implemented periodically.

  • Right to file a petition in front of a control authority.

You have the right to file a petition in front of a control authority at any time, if You believe that the processing of Your data has not been managed appropriately; data subject have the right to file a petition in front of their national control authority, or the control authority of the Country where they work, or the Country where the violation of their right has taken place.

  • Controller, Processors, appointed Operators.

The Data Controller is Photonia S.r.l.. The updated list of Processors and appointed Operators is stored at the Controller’s legal seat.