Article 13 of the European Regulation 679/2016 on the protection of natural persons with regard to the processing of personal
data (GDPR)


Glem Gas S.p.A. is the Data Controller of your personal data and its headquarters is in ia Modenese, 4266, 41018 San Cesario S.P. Modena, Italy (phone: + 39 059 959111).
The Company is responsible for implementing appropriate technical and organisational measures for your data protection.

The Company has designated the Privacy Focal Point, an appointed person who collaborate with the controller in application of identified security measures. The function is actually identified in the C.F.O.  located at the Company’s headquarter.

The Privacy Focal Point responsible for ensuring the compliance with the data privacy regulation for the protection of your personal data, which can be contacted for matters concerning the processing of your personal data, at the following addresses

For additional information regarding  to your rights, please, see “Your Rights” section.

Purposes of the processing

All personal data provided by you to us will be processed in accordance with current privacy legislation, therefore the Company ensures to process your personal data lawfully, fairly and in a transparent manner in accordance with the purposes indicated in the Privacy Notice, and that data collection is adequate, relevant and limited to what is necessary in relation to the purpose for which data are collected.

Data processing shall be in paper and electronic format with security profiling in order to ensure data confidentiality and security, as well as preventing unauthorised access to personal data.

The legal basis of the processing is based on for the performance of a contract to which the data subject is party  and the consent given by data subject for marketing purposes.

  1. Main purpose of Data Processing
  • Purposes related to the set-up, management and execution of the contract;
  • Purposes related to the mentioned contract management, as well as operational/managerial requirements (e.g. accountability, taxation, credit management, etc...)
  • Purposes related to regulatory requirement by local and European law.


  1. Marketing purpose of Data Processing

Sending of communications from the data controller and processors for carrying out commercial communication, events organizations, advertisement, market research, opinion polls and statistical analysis for marketing purposes. The processing is performed by automated means as call and/or e-mail and/or fax and/or SMS and/or MMS and/or other massaging and/or newsletter services, and/or through traditional marketing methods such as phone calls and/or paper

  1. Profiling activities

With specific reference to the "Contacts" section on the Glem Gas SpA website, the interested party is informed that some information is required to constitute profiling activities (for example: company, profession, interest in cooking-sinks and mixers- refrigerators-dishwasher).

This information is collected by Glem Gas S.p.A. with the purpose of managing Customer Master Data with its impact on the personal data requested.

Nature of the Processing
Glem Gas S.p.A. reminds you that the processing of your personal data is necessary for the management of the purposes set out in point 1); your refusal or give an incorrect communication of your personal data produces consequences as: a) controller's inability to ensure the adequacy performance of the contract; b) possible failure to fulfil fiscal, administrative or labour regulatory requirements.

The consent to processing your personal data for the purposes mentioned at point 2) is optional and your refusal to provide data shall not any way affect the contract performance.

Processing Methods and stored period of personal data
Your personal data will be processed with information systems to ensure security and confidentiality, in full compliance with the GDPR.

Your personal data will be processed with automated means too, finalized to recording, organizing or transmitting data, and anyway the processing will be processed in full compliance with the Regulation 2016/679.
In case of processing of data defined as “special categories of personal data” according to Art. 9,  they will be processed in full compliance with Article 9 of the Regulation.
In case of processing of data related to criminal convictions and offences, t those data will be processed in full compliance with Article 10 of the Regulation.
Data collected will be stored in accordance with the applicable legislation for no more than the period necessary t and thereafter for the period of 10 years.

Data collected for marketing purposes will be stored for 2 years from the collection.      

At the end of the stored period, data will be automatically cancelled in whole or in part (according to the applicable legislation) or anonymized.

Recipients or Categories of Recipients of the personal data
Personal data collected and information relating to subjects connected to the company can be communicated also to subsidiaries, associates and parent companies.

Data can be communicated, for the same purposes mentioned above, to the following a category of recipients:

  • persons, companies, associations or firms that provide services, assistance and consulting or supply services to the company related to technology , accountability, administration, legal, taxation and finance;
  • Banks and Insurances;
  • Subjects authorised by law to access to personal data.
  • Persons, companies, associations or firms that provide services, assistance and consulting or that supply services to the company relating to technology, accountability, administration, legal, taxation and finance, will be appointed from the controller as processors, according to article 28 of the GDPR. They will be appointed through a Data Processor Agreement, providing information related to instructions and security measured to be adopted by Processor.

The full list of recipients is available sending a request via e-mail to the address (

Transfers of Personal Data to Third Countries

Management and storage of personal data shall be in servers, located in European Union.
Data won’t be transferred outside European Union. However, the Controller has the right to change the servers’ location inside the European Union and/or in Countries Extra-UE.

In the latter case, the Controller assures that Extra-UE data transfer shall be in full compliance with articles 44 and following of the Regulation, and will provide appropriate safeguards by contractual clauses between the Controller and the recipient of the personal data in the third country which include a description of adequate security measures.

We inform you that at any time in relation to your data, you can exercise the rights under articles 15, 16, 17, 18, 20 and 21 of the GDPR.

In detail:

a. You have the right to obtain from the Company confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:

  • The purposes of data processing;
  • The categories of personal data concerned;
  • The recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
  • The  period for which the personal data will be stored;
  • Where the personal data are not collected from the data subject, any available information as to their source;
  • The existence of automated decision-making, and, at least in those cases, meaningful information about the logic involved;
  • When personal data are transferred to a third country or to an international organization the appropriate safeguards pursuant to Article 46 relating to the transfer;

 b. Moreover you have the right of the:

  • Access, update, rectification, integration or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;               
  • Obtain the data portability;
  • Withdraw consent to the processing of personal data, if applicable;
  • To lodge a complaint with a supervisory authority.

In order to exercise your rights, please contact the data Controller with a written, dated and signed request, sent to the company's attention, at the following address (

The company shall provide information on action taken on a request under Articles 15, 16, 17, 18, 20, and 21 to the data subject without undue delay and in any event within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. The company shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay.

The outcome of your request will be provided in writing or in electronic format. In case you request the correction, the cancellation or the limitation of the treatment, the Company communicate results of your requests to each of the recipients of your data, unless this proves impossible or involves a disproportionate effort.

The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.

Where requests are manifestly unfounded or excessive, in particular because of their repetitive character, the company may charge a reasonable fee based on administrative costs, or refuse to act on the request, regarding this aspect the company has developed a register to track your requests.

Privacy Notice Amendments
The present Privacy Notice could be amended. It is suggested to verify the current Privacy Notice, referring to the last update version.