INFORMATION ON THE PROCESSING OF PERSONAL DATA RELATED TO THE RELATIONSHIP WITH CUSTOMERS AND POTENTIAL CUSTOMERS
PROSPECTIVE AND CUSTOMER PRIVACY NOTICE release 2026-04-02
The following information is intended for natural persons, including professionals, sole proprietors, and representatives/contacts of companies, organizations, associations, and foundations, hereinafter referred to as “Data Subjects”.
Identity and contact details of the Data Controller
NOXORSOKEM GROUP srl, hereinafter also referred to as “NOXORSOKEM” or “Controller”, with registered office at via Udine 46 in Cusano-Zoppola (PN), e-mail info@noxorsokem.it, PEC noxorsokem@pec.noxorsokem.it or +39 0434 977277 – 979488.
Categories of data and their source
NOXORSOKEM processes personal data of a general nature (e.g. credit-related information). Such information may be collected from the data subject to whom it relates and/or from third parties (e.g. commercial information companies).
Purposes and legal bases
- Pre-contractual phase management: personal data is processed for all needs related to the processing of requests for information and/or quotations.
- Collection of commercial information: personal data is processed to collect information for checks on the economic, financial, and asset situation of the Data Subjects, as well as their solidity, solvency, and reliability.
- Management of the contractual phase: personal data is processed for all needs related to the management of the contractual relationship in all its phases (e.g., appointment management, logistics organization, management of customer support activities, and compliance with legal obligations incumbent upon the Controller).
- Soft Spam: the e‑mail address provided in the context of the contract is used to promote products or services similar to those already sold or provided, respectively.
- Defensive purposes: the Controller may need to process personal data for the management of pre-litigation or litigation disputes, both judicial and extrajudicial.
| Purposes | Legal base (common data) | Legale base (special data) |
|---|---|---|
| A | Execution of pre-contractual measures. | |
| B | Legitimate interest of the Controller related to the analysis and definition of business strategies and policies, the identification of subjects suitable for initiating or continuing commercial relationships, payment methods and conditions, and fraud prevention. | |
| C | Execution of the contract. Fulfillment of legal obligations. |
|
| D | Legitimate interest provided for by law. | |
| E | Legitimate interest of the Controller in establishing, exercising, or defending a right. | Establish, exercise, or defend a right. |
Retention period
| Purposes | Retention period |
|---|---|
| A | Time necessary for processing received requests and subsequent communications. |
| B | Time necessary for conducting checks. |
| C | 10 years from the termination of the contract. |
| D | 24 months from the last purchase. |
| E | 10 years from the final resolution of the dispute. |
Nature of provision and consequences of refusal
| Purposes | Nature | Consequences |
|---|---|---|
| A | Necessary. | Impossibility to receive the requested information. |
| B | Non applicable. | |
| C | Necessary. | Impossibility of entering into or continuing the commercial relationship. |
| D | Optional. | Impossibility to receive promotional communications relating to products or services already sold or provided. |
| E | Necessary. | Impossibility to manage the litigation. |
Scope of communication
Data is processed by authorized internal personnel for specific tasks and is communicated externally according to the following rules:
| Purposes | Categories of external recipients |
|---|---|
| A | Commercial consultants, business brokers. |
| B | Commercial information companies, agents. |
| C | Insurance companies or credit assignment, agents, credit institutions, external consultants, subjects to whom communication is mandatory by law, business partners (customers/suppliers). |
| D | Companies providing hosting and/or technological platform management services. |
| E | Law firms, recovery or assignment of credit companies, Judicial Authority. |
Dal momento che i dati sono trattati anche con strumenti informatici, potrebbero essere altresì visibili anche ai soggetti che effettuano assistenza/manutenzioni su tali sistemi.
Transfer of data to a third country or international organization
The data subject’s personal data may be transferred to third parties located outside the European Economic Area that provide services related to the processing activities carried out by the Controller and described in this Privacy Notice, or to whom the transfer of data may be necessary in the context of the existing relationship with the data subject. Where applicable, such transfer shall be governed, depending on the recipients, by the use of standard contractual clauses adopted by the European Commission with Decision 2021/914 of 4 June 2021, as amended from time to time, or alternatively on the basis of an adequacy decision of the European Commission and/or any other mechanism permitted by applicable law. To obtain information on the location to which the data have been transferred, the data subject may contact the Controller using the contact details provided in the section “Data subject rights”.
Rights of Data Subjects
The following rights are recognized to the individual to whom the personal data refers.
Access: it is possible to know if there is ongoing processing of personal data and, if so, to obtain access to it and request a copy.
Rectification: it is possible to request the update of personal data, their correction (if inaccurate), and the integration of incomplete data.
Erasure: it is possible to obtain the erasure of personal data under certain conditions (for more information, contact the Controller).
Restriction: it is possible to request that data be marked, limiting their processing in the future, under certain conditions (for more information, contact the Controller).
Objection: it is possible to object to the processing of personal data for reasons related to one’s particular situation, where the processing is based on legitimate interest or is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller.
Portability: it is possible to receive personal data provided to the Controller in a structured format and to transmit them to another controller, where processing is based on consent or contract and is carried out by automated means.
Withdrawal of consent: it is possible to withdraw consent for the purposes that required it, without prejudice to the lawfulness of the processing carried out up to that moment.
The concrete rights exercisable regarding the processing activities carried out are:
| Purposes | Right exercisable | ||||||
|---|---|---|---|---|---|---|---|
| Access | Rectification | Erasure | Restriction | Objection | Portability | Withdrawal of consent |
|
| A | X | X | X | X | |||
| B | X | X | X | X | X | ||
| C | X | X | X | X | X | ||
| D | X | X | X | X | X | ||
| E | X | X | X | X | X | ||
To exercise the aforementioned rights, you can use the form available at the following link www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/1089924 and send it to the following address: noxorsokem@pec.noxorsokem.it. The Data Subject may request from the same address further details regarding the information provided above (e.g., legitimate interest balancing test or list of data processors).
It is possible to lodge a complaint with a supervisory authority: for Italy, the Garante per la Protezione dei Dati Personali (www.garanteprivacy.it).
