Dear customer,

We wish to inform you that the EU Regulation 679/16 provides for the protection of persons and other subjects regarding the processing of personal data. The treatment will be based on principles of correctness, lawfulness and transparency as well as the protection of your privacy and your rights. In our organization operative procedures are in force that involve all the operators.

Data controller

The owner of the data processing is Quema S.r.l. , offices in Via Acqualunga, 47 54038 Montignoso  contatti 39 0584.799135 email:

Purpose of the processing

The treatment is primarily aimed at the management of the pre-contractual phase and the correct and complete execution of the contractual relationship with Quema Srl, in relation to the requirements and the consequent fulfillment of contractual, legal and fiscal obligations. In particular, among the primary purposes of treatment are the following : preparation of estimates and order confirmations,  execution of the contractual relationship; fulfillment of legal obligations, in the fiscal and accounting fields and other related to our activity and Compliance with any other legal obligations.

Your personal data , previous consent, can be processed for further purposes such as newsletters, invitations or invitations to events, congresses and meetings; greeting cards, commemorative and commemorative cards; information on the opening / closing times of the Company's offices; management of promotional, advertising, commercial and marketing / telemarketing activities (analysis and market surveys).

The processing of your personal data is carried out by means of the operations indicated in art. 4 paragraph 1 No. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data.

Lawfulness and methods of processing, data retention

The processing will be carried out in both paper and electronic and / or automated form, in compliance with the provisions of art. 32 of the GDPR 2016/679 regarding security measures, by persons specifically appointed and in compliance with the provisions of art. 29 GDPR 2016/679. 

The personal data provided for the purposes set out above will be kept until the request for cancellation by the interested party, which must be sent via e-mail to 

We also inform you that the collected data will never be disclosed and will not be communicated without your explicit consent, except for the necessary communications that may involve the transfer of data to external companies, consultants or other subjects for the fulfillment of legal obligations .

Scope of communication

Your personal data may be made accessible for the purposes mentioned above to externals, such as external professionals (including but not limited to: lawyers, accountants, labour consultants, data processing centres, etc.) who provide functional services to achieve the Primary and / or Additional Purposes, which - if the conditions of the law exist - will take on the role of external managers of the treatment;

  • employees, collaborators and coadjutors of the Owner, in their capacity as agents and / or internal managers of the processing and / or system administrators, or the DPO if appointed;
  • third-party companies or other subjects not mentioned in the previous letters (by way of example, credit institutions, professional firms, consultants, insurance companies for providing insurance services, factoring, leasing, etc.) which provide services that are functional to the Primary and / o Further purposes , which - if the conditions of law exist - will take on the role of external managers of the treatment;
  • subjects who process data in execution of specific legal obligations;
  • judicial or administrative authorities, including arbitration, for the fulfillment of legal obligations; 
  • publishers and directors of magazines or newspapers for Further Purposes. 
  • To suppliers, hardware and software service engineers, who perform outsourcing activities on behalf of the Owner

Data Transfer

The management and storage of personal data will take place on servers located within the European Union. The data will not be transferred to third countries not belonging to the European Union. It remains understood in every case that the Data Controller, where necessary, will have the right to move the server's location to non-EU countries as well. In this case, the Data Controller hereby ensures that the transfer will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements guaranteeing an adequate level of protection and / or adopting the standard contractual clauses envisaged by the European Commission. 

Rights of the interested party

At any time, you may exercise, pursuant to articles 15 to 22 of EU Regulation no. 2016/679,  according to limits and law

Particularly you have the right to:

Access: the interested party has the right to ask whether or not there is a processing of data concerning him and, if so, he has the right to know such data.

Rectification: the interested party can ask to rectify or integrate the data he has provided us or in any case in our possession, if incorrect.

Cancellation: the interested party can request that his data be deleted, if they are no longer necessary for the purposes for which they were collected or in the case of withdrawal of consent, opposition to the processing, in the event of illegal treatment, or if there is any a legal cancellation obligation;

Limitation: the interested party may request the limitation of the processing of his personal data, when one of the conditions referred to in art. 18 of the GDPR; in this case, your data will not be processed, except for storage, without your consent except for what is explicit in the same art. in paragraph 2.

Opposition: the interested party may object at any time to the processing of his data carried out on the basis of our legitimate interest, unless there are legitimate reasons to proceed with the processing, for example for the exercise or our defense in court.

Portability: the interested party can ask to receive his data, or, or, if technically possible, to have them transmitted to another holder indicated by him, in a structured format.

Furthermore, pursuant to art. 7, par. 3, GDPR, we inform you that you can exercise your right to withdraw consent at any time, without affecting the lawfulness of the treatment based on the consent given previously.

Where applicable, you also have the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right of limitation of treatment, right to the portability of contractual and raw browsing data, right of opposition), as well as the right of complaint to the Authority Guarantor.

Way of exercising rights

To exercise these rights, report problems or ask for clarifications on the processing of your personal data, you can contact the data controller at the address indicated in the appropriate section. If the user believes that he has not obtained an adequate and timely response regarding his privacy requests, he has the right to contact the competent authority. As an interested party, you can exercise your rights at any time by sending an e-mail to the following e-mail address:


QUEMA SRL in persona del legale rapp.te p.t.