Newsletter information

Notice on the processing of personal data

The company Elba Italy S.p.A. (hereinafter, for brevity, ‘Elba’, or the ‘Company’) informs you that the personal data acquired as a result of subscribing to the newsletter service on this site will be processed in compliance with the law on the protection of personal data.

With reference to the methods of management and processing of personal data of users who subscribe to the newsletter of this website, pursuant to Article 13 EU Regulation No. 679/2016, Elba provides the following information:

1. Types of data collected

Data provided voluntarily by the user

The following data will be collected when the request to subscribe to the newsletter is sent:

  • personal data;
  • e-mail.

2. Purpose and legal basis of processing

The data provided by the data subject and collected by Elba in the Newsletter subscription form on this site will be processed for:

A. send the Elba Newsletter of an informative and promotional nature to users who have explicitly requested it. The legal basis that legitimises the processing of personal data for this purpose is to be found in the hypothesis provided for in article 6(1)(b) of EU Regulation No. 679/2016, i.e. insofar as the requested service is provided to the user.

B. to fulfil any obligations under laws or regulations or requests by judicial authorities. The legal basis that legitimises the processing of personal data for this purpose is to be found in the hypothesis provided for in article 6(1)(b) of EU Regulation No. 679/2016, (1)(C) of EU Regulation No. 679/2016 i.e. because the processing is necessary for compliance with a legal obligation to which the data controller is subject;

3 Data retention period

Personal data collected and processed as a result of their submission through the contact form on this site will be retained for the duration of the service and then immediately deleted, with the exception of data required to comply with tax, accounting and administrative regulations or to fulfil other legal obligations.

4. Methods of processing

The personal data collected will be processed, stored and processed by electronic means and will be stored both on computer media and on paper, organised in databases, and on any other suitable media.
Specific security measures are observed to prevent loss of data, unlawful or incorrect use and unauthorised access.

Elba’s processing of personal data does not involve any automated decision-making processes.

5. Disclosure of personal data

The provision of data in the newsletter subscription form is a necessary requirement for the provision of the requested service and therefore contractually obligatory for the purposes indicated in points 2(a) and 2(b) of the information notice: failure on the part of the person concerned to provide personal data will make it impossible for Elba to provide the newsletter service.

6. Persons to whom personal data may be disclosed

The personal data collected will not be disclosed and may be communicated, in addition to the subjects whose right and interest in accessing your personal data is recognised by law or secondary and/or EU regulations, to authorised personnel within the Data Controller, as well as to companies, associations or professional firms that provide services and activities on behalf of the Data Controller in their capacity as Data Processor for the fulfilment of legal obligations, as well as for any organisational and administrative requirements necessary to provide the services requested.

The names of further persons who may become aware of your personal data in their capacity as ‘data processors’ are set out in an up-to-date list available from Elba (to be obtained from the contact details given in Section 9).

7. Transfer of data abroad or to international organisations

Elba does not transfer the personal data of data subjects collected through the newsletter subscription form on this site abroad or to international organisations.

8. Rights of the data subject

In relation to the aforementioned processing of personal data, the data subject is entitled to exercise at any time the rights provided for in EU Regulation No. 679/2016, including, for example, to obtain, within 30 days of the request, the indication:

  • of the origin of the personal data;
  • of the purposes and methods of the processing;
  • of the logic applied in the event of processing carried out with the aid of electronic instruments;
  • of the identification details of the Data Controller, the data processors and the designated representative.

The data subject is also entitled to obtain within the same 30-day period

  • the access, the update, rectification or, where interested, integration the data;
  • the cancellation, transformation into anonymous form or blocking of data processed in breach of the law;
  • the restriction of the processing of data concerning him/her, i.e. to ask the controller or processor to restrict the purposes or means by which his/her data are processed.

The data subject may also request a copy of his or her data in a standardised format (‘Right to data portability’).

Finally, the data subject has the right to object at any time and without cost, in whole or in part:

  • for legitimate reasons to the processing of personal data concerning him/her, even if pertinent to the purpose of collection;
  • the processing of personal data relating to him carried out pursuant to Article 6(1) GDPR, letters e. (“processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller”) or f. (“processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party”) including profiling on the basis of these provisions.
  • the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication (direct marketing), including profiling insofar as it is related to it.

The data subject has the right to withdraw his or her consent to the processing, where this is based on the assumption provided for in Article 6(1)(a) (when “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”), or Article 9(2)(a) (the data subject has given explicit consent to the processing of those personal data for one or more specified purposes) of EU Regulation 679/2016, at any time without affecting the lawfulness of the processing based on the consent given before the withdrawal.

If the data subject considers that processing concerning him or her is in breach of the legislation in force, he or she has the right to lodge a complaint with a supervisory authority, namely in the Member State where he or she normally resides, works or where the alleged breach has occurred. The Italian Regulatory Authority can be reached at the contact details on the its website.

9. Data controller – Contact details

The Data Controller is Elba Italy S.p.A., Via Fabian Matteo, n.7 31030 Borso del Grappa (TV), VAT no. IT03295340263. The Company may also be contacted at the e-mail address info@elba-cookers.it and the PEC address elbaitalyspa@legalmail.it.

To exercise the rights listed above, the person concerned may make a request using the info@elba-cookers.it e-mail account.

10. Data Protection Officer

The Haier Europe Group, of which Elba Italy S.p.A. is a part, has appointed a Data Protection Officer (also known as “DPO” or “Data Protection Officer”), who can be contacted by data subjects for all matters relating to the processing of their personal data and the exercise of their rights arising there from.

The designated Data Protection Officer can be reached at the following address: dpo@candy-group.com.