Privacy Policy

Information pursuant to art. 13 of the European Regulation 679/2016

Pursuant to art. 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR), and in relation to the personal data of which ACQUABIANCA MARMI SRL, represented by the Legal Representative Pro tempore, located at Via Primo Tonini, 84/A – 55034 Minucciano (LU) – VAT 01938670468 will have access to the personal data you provide, in the execution of a contract of which you are a part or in carrying out pre-contractual activities at your request, we inform you of the following:

1. Data Controller and Data Protection Officer

The Data Controller is ACQUABIANCA MARMI SRL (hereinafter also referred to as the “DATA CONTROLLER”), represented by the Legal Representative Pro tempore, located at Via Primo Tonini, 84/A – 55034 Minucciano (LU). The Data Controller can be contacted for any communication regarding privacy at the following email address: acquabiancamarmiscrl@pec.it

2. Purpose of Data Processing and Legal Basis of Processing

The Data Controller processes the personal data of natural persons, legal entities, sole proprietorships, and/or freelancers (“Data Subjects”) for the following purposes:

a) the necessity to execute a contract of which the Data Subject is a part or to carry out pre-contractual activities at their request. This necessity represents the legal basis that legitimizes the consequent processing. The provision of data necessary for these purposes represents, depending on the case, a contractual obligation or a requirement necessary for the conclusion of the contract; without them, the controller would be unable to establish the relationship or execute it;

b) the necessity to comply with legal obligations (e.g., obligations under anti-money laundering regulations, provisions issued by Supervisory Authorities, the Judiciary, etc.). This necessity represents the legal basis that legitimizes the consequent processing. The provision of data necessary for these purposes represents a legal obligation; without them, the controller would be unable to establish relationships and might be obliged to make reports;

c) the necessity to carry out promotional and sales activities of stone materials, blocks, slabs, and processed products of the controller as well as sawing and processing services provided by the controller or third parties. This necessity represents the legal basis that legitimizes the consequent processing. The provision of data necessary for these purposes represents, depending on the case, a contractual obligation or a requirement necessary for the conclusion of the contract. Without them, the controller would be unable to establish the relationship or execute it;
Personal data may be processed using both paper and electronic archives (including portable devices) and processed with methods strictly necessary to meet the purposes indicated above.

3. Consequences of Failure to Provide Personal Data

With regard to personal data related to the execution of points a, b, c above of which you are a part, or related to compliance with a regulatory obligation (for example, obligations related to keeping accounting and tax records), failure to provide personal data prevents the completion of the contractual relationship itself and/or in any case the possibility of carrying out and performing commercial and contractual collaboration activities, as well as fulfilling the contractual obligations deriving from points a, b, c themselves.

4. Data Retention

Your personal data, processed for the purposes indicated above, will be retained for the duration of the contract and, subsequently, for the time in which the Data Controller is subject to retention obligations for fiscal purposes or for other purposes, provided by law or regulation.

5. Data Communication

Your personal data may be communicated to:

a) consultants and accountants or lawyers who provide functional services for the purposes indicated above;
b) banking and insurance institutions that provide functional services for the purposes indicated above;
c) subjects who process data in execution of specific legal obligations;
d) judicial or administrative authorities, for the fulfillment of legal obligations;

6. Profiling and Data Dissemination

Your personal data are not subject to dissemination nor to any fully automated decision-making process, including profiling.

7. Rights of the Data Subject

Among the rights recognized to you by the GDPR are those of:

• request from the Data Controller access to your personal data and information relating to them; the rectification of inaccurate data or the integration of incomplete data; the deletion of personal data concerning you (upon the occurrence of one of the conditions indicated in art. 17, paragraph 1 of the GDPR and in compliance with the exceptions provided in paragraph 3 of the same article); the limitation of the processing of your personal data (upon the occurrence of one of the cases indicated in art. 18, paragraph 1 of the GDPR);

• request and obtain from the Data Controller – in cases where the legal basis of the processing is the contract or consent, and the same is carried out by automated means – your personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller (so-called right to data portability);

• object at any time to the processing of your personal data in the occurrence of particular situations concerning you;

• withdraw consent at any time, limited to cases where the processing is based on your consent for one or more specific purposes and concerns common personal data (e.g., date and place of birth or place of residence), or particular categories of data (e.g., data revealing your racial origin, political opinions, religious beliefs, health status, or sexual life). Processing based on consent and carried out before its withdrawal retains its lawfulness;

• lodge a complaint with a supervisory authority (Data Protection Authority –
www.garanteprivacy.it)

Last update: January 2026