Stiavelli Irio s.r.l. (hereinafter, Data Controller) with registered office in Prato .. headquarters…informs you that, according to the art. 13 of the EU Regulation 2016/679 (hereinafter, “GDPR”) your data will be processed as follows:

  1. Subject and purpose of the processing
    The personal data (names and e-mail addresses) you provided are processed only upon your specific and distinct consent (art. 7 GDPR), for the following Marketing Purposes:
    To send you newsletters via e-mail, commercial information and/or advertising material on products or services offered by the Data Controller.
    The legal basis of the processing is, therefore, your consent, expressed in a free, specific and informed way by inserting your mail address in the dedicated form and flag of the specific box for the consent release.
  2. Data processing procedure
    Your personal data are processed in paper form, electronically and/or automatically.
    The Data Controller shall process the personal data for the time necessary to fulfil the above mentioned purposes and, in any case, no more than 2 years since the data collection for marketing purposes.
  3. Data access
    Your personal data could be accessed, for such purpose, by people authorized by the Data Controller as in charge of/system administrators and by eventual external Data Processors.
  4. Data trasmission
    Your data will not be disclosed.
  5. Data transfer
    Your data are processed and stored at the Data Controller’s registered office and in every other place the involved parts are located. The personal data are stored on servers located within the European Union. Anyway, the Data Controller uses, to send newsletters to Data Subjects, the services from the company Mailchimp, headquartered in the United States. Mailchimp participates and certified its compliance to GDPR, by supporting the EU-U.S. Privacy Shield Framework. For further information, please consult Mailchimp privacy policy on the website
  6. Nature of data provision and consequences of not answering
    The provision of data for the purposes mentioned above is elective. Therefore, you can opt for not providing any data or for later denying the possibility of processing already provided data: in such case, you cannot receive newsletters, marketing communications and advertising material concerning products and services offered by the Data Controller.
  7. Rights of the data subject
    The data subject has the rights referred to in the GDPR and in the current regulations regarding the protection of personal data:
    to obtain confirmation of the eventual existence of data concerning him, although still not registered and their transmission in intelligible form.
    2. The subject has the right to be informed about:
    a) source of the personal data;
    b) purpose and processing method;
    c) procedures in case the data are processed by electronic instruments;
    d) identity of the data controller, people in charge and appointed representative according to Article 5, paragraph 2 of the EU Regulation 2016/679;
    e) identity of subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as, for example, the appointed representative within the country or people in charge.
    3. The subject has the right to obtain:
    a) update, amendment or, if interested, integration of the data;
    b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
    c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities of whom or which the data were communicated or disclosed, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
    4. The subject has the right to oppose totally or partially:
    a) for legitimate reasons, to the processing of personal data concerning him, even though they are relevant to the purpose of the collection;
    b) to the processing of personal data concerning him, with the purpose of sending advertising materials or direct selling or for the performance of market research or commercial communication surveys, through automated systems for calling without an operator, through e-mail and/or through traditional marketing methods through phone and /or paper mail. It should be noted that the right to oppose of the data subject, explained at the previous point b), for direct marketing purpose through automated systems, covers also the traditional methods and, in any case, the data subject can assert the right to oppose even partially. Therefore, the data subject can decide to receive communications through traditional methods or only automated communications or neither of the two typologies.
    When applicable, the data subject has the rights referred to in the articles 16-21 GDPR (right of rectification, erasure, restriction of processing, data portability, right of opposition), as well as the right to complaint to the Antitrust Authority.
  8. How to exercise your rights
    You can at any time exercise your rights by sending an e-mail to:
    You can find additional information regarding the processing of your data in the Privacy Policy in our website.
  9. Data Controller, responsabile person and people in charge
    Stiavelli Irio srl, with registered office in Prato (PO), via per il Poggio Secco, 46/E – headquarters: via Pantano, Capalle (FI)– VAT No. 01993990975 – Tel. 055898448 – Fax 055898477 – e-mail:
    The updated list of the responsible and of the people authorized to process your data is safeguarded at the registered office of the Data Controller and can be made available by sending a request to the above mentioned contact address.