Privacy Policy ShadeLAB Srl

Information pursuant to and in accordance with Art. 13, EU REG. 2016/679

Dear Sir/Madam :

in order to comply with the obligations under EU REG 2016/679, we invite you to take note of the information pursuant to Article 13 of EU REG 2016/679.


  1. Purposes of the processing for which the data are intended

The processing of personal data provided is for the sole purpose of one or more of the following activities:

  1. Respond to inquiries sent via Email, Phone or form on the website;
  2. Responding to pre-contractual inquiries;
  3. Execution of contracts with you and related commitments;
  4. Fulfillment of obligations under laws related to the contractual relationship;
  5. Organizational contract management, e.g., relationships with agents and representatives, contractors for organizing activities to be carried out at clients;
  6. Any external professional collaborations to fulfill legal obligations;
  7. Protection of contractual rights;
  8. Internal statistical analysis;
  9. Solvency information.
  10. Marketing activities by sending promotional and advertising material pertaining to products or services similar to those covered by the existing business relationship;
  11. Sending newsletters after signing up from forms on the website

The legal basis for processing is the explicit consent given or the contract signed.


  1. Method of processing and data retention period

Personal data will be processed in paper, computerized and telematic form and entered into relevant databases that can be accessed by data processors.

Processing may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary to achieve the above purposes.

The data provided will be kept for the duration of the contractual relationship and for the period necessary to fulfill all obligations under the contract.


  1. Nature of personal data
    Your personal data constitute the object of processing and will be used for the purposes indicated in point 1.

The personal data collected are essentially inherent to:

  • Identifying data of individuals (first name, last name, email, phone number, etc ...);
  • Business and economic activity data (orders, solvency, banking and financial data, accounting and tax data, etc.)


  1. Mandatory or optional nature of conferral

The provision of data and its processing are mandatory in relation to the purposes from a) to h); it follows that any refusal to provide the data for this purpose may result in the inability of the writer to initiate the same contractual relationships.

In other situations, the provision of data is to be considered optional.

  1. Scope of data communication and dissemination

In connection with the purposes stated in paragraph 1), data may be disclosed to the following parties:

  • Tax consulting firms;
  • Banking institutions for handling collections and payments;
  • Financial administrations and other companies or public agencies in fulfillment of regulatory obligations;
  • Companies and law firms for the protection of contractual rights;
  • Agents, representatives, procurers working on behalf of the writer, contracting companies, self-employed workers and contracting companies;
  • Companies that are part of the corporate structure.


  1. Identification details of the data controller and data processor

The data controller is Shadelab s.r.l. with headquarters in San Stino di Livenza (VE), Via 1° Maggio 17 in the person of the legal representative.


  1. Rights under Articles 15, 16, 17 18, 20, 21 and 22 of EU REG. 2016/679

We inform you that in your capacity as a data subject, you have, in addition to the right to lodge a complaint with a supervisory authority, the rights listed below, which you can enforce by addressing an appropriate request to the Data Controller and/or the Data Processor, as indicated in Section 6.


Art. 15-Right of access

The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed, and if so, to obtain access to the personal data and information regarding the processing.

Article 16 - Right of Rectification
The data subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him/her without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.

Article 17 - Right to erasure (right to be forgotten).
The data subject has the right to obtain from the data controller the erasure of personal data concerning him/her without undue delay, and the data controller is obliged to erase the personal data without undue delay.

Article 18 - Right to limitation of processing.
The data subject has the right to obtain from the data controller the restriction of processing when one of the following cases occurs:

  1. (a) the data subject disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
  2. (b) the processing is unlawful and the data subject objects to the deletion of personal data and instead requests that their use be restricted;
  3. (c) although the data controller no longer needs them for the purposes of processing, the personal data are necessary for the data subject to establish, exercise or defend a right in court;
  4. (d) the data subject has objected to the processing pursuant to Article 21(1), pending verification as to whether the legitimate grounds of the data controller outweigh those of the data subject.

Article 20 - Right to data portability.
The data subject shall have the right to receive in a structured, commonly used and machine-readable format personal data concerning him or her that have been provided to a data controller and shall have the right to transmit those data to another data controller without hindrance from the controller to whom he or she provided them.

When exercising his or her rights regarding data portability under paragraph 1, the data subject has the right to obtain direct transmission of personal data from one data controller to another, if technically feasible.

Article 21 - Right of Opposition
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6(1)(e) or (f), including profiling on the basis of those provisions.

Article 22 - Right not to be subjected to automated decision-making, including profiling
The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects concerning him or her or that significantly affects him or her in a similar way.


  1. Intention to transfer data abroad

We inform you that all the data collected and processed may be communicated in Italy and within the EU or outside the EU in accordance with Art.49 of the GDPR to the entities referred to in Art. 5 of this notice, for the purposes of the execution of the contract or pre-contractual measures concluded between the data subject and the Data Controller.


  1. Withdrawal of consent to treatment

You have the right to withdraw your consent to the processing of your personal data by writing to

Upon completion of this operation, your personal data will be removed from the archives as soon as possible.

Before we can provide you, or change any information, we may need to verify your identity and answer some questions. A response will be provided as soon as possible.


San Stino di Livenza, there 19/03/2024


The data controller
Shadelab s.r.l.