Home|Privacy policy – Customers and suppliers


Ponti has always considered privacy protection of the utmost importance when handling data provided by individuals or legal entities having business relations with the company, whether suppliers, employees or consumers. Namely, Ponti S.p.A. complies with the provisions set forth in Gov. Decree no. 196/2003 on personal data protection. The company adopts all the required measures concerning information systems and organizational procedures  and aiming at the protection of third-party personal data, pursuant to the current applicable regulations. Mr Andrea Gaggianese is the company’s data processor. Please send us an e-mail to report any inconsistencies in company activities whereby personal data privacy is not ensured – we shall do our best to solve the issue.


Purposes of data handling.
Data handling is instrumental for the company to fulfil contract and legal obligations arising from the existing business relationships with customers/suppliers. Hence, consent to data handling is not required, pursuant to Gov. Decree no. 196/2003.

Data handling procedures.
Data handling involves filing records – whether in hard copy or electronic form – containing personal data and entering the said data in the relevant software forms.

Providing personal data.
Providing personal data is optional, but it is essential to fulfil contract obligations and comply with laws and regulations.

Consequences of failure to provide personal data.
Failure to provide personal data may prevent or hinder the fulfilment of contract obligations.

Disclosure of data to third parties.
Personal data are not disclosed to third parties, except for the fulfilment of contract obligations (e.g., in order to provide banks with banking references within the scope of money transfers) and compliance with law provisions. Personal data shall not be disseminated. The holder of data handling and data processor is Ponti S.p.A., a company having its registered office at 7, Via Ferrari, Ghemme (NO). Mr Andrea Gaggianese is the data processor. The data subject can exert the relevant rights at any times, as set forth in Section 7 of the Code, whose full text is included below.


Government Decree no.196 of 30 June 2003 – Personal Data Protection Code

Section 7. Right to Access Personal Data and Other Rights
1. A data subject shall be entitled to obtain confirmation as to whether or not personal data concerning him or her exist, regardless of their being already recorded, and communication of such data in intelligible form.
2. A data subject shall have the right to be informed:
a) of the source of personal data;
b) of the purposes and procedures of their handling;
c) of the logic applied to data handling, when performed with the aid of electronic instruments;
d) of the identification data concerning data holder, data processors and the representative designated as per Section 5, sub. 2;
e) of the entities or categories of entities to whom or which the personal data may be communicated and who or which may get to know the said data in their capacity as designated representative in the State’s territory, data processor or person in charge of data handling.
3. A data subject shall have the following rights:
a) obtaining the updating, amendment or, when interested therein, integration of the data;
b) obtaining the cancellation, anonymization or blocking of unlawfully handled data, including the data whose retention is unnecessary for the purposes of the relevant collection or subsequent processing;
c) obtaining a certification to the effect that the operations described in paragraphs a) and b) as well as their contents have been notified to the entities to whom or which the data were disclosed or disseminated, unless the fulfilment of this requirement proves impossible or involves a patently disproportionate effort compared to the right that is to be protected.
4. A data subject shall be entitled to fully or partly oppose the following:
a) on legitimate grounds, the processing of personal data concerning him or her, even though applicable to the purpose of the collection;
b) the processing of personal data concerning him or her, when performed for the purpose of sending advertising material or direct sale, or else for the performance of market surveys or commercial communication.