Personal data protection code

Legislative Decree of 30 June 2003, No. 196 (published in the official bulletin Gazzetta Ufficiale on 29 July 2003, No. 174, Ordinary supplement No. 123/L)

According to and in compliance with Article 13 of the Legislative Decree No. 196 of 30 June 2003 - Privacy Code, concerning the protection of personal data, your personal information will be processed according to correct, legal and transparent principles, safeguarding your privacy and rights.

“Processing” shall mean any operation, or set of operations, carried out with or without the help of electronic or automated means, concerning the collection, recording, organization, keeping, interrogation, elaboration, modification, selection, retrieval, comparison, utilization, interconnection, blocking, communication, dissemination, erasure and destruction of data about public or private subjects.


The processing of your data has the purpose of complying with agreement conditions and deriving civil and fiscal obligations, the update of customer and supplier records, internal statistical analysis, commercial information and promotion of our activity.


The data will be processed using electronic and IT tools and stored on IT systems or any other suitable medium, in compliance with the minimum security requirements described in the Technical Regulations Annex “B” of Legislative Decree No. 196 of 30 June 2003.


Personal data communication is compulsory for the purposes related to the compliance with agreement conditions and for the execution of all activities related to and deriving from agreement conditions and obligations. Possible total or partial denial to provide data may cause the total or partial failure to execute the agreement, or the impossibility to maintain any business relationship, without any fault on our side and with all deriving consequences.


Data may be transferred to:

  • our employees, collaborators, consultants and other representatives;
  • subjects involved in the execution of agreement obligations;
  • employees of external companies in charge for IT management and maintenance;
  • credit institutes for financial transactions related to our business relationships;
  • Under no circumstances will your data be distributed.



The controller of processing operations is Cepra spa, with registered headquarters in Centro Direzionale Milanofiori - 1a Strada Palazzo F3 - 20090 Assago (Milano). The e-mail address for privacy-related communications is


 ( Art. 7 of Decree Law No. 196 of 30 June 2003)

At any time you can exert the following rights towards the controller of the processing operations, according to Art. 7, as listed hereunder.

  • An individual has the right to enquire about the existence or non-existence of personal information, even if not registered, and their communication in a comprehensible form.
  • The individual has the right to be informed about:
  • the source of the personal data;
  • the purposes and methods of the processing;
  • the logic applied to the processing, if the latter is carried out with the help of electronic means;
  • the identification data concerning data controller, data processors and the representative designated as per Section 5, paragraph 2;
  • the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
  • A data subject shall have the right to obtain:
  • updating, rectification or, where interested therein, integration of the data;
    • erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
  • certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
  • A data subject shall have the right to object, in whole or in part:
    • on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
    • to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.


Authorization to process data and receive communications by e-mail

By clicking on the "Submit" button, you acknowledge you have read the information note presented by the controller and you authorize Cepra spa to send promotion messages and commercial communications by e-mail, according to the privacy code

Share this page: