Pursuant to and for the purposes of the provisions set out in the art. 13 of the European Regulation 2016/679 on the protection of personal data (“GDPR”)
and the Italian privacy legislation, we would like to inform you that your personal information will be processed both through electronic devices, hand tools
and Social Network in Italy and abroad. This privacy policy was drawn up based on the principle of transparency and all the other requirements specified
in the GDPR and articulated in single sections. Each section deals with a specific topic in order to make the reading faster and easy to understand
(hereinafter the “policy”).


The subject entitled of the processing (from now on called “the controller”) is Ideal Lux srl, Via Taglio Destro, 32, 30035, Mirano (VE) – VAT 02420040277


The data controller has not appointed a DPO under Article 38; however, you can contact the privacy office for all issues connected to the processing of your
personal data and the exercise of the rights provided by the GDPR writing to the following email address:


The lawful basis for processing your personal data are:
· Contractual obligations and execution;
· Legal obligations;
· Legitimate interest of the Data Controller


a) Your personal data will be processed for the purposes of fulfilling legal obligations and managing the following services:
1. Execution of the supply contract or of the supply order.
2. Invoicing the amounts due and for eventual additional services.
3. Fulfilment of regulatory obligations, including accountings, administrative and tax obligations.
4. Dealing with any complaints and disputes that may arise.
5. Prevention of frauds and dealing with payment delays or missed payments.
6. Protection and debt collection if necessary, either directly or through third parties (Agencies/Credit recovery companies, law offices) to which we will
communicate the necessary data for these purposes.
7. Transfer of credit to authorized companies.
8. Conservation and utilization of the data related to the punctuality of payments for reward policies and to reject future contractual relationships.
9. Reporting, quality control and certifications
b) In addition, if you give your optional agreement, you data will be processed for:
· Sales’ Communication and marketing: communication and/or diffusion (through e-mail, sms, letter, notifications, telephone, etc.) even
through automatic devices, of commercial offers, advertisement and promotional material on services even of third parties.
· Distribution: distribution through the web site: in the dedicated section “where to buy” of the data you have given us,
a. Name of the retailer
b. Complete address
c. Telephone number
d. Website
e. E-mail
The data of the physical person who sign the agreement will not be distributed.
It is necessary that you give us your data for the purposes listed at a).
Failure to provide your personal data or a partial or incorrect provision of the same could result in the impossibility of activating and supplying the requested
service or executing the supply contract.
Moreover, the communication for your data for the specific purposes listed at b) is elective, but the refusal lead to the impossibility of processing your
request of access to the reserved area on our website and to the section “where to buy”.
In any case, as better specified below, you can withdraw your agreement, even partially, by giving consent to the sales communication only.


Your personal data will be processed exclusively by authorized persons and by persons designated as Data Processors in compliance with the GDPR in
order to perform all the processing activities necessary to pursue the purposes set out in this Privacy policy. Your Personal data could be communicated to
Public Institution or to Judiciary Authority, where required by law, or to prevent or suppress a crime. In any case, they could be transmitted to:
· Legitimate subject of communications required by law or regulations (such as, for example Offices and Public Authorities);
· The recipients of necessary communications for the fulfillment of obligations derived from the supply and from the contract stipulated;
· Third-party companies specialized in the management of commercial and credit information (such as, for example, call centers, data-processing
centers, banks, etc.)
· Companies and/or collaborators in order to carry out the administrative services necessary to fulfill their legal or contractual obligations;
· Other subjects (industries, companies and natural persons) who co-operate with the data controller in providing the services and supplies
proposed by the same.
Personal data of minors under the age of 16 is not required and shall not be processed unless authorized by the holder of parental responsibility.


Your personal data will be stored for the period necessary for the pursuit of the purposes related to point a) please see above. In particular, your personal
Data will be processed for a period of time not inferior to 10 days, in other words until the termination of the contractual relations between you and the Data
controller, without prejudice to a further retention period that may be imposed by law.
Moreover, if you decide to give your agreement related to the sales purposes (see point b), your data will be stored, with the exception of withdraw of the
agreement, for a period of time not superior to the one necessary to the achievement of the purposes based on the legitimate interest of the data controller.
Data relating to CVs sent to us will be kept for no more than two years from the date of receipt.
Your data will be stored for an extra period for notifications or management of possible controversies purposes.


You have the right to completely or partially withdraw the agreement given to the data controller in every moment without compromising the legality of the
processing based on the agreement given before the withdraw.
In order to revoke the agreement you need to contact the processor using the addresses published in the present policy.


Your personal data will be processed by the Data Controller inside the European territory.
In the occasion that for technical and / or operational issues, it is necessary to use subjects located outside the European Union, we inform you, since now,
that these subjects will be appointed as Responsible of data Processing pursuant to and for the purposes of article 28 of the GDPR. The transfer of your
Personal Data to these subjects will be restricted to the performance of specific processing activities, and will be regulated by an appointment contract in
accordance to the guarantees and protections required by the GDPR.
All the necessary precautions will be adopted in order to guarantee the full protection of your Personal Data. The transfer will be operated with the respect
of all the appropriate guarantees, one of which for example, concerning the adequacy decisions of third countries expressed by the European Commission;
adequate guarantees expressed by the subject third party pursuant the article 46 of GDPR.
In any case, you can ask the Data Controller for more details if your personal data have been processed outside the European Union, requesting evidence
of the specific safeguard adopted.


We would like to remind you that you can exercise your rights under the GDPR and in particular obtain:
· the confirmation whenever your personal data is being subjected to processing or not and obtain the access to the data and to the following
information (purpose of the processing, categories of Personal Data, subjects and/or categories of subjects to whom the data have been
transferred and / or will be communicated, retention period);
· the rectification of inaccurate personal data concerning you and / or that incomplete personal data be completed, also by providing an additional
· the delete of the personal data, in the cases included in the GDPR;
· the restriction of the processing in the cases envisaged by the current Privacy Regulation;
· the portability of your data, if feasible and relevant to the service provided
· the opposition to the processing at any time, for reasons connected to your particular situation, to the processing of your personal data in full
compliance with the current Privacy Regulation.
You can exercise your rights by addressing to the e-mail address:
In any case, you will always have the right to raise a claim to the competent supervisory authority (Guarantor for the Protection of Personal Data) pursuant
the art. 77 GDPR, if you consider that the process of your data is contrary to the current Privacy Regulation.