3. How personal data are processed.
All data will be processed, worked out and stored both as paper records and electronically, as provided by art. 11 of decree law 196/2003.

4. Optional supply of data.
Given that supply of the personal data indicated is totally free on the users’ side, these data are solely requested to have users access the services mentioned at point 2. above.

5. Refusal to supply personal data.
Should users choose to partially or entirely deny supplying the personal data indicated in the request modules, such failure may mean it is impossible to obtain what has been requested and mentioned at point 2. above.

6. Disclosure of personal data.
It being understood that transmission and spreading of data will not be made unless it fully complies with the applicable laws, all personal data will be exclusively processed by Zancan S.p.A., in compliance with the current law requirements, and will only be transmitted to the persons in charge with such processing, or engaged on an occasional basis for all the activities related to providing the service.

7. Rights of the interested parties.
The parties to whom personal data refer are entitled to exercise all the rights listed at art. 7 of decree law 196/2003, which is reported hereunder, including the right to request withdrawal, variation, updating, opposition to the processing of personal data and, in case, cancellation by contacting the data processor at the following e-mail address: info@zancangioielli.com

8. Data controller, data processor and people appointed for the purpose.
The data controller and processor is Zancan S.p.A., with it headquarters in Via dell’Artigianato, 2 – 36024 Nanto (Vicenza), Italy. The people appointed for data processing are employees working at the Accounting, Sales and Marketing Departments of Zancan S.p.A., as well as other people who may be designated for this purpose.

9. Right to access personal data and other rights.
The party to whom personal data refer is entitled to obtain confirmation of whether or not such data exist, although they are not yet registered, and to know their exact content. In particular, the interested party is entitled to be informed on the following:
a) Where these data were collected from;
b) Why and how these data were used;
c) In which way these data were used when processed electronically;
d) How to identify the data controller, processor and the people appointed for the purpose, as indicated at art. 5, paragraph 2;
e) The people, parties or subjects these data may have been shared with, or have been made available to, as the representatives designated within the country’s territory, or as the people appointed for this purpose.

The interested party has also the right to obtain:
a) The updating, addition, whenever interested, or rectification of such data:
b) The cancellation, transformation into an anonymous form or blocking of data processed in violation of the law, including the data whose storage is not required in relation with the specific purposes they were collected and processed for;
c) Certification that the operations mentioned at points a) and b) above, as well as their content, have been shared with the recipients of these data, unless fulfillment of such duty is made impossible or involves a use of means which is disproportionate to the protection of this right.
The interested party is entitled to oppose, partially or entirely to:
a) On legitimate grounds, to the processing of his/her personal data although it might relate to the purpose for which they were collected;
b) The processing of his/her personal data whenever connected with the transmission of advertising materials or direct selling, or aimed at carrying out market studies or spreading commercial communications.