Privacy Policy

Pursuant to and for the purposes of Articles 13 and 14 of Regulation (EU) 2016/679

Data Controller

The Data Controller is Sunshading, a brand of Punto Finestre S.p.A., represented by its legal representative, with its registered office at Via Montenapoleone 8, Milan, and its operational office at Via Ferri 14/16, 25010 Borgosatollo (BS), Italy. You can contact the company at info@sunshading.it

Purpose of Data Processing

Your data will be processed for the following purposes:

  1. To manage user information requests via email and contact forms.
  2. To fulfill legal, pre-contractual, or contractual obligations.
  3. To create an account in the reserved area of the website.
  4. For newsletter and marketing purposes.

Information related to points 1, 3, and 4 can be deleted or modified at any time upon explicit request by the data subject.

Processing Methods

User personal data is processed with appropriate security measures to prevent unauthorized disclosure, modification, or misuse. In addition to the Data Controller, other authorized personnel and third parties designated by the Data Controller may access the Personal Data.

Consequences of Data Refusal

Providing data for purposes 1, 2, and 3 is optional; however, failure to do so will make it impossible to satisfy your request, send requested information, conclude the contract, or access the reserved area of the website.

If consent is not provided, the data subject will not receive promotional communications or newsletters regarding Punto Finestre S.p.A. activities. Consent can be revoked at any time via a written request to the above address.

Data Retention Period

Data is processed and retained for the duration necessary to achieve the purposes for which it was collected. Therefore:

  • Personal data collected for managing requests will be retained for 24 months.
  • Personal data collected for contract-related purposes will be retained until the contract is fully executed.
  • Personal data collected for legitimate interest purposes will be retained until the legitimate interest is fulfilled. The user can request additional information on the legitimate interest pursued by the Data Controller.
  • Personal data collected for marketing purposes will be retained for 24 months.
  • The Data Controller may be required to retain Personal Data for a longer period to comply with legal obligations or orders from authorities.

Once the retention period expires, the Personal Data will be deleted or anonymized. After this period, the rights to access, delete, rectify, and transfer data can no longer be exercised.

Data Sharing

We do not share your personal information with companies, organizations, or individuals outside our company, except in the following cases:

  1. Companies within our group.
  2. With our external data processors, appropriately appointed and instructed, who process your data on our behalf. Data sharing will only occur when necessary to respond to your request or provide the requested service. A full list of external data processors can be requested by emailing info@sunshading.it. This list is regularly updated and available to you. All appointed processors offer professional guarantees and comply with data protection regulations.
  3. To comply with legal obligations or upon request from competent judicial authorities.
  4. To prevent or detect unlawful acts.

Data Subject Rights

Users May Exercise Certain Rights Regarding the Data Processed by the Data Controller.

Users have the right to:

  • Revoke consent: Users can withdraw their consent to the processing of their personal data at any time.
  • Object to data processing: Users can object to the processing of their data if it is based on a legal basis other than consent. Further details on the right to object are provided in the section below
  • Access their data Users have the right to obtain information on how their data is processed and to receive a copy of their processed data.
  • Verify and request rectification Users can check the accuracy of their data and request updates or corrections
  • Request processing restrictions Under certain conditions, users can request that the processing of their data be limited to storage only. In such cases, the Data Controller will not process the Data for any purpose other than its storage.
  • Request deletion or removal Under certain conditions, users can request the deletion of their data.
  • Receive or transfer data Users have the right to receive their data in a structured, commonly used, and machine-readable format and to have it transferred to another data controller, if technically feasible. This provision applies when the Data is processed using automated tools and the processing is based on the User’s consent, a contract to which the User is a party, or contractual measures related to it.
  • File a complaint Users can lodge a complaint with the data protection authority or take legal action.

Pursuant to the same article, you have the right to request the deletion, anonymization, or blocking of data processed in violation of the law, as well as to object to its processing for legitimate reasons in any case.

The data subject has the right to object, in whole or in part: for legitimate reasons, to the processing of their personal data, even if relevant to the purpose of collection; to the processing of their personal data for the purpose of sending advertising material, direct sales, or carrying out market research.

Exercising Your Rights

To exercise their rights, users can send a request to the contact details of the Data Controller specified in this document. Requests are free of charge and processed as quickly as possible, within one month.

Policy Changes

The Data Controller reserves the right to make changes to this privacy policy at any time, notifying users on this page and, where technically and legally feasible, through notifications sent to users using the contact details available. Please check this page regularly, referring to the “last modified” date at the bottom.

Last Updated: July 26, 2022