(ex art. 13 of EU Regulation 679/16)

Morrow Sodali S.p.A., with registered office in Rome (Italy) - Via XXIV Maggio, 43, CF and VAT number IT08082221006, acting as Controller ex art. 4 of the EU Regulation n. 679/2016 (hence on "GDPR") and pursuant to art. 13 of the GDPR, with this informs you your personally identifiable data (hence on “personal data”) of your employees and partners processed in the fulfillment of the present contract, will be processed as per what follows:

  1. The Data we process

    We may process your following generic personal data: First Name, Last name, Company Name, e-mail address.

  2. Purpose and Legal Basis for Processing

    The generic data may be processed for the following purpose ex art. 6 of the GDPR:

    • Tracking of of survey’s download by data subjects;
    • Direct marketing actions by e-mail,

    Your generic personal data will be processed with your explicit consent (ex art 6.1 b) of the GDPR).

    Processing your personal data may include all or a subset of the following list: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, transmission, cancellation and destruction of data.

    Your personal data may be processed and stored both in paper and electronic form with manual and/or automated processing.

  3. Data retention

    The Controller will process your data only for the time strictly necessary to fulfill the aforementioned purposes or when you withdraw your consent.

  4. Data Access

    Your data may be made accessible for the purposes referred to in art. 2.

    • To employees and collaborators with the controller in their capacity as persons in charge of and / or internal processing managers and/or system administrators;

    Personal data are stored on servers managed by Service Providers appointed by the Data Controller and located in the EU. Personal data may be stores on servers outside the EEA only if a suitable provision of protection of natural persons guaranteed by the GDPR (ex art. 44 to 48) has been implemented by the Service Provider.

  5. Data subject’s rights

    You, as data subject, have following rights set forth by the GDPR; and in particular:

    a) Right to obtain confirmation as to whether or not personal data concerning you are being processed by the Controller, and, where that is the case, access to the personal data in an intelligible form and to the other information as per art. 15 of the GDPR.
    b) Right to rectification of inaccurate personal data concerning you. Considering the purposes of the processing, you have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
    c) Right to be forgotten or the right to obtain the erasure of personal data concerning you to the provisions and limitation stated in art. 17 of the GDPR;
    d) Right to obtain from the Controller restriction of the processing of your personal data according to the provisions and limitations of art. 18 of the GDPR.
    e) Right to object, on grounds relating your particular situation, at any time to processing of personal data concerning you which is based on point (e) or (f) of Article 6(1), including profiling based on those provisions. The controller shall no longer process the personal data unless the controller demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
    f) Right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her.
    g) When the legal basis for the processing is based onto your consent, you have the right to withdraw your consent at any time. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
  6. Right to complain with a Supervisory Authority

    Without prejudice to any other administrative or judicial remedy, as per art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

  7. How to exercise rights

    You may exercise your rights by sending an e-mail to the following address:

  8. Contact Details


    Morrow Sodali S.p.A.
    Via XXIV Maggio, 43
    00187 Rome (Italy).
    Telephone: +39 06 4521 2800

    Data Protection Officer

    Ing. Guido Zucchelli