Privacy notice on the processing of personal data – Commercial contacts

This privacy notice is provided by Coind sc pursuant to Article 13 of the GDPR to describe the processing of personal data collected via the "Informazioni Commerciali" form on the Company's website.

1. Data Controller

The Data Controller is Coind sc, with registered office at Via Saliceto 22/H - 40013 Castel Maggiore (BO). For specific communications concerning commercial enquiries and the exercise of privacy rights, the data subject may contact the competent office at: commerciale@coind.it. For general privacy matters: ecommerce@coind.it.

2. Categories of Personal

Data Processed By completing the form, the Controller collects and processes the following categories of personal data:

• Identification data: first name and last name.
• Professional data: company of employment, role/position held.
• Contact data: corporate email address, telephone number (landline and/or mobile).
• Messaging data: information voluntarily provided by the user in the body of the message (requests regarding Private Label, partnerships, supply volumes, etc.).

3. Purposes and Legal Basis of the Processing

The processing of the provided data is carried out solely for the following purposes:

1. Responding to commercial and pre-contractual requests: providing detailed information on products, services, quotations, industrial partnerships or Private Label projects requested by the data subject.
• Legal basis: performance of pre-contractual measures at the request of the data subject (Art. 6(1)(b) GDPR).

1. Quality monitoring and internal statistics: aggregated analysis of incoming requests to optimise commercial responses and improve B2B customer service efficiency.

• Legal basis: legitimate interest of the Controller in improving its commercial performance (Art. 6(1)(f) GDPR).

4. Nature of Provision

Provision of data is optional but strictly necessary to enable Coind sc to correctly qualify the data subject’s corporate profile and provide a relevant response. Failure to provide mandatory fields will make it impossible for the commercial office to process the request or to establish a professional dialogue.

5. Processing Methods and Security

Data will be processed mainly using IT systems and management software (CRM) by personnel specifically trained and authorised. Appropriate security measures are adopted to protect the confidentiality of exchanged corporate information and to prevent unauthorised access or accidental data loss.

6. Recipients of the Data

Personal data will not be disclosed and may be communicated only to:

• Internal personnel of Coind sc’s Commercial, Marketing and Administration divisions.
• Any external commercial consultancy firms or local sales agencies, if necessary for geographic handling of the request (subject to appointment as Data Processor pursuant to Art. 28 GDPR).
• IT service providers for maintenance of communication and storage systems.

7. Retention Period

Data will be retained:

• If a commercial relationship is established: for the duration of the contractual relationship and for the subsequent 10 years (statutory terms).
• If no commercial follow-up occurs (negotiation not concluded): for a maximum period of 12 months from receipt of the request. This period is necessary for statistical purposes, service quality monitoring and to facilitate recognition of the data subject should similar queries reoccur within a short timeframe.

8. Data Subject Rights

The data subject may exercise the rights granted by the GDPR (Arts. 15–22) by writing to commerciale@coind.it:

1. Right of access and rectification of professional data;
2. Right to erasure (right to be forgotten) where data are no longer necessary for the purposes for which they were collected;
3. Right to object to processing based on legitimate interests;
4. Right to lodge a complaint with the Data Protection Authority (www.garanteprivacy.it).