Privacy Notice pursuant to Article 13 of the GDPR

Identity of the Data Controller

BARUZZI S.R.L.
Via Civinelli 945 - Cesena, Italy
Email: info@baruzzi.net
Certified Email (PEC): baruzzisrl@arubapec.it
Telephone: +39 0547 318170

Legal Basis for Processing

Performance of a Contract

Processing is necessary for the performance of a contract to which you are a party or in order to take steps at your request prior to entering into a contract.

Legal basis: Article 6(1)(b) GDPR.

Compliance with Legal Obligations

Processing is necessary to comply with legal obligations arising from applicable laws, regulations and European legislation.

Legal basis: Article 6(1)(c) GDPR.

Customer Management

• Customer administration.
• Management of contracts, orders, shipments and invoices.
• Creditworthiness and solvency assessment.

Legal bases:

• Article 6(1)(b) GDPR.
• Article 6(1)(c) GDPR.
• Article 6(1)(f) GDPR (legitimate interest in protecting the Controller's legal rights).

Supplier Management

• Supplier administration.
• Management of contracts, orders, deliveries and invoices.
• Supplier selection according to the company's business needs.

Legal bases:

• Article 6(1)(b) GDPR.
• Article 6(1)(c) GDPR.

Management of Legal Claims

• Contractual disputes.
• Formal notices.
• Debt collection.
• Settlements.
• Arbitration proceedings.
• Judicial proceedings.

Legal basis: Article 6(1)(f) GDPR (legitimate interest of the Data Controller in defending its legal rights).

Methods of Processing

Personal data are processed using paper-based, electronic and telematic means, in a manner strictly related to the purposes described above and with appropriate technical and organisational measures to ensure data security, confidentiality and compliance with applicable legislation.

Disclosure of Personal Data

Your personal data may be disclosed to:

• Banks and financial institutions;
• Law firms;
• IT maintenance and support providers;
• Public authorities;
• Freelancers, temporary and project-based workers;
• Parent or subsidiary companies of Baruzzi S.r.l.

Personal data will not be disclosed to the public.

Data Retention Period

Personal data will be retained:

• For the entire duration of the contractual relationship, where processing is based on contractual purposes.
• For the period required by applicable law, where processing is necessary to comply with legal obligations.

Rights of the Data Subject

Under Articles 15 and following of the GDPR, you have the right to:

• Access your personal data;
• Request rectification of inaccurate data;
• Request erasure of your personal data;
• Request restriction of processing;
• Object to the processing of your personal data.

Where the legal requirements are met, you also have the right to lodge a complaint with the competent Data Protection Authority.

Provision of Personal Data

The provision of personal data is a legal or contractual requirement, or a necessary prerequisite for entering into a contract. Failure to provide such data may make it impossible to establish or manage the pre-contractual or contractual relationship.

Cesena, 20/04/2026