PRIVACY POLICY PURSUANT TO ARTICLE 13 OF EU REGULATION 2016/679 (GDPR)

1. Data Controller
   The Data Controller is COR55 srls, located at Via Zuiano 7, Azzano Decimo (PN), VAT No. IT01964830937. You can contact the Controller at the following email address: cor55cv@gmail.com.
2. Types of Data Processed
   We process the following personal data:

• Mandatory data: first name, last name and/or company name, and email address.
• Optional data: email address for marketing purposes (newsletter).

3. Purpose of Processing and Legal Basis

Mandatory purposes:

• Order and contract management (Art. 6(1)(b) GDPR)
• Fulfillment of tax and legal obligations (Art. 6(1)(c) GDPR)
• Shipment of purchased goods (Art. 6(1)(b) GDPR)

Optional purposes:

• Sending promotional newsletters (Art. 6(1)(a) GDPR – consent of the data subject)

4. Methods of Processing
   Data is processed using both electronic and paper-based methods, in accordance with the security and confidentiality principles set forth by current regulations.
5. Data Retention

• Mandatory data: retained for the period necessary to fulfill contractual and legal obligations (up to 10 years)
• Newsletter data: retained until consent is withdrawn

6. Data Disclosure and Transfer
   Data may be shared with:

• Service providers (e.g., couriers, tax consultants) acting as data processors
• Public authorities, in compliance with legal obligations

7. Data Subject Rights
   Data subjects may exercise their rights under Articles 15–22 of the GDPR, including access, rectification, erasure, objection, restriction, and data portability. To exercise these rights, please write to cor55cv@gmail.com.
8. Right to Lodge a Complaint
   Data subjects have the right to lodge a complaint with the Italian Data Protection Authority (www.garanteprivacy.it).