{"id":4399,"date":"2026-05-18T19:14:21","date_gmt":"2026-05-18T19:14:21","guid":{"rendered":"https:\/\/www.crpi.it\/?page_id=4399"},"modified":"2026-05-18T19:26:15","modified_gmt":"2026-05-18T19:26:15","slug":"privacy-policy-data-processing","status":"publish","type":"page","link":"https:\/\/www.crpi.it\/en\/privacy-policy-data-processing\/","title":{"rendered":"Privacy Policy on the Processing of Personal Data"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-page\" data-elementor-id=\"4399\" class=\"elementor elementor-4399\">\n\t\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-43e8cdc elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"43e8cdc\" data-element_type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-a4f742e\" data-id=\"a4f742e\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-7ea9167 elementor-widget elementor-widget-text-editor\" data-id=\"7ea9167\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.14.0 - 26-06-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<h2>Privacy Policy on the Processing of Personal Data<\/h2>\n<h3>Pursuant to Article 13 of EU Regulation 2016\/679<\/h3>\n<h5><b>1 &#8211; Identity and Contact Details of the Data Controller<\/b><\/h5>\n<p class=\"big\">The Data Controller pursuant to Article 24 of the GDPR, namely the party determining the purposes and means of the processing, is CRPI Compagnie Riunite Partecipazioni Industriali Srl whose contact details are:<\/p>\n\n<ul>\n \t<li>Legal office: Via Abruzzi, 72 20131 Milan (MI)<\/li>\n \t<li>e-mail address: <a href=\"mailto:privacy@crpi.it\"> privacy@crpi.it<\/a><\/li>\n<\/ul>\n<h5><b>2 &#8211; Contact details of the Data Protection Officer <\/b><\/h5>\n<p class=\"big\">The Data Controller has appointed a Data Protection Officer, available at the following contact details:<\/p>\n\n<ul>\n \t<li>Telephone: +39 02 49 5431 50<\/li>\n \t<li>E-mail: <a href=\"mailto:privacy@crpi.it\">privacy@crpi.it<\/a><\/li>\n \t<li>PEC: <a href=\"mailto:crpi@pec.it\">crpi@pec.it<\/a><\/li>\n<\/ul>\n<h5><b>3 &#8211; The purposes and legal bases<\/b><\/h5>\n<p class=\"big\">Your personal identification and contact data, subject to processing, are used for the following purposes:<\/p>\n\n<table style=\"text-align: left;\" border=\"1\" width=\"100%\" cellspacing=\"0\" cellpadding=\"2\">\n<tbody>\n<tr>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\"><strong>Purpose<\/strong><\/td>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\"><strong>Legal Basis<\/strong><\/td>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\"><strong>Data retention<\/strong><\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\">A) respond to Your specific requests<\/td>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\">Performance of a contract to which You are a party<\/td>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\">10 years from termination of the contract<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\">B) fulfill pre-contractual, contractual and tax obligations relating to the conclusion and\/or execution of contracts to which You are a party<\/td>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\">Performance of a contract to which You are a party<\/td>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\">10 years from termination of the contract<\/td>\n<\/tr>\n<tr>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\">C) fulfillment of legal and\/or regulatory obligations of a fiscal, administrative and accounting nature<\/td>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\">Necessity to comply with legal obligations<\/td>\n<td style=\"text-align: left;\" align=\"left\" valign=\"top\">10 years from termination of the contract<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<h5><b>4 &#8211; Categories of recipients<\/b><\/h5>\n<p class=\"big\">It should be noted that, in relation to the purposes indicated above, personal data may be disclosed to recipients collaborating with the Data Controller or for the fulfillment of legal obligations. Such recipients are bound to the utmost confidentiality regarding any information they may become aware of and, by way of example, the categories are listed below.<\/p>\n\n<ul>\n \t<li>Authorities, public administrations and supervisory and control bodies for their institutional purposes.<\/li>\n \t<li>Parties collaborating with the Data Controller for the achievement of the purposes indicated above.<\/li>\n \t<li>Parties providing services for the management of the Data Controller\u2019s IT system.<\/li>\n \t<li>Qualified professionals for the study and resolution of any legal and contractual issues.<\/li>\n \t<li>Consultants, consulting companies and professional firms, (business organization experts, payroll processing companies, accountants, etc\u2026).<\/li>\n \t<liBanks or similar organizations.<\/li>\n<\/ul>\n<h5><b>5 &#8211; Transfer of data outside the EU<\/b><\/h5>\n<p class=\"big\">The Data Controller does not transfer data to third countries; however, it reserves the right to use cloud services and, in such case, the service providers will be selected among those providing adequate guarantees as provided for by Article 46 of GDPR 679\/16.<\/p>\n\n<h5><b>6 &#8211; The data retention period or the criteria used to determine it<\/b><\/h5>\n<p class=\"big\">The Data Controller will process personal data for the time necessary to fulfill the above purposes, the personal data will be processed and stored both in paper and digital form by duly informed and authorized personnel and by specifically appointed processors, and in any case for no longer than 10 years from termination of the relationship.<\/p>\n\n<h5><b>7 &#8211; Rights of the data subject<\/b><\/h5>\n<p class=\"big\">Please be informed that, in relation to the processing of the personal data concerned, in order to ensure fair and transparent processing, the following rights may be exercised:<\/p>\n\n<ul>\n \t<li>Right to information and access pursuant to Article 15 GDPR: in order to obtain from the Data Controller information on whether or not personal data concerning you are being processed as well as access to your personal data and information on the purposes of the processing, the recipients or categories of recipients to whom the data are disclosed.<\/li>\n \t<li>Right to rectification (pursuant to Article 16 GDPR), erasure (pursuant to Article 17 GDPR) and restriction (pursuant to Article 18 GDPR) in order to request from the Data Controller the rectification and erasure of your personal data and the restriction of processing.<\/li>\n \t<li>Right to portability (pursuant to Article 20 GDPR) in order to receive in a structured, commonly used and machine-readable format the personal data concerning you provided to the Data Controller and you have the right to transmit such data to another controller, provided that such operation is technically feasible.<\/li>\n \t<li>Right to object (pursuant to Article 21) in order to object to the processing of your data.<\/li>\n \t<li>You may at any time exercise your rights by writing:\n<ul>\n \t<li>by mail to CRPI Compagnie Riunite Partecipazioni Industriali Srl, Via Abruzzi, 72 20131 Milan (MI) &#8211; Italy, to the attention of the Data Protection Officer<\/li>\n \t<li>by e-mail, to the Data Protection Officer: <a href=\"mailto:privacy@crpi.it\"> privacy@crpi.it<\/a><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<h5><b>8 &#8211; The right to withdraw consent<\/b><\/h5>\n<p class=\"big\">With reference to Article 6 of GDPR 679\/16, the data subject may withdraw the consent given at any time. Following withdrawal, neither the exact fulfillment of the services covered by the contract nor the continuation of the contractual relationship in which the processing of personal data depends exclusively on the expression of consent can be guaranteed.<\/p>\n\n<h5><b>9 &#8211; The right to lodge a complaint with the Supervisory Authority<\/b><\/h5>\n<p class=\"big\">The data subject has the right to lodge a complaint with the Supervisory Authority of the State of residence.<\/p>\n\n<h5><b>10 &#8211; Mandatory or optional nature of data provision and consequences in case of failure to provide data<\/b><\/h5>\n<p class=\"big\">The provision of data and consent to their processing for the purposes a), b), c) is necessary for the performance of a contract to which You are a party or for the implementation of pre-contractual measures adopted at your request and any failure to provide them prevents the supply of the requested products\/services.<\/p>\n\n<h5><b>11 &#8211; The existence of automated decision-making or profiling processes and the logic used<\/b><\/h5>\n<p class=\"big\">No profiling processes are carried out.<\/p>\n<p class=\"big\">Update: October 2025<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>Privacy Policy on the Processing of Personal Data Pursuant to Article 13 of EU Regulation 2016\/679 1 &#8211; Identity and Contact Details of the Data Controller The Data Controller pursuant to Article 24 of the GDPR, namely the party determining the purposes and means of the processing, is CRPI Compagnie Riunite Partecipazioni Industriali Srl whose&#8230;<\/p>\n","protected":false},"author":2,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"elementor_header_footer","meta":{"footnotes":""},"_links":{"self":[{"href":"https:\/\/www.crpi.it\/en\/wp-json\/wp\/v2\/pages\/4399"}],"collection":[{"href":"https:\/\/www.crpi.it\/en\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.crpi.it\/en\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.crpi.it\/en\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.crpi.it\/en\/wp-json\/wp\/v2\/comments?post=4399"}],"version-history":[{"count":14,"href":"https:\/\/www.crpi.it\/en\/wp-json\/wp\/v2\/pages\/4399\/revisions"}],"predecessor-version":[{"id":6001,"href":"https:\/\/www.crpi.it\/en\/wp-json\/wp\/v2\/pages\/4399\/revisions\/6001"}],"wp:attachment":[{"href":"https:\/\/www.crpi.it\/en\/wp-json\/wp\/v2\/media?parent=4399"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}