Pursuant to European data protection law (Art. 13, European Regulation 2016/679), the User acknowledges that Novavision Group S.p.A. undertakes to process the User’s personal data according to the principles of correctness, lawfulness, transparency, and protection of confidentiality. Therefore, the User is informed that:

• DATA CATEGORIES: The data subject may be your personal data such as your name (first and last name), contact information (email address and telephone number), and the personal data contained in the message in which you requested information.
• DATA CONTROLLER: The data controller is Novavision Group S.p.a., with registered office at Viale di Porta Vercellina, 9 – 20123 Milan and operational headquarters at Via dei Guasti, 29 – 20826 Misinto (MB), VAT number 02164550960, which can be contacted by telephone at 02.96720240 or by email at privacy@novavision.net
• SOURCE OF PERSONAL DATA: The personal data held by the Data Controller are collected directly from the data subject.
• PURPOSE OF DATA PROCESSING AND LEGAL BASIS: The processing of your data, collected and stored in connection with the completion of this form, has as its legal basis your consent and is carried out for the purpose of contacting you to respond to your request received through the form.
• DATA RECIPIENTS: Within the limits relevant to the processing purposes indicated, your data may be disclosed, if appropriate, to other parties connected to the processing activities, both internal and external to the Data Controller, such as employees and similar, partners, consulting firms, and private companies. Your data will not be disclosed in any way.
• DATA TRANSFER TO THIRD COUNTRIES: The data collected will not be transferred to third countries outside the European Economic Area.
• RETENTION PERIOD: The data collected will be retained for a period of time no longer than is necessary to achieve the purposes for which they are processed (“storage limitation principle”, art. 5, GDPR) or in accordance with the deadlines established by law. The obsolescence of the data retained in relation to the purposes for which they were collected is checked periodically.
• RIGHTS OF THE INTERESTED PARTY: The interested party always has the right to request from the Data Controller access to their data, rectification or erasure of the same, restriction of processing, or the right to object to processing, to request data portability, and to withdraw consent to processing, exercising these and other rights provided by the GDPR by simply communicating with the Data Controller. The interested party may also lodge a complaint with a supervisory authority.
• OBLIGATION TO PROVIDE DATA: We inform you that providing data is optional for some fields and mandatory for others (indicated by an asterisk). Failure to provide such data will result in the inability to perform the requested service.
• METHODS OF DATA PROCESSING: The personal data you provide will be processed in compliance with the aforementioned legislation and the confidentiality obligations that inspire the Data Controller’s activity. The data will be processed using both computerized tools and on paper or any other suitable medium, in compliance with the appropriate security measures pursuant to the GDPR.
• AUTOMATED DECISION-MAKING PROCESSES: No automated decision-making processes are envisaged.