Pursuant to EU Regulation 2016/679 (hereinafter “GDPR”) and Legislative Decree 196/2003 as amended by Legislative Decree 101/2018 (“Privacy Code“), PR Industrial S.r.l., with registered office in Casole d’Elsa, Siena (SI), Località II Piano – 53031, VAT 06264860484, in its capacity as Data Controller, informs individuals (hereinafter “User(s)”) who access the following websites www.pramac.com,  www.generacinternational.com“, Home | Pramac Corporate, Pramac – Power Design Pro (hereinafter the “Site“) that the data collected through the forms on each Site will be processed for the purposes and in the manner described in this policy.

1) Type of data

The Data Controller collects the data provided voluntarily by the User on the forms on the Site such as: personal and identification data, telephone and e-mail addresses, company data, and/or other common data strictly necessary for the pursuit of the purposes referred to in point 2 below.

2) Purpose of data processing

Your personal data is collected and processed for the following purposes:

1. to follow up on your requests for information/contact;
2. to allow the Data Controller to fulfil the obligations provided for by law, by current fiscal, administrative and accounting legislation;
3. to send information relating to the Data Controller’s products, as well as promotional and commercial offers;
4. for profiling activities for marketing purposes;
5. to allow other companies belonging to the PR Industrial Group (within the EU or outside the EU), to carry out marketing activities and/or provide offers on products or services, as well as to process studies, statistical research.

3) Methods of data processing and use

User’s personal data will be processed mainly with electronic or automated tools, in compliance with the GDPR and through the implementation of specific security measures in order to prevent the loss of data, illicit or incorrect use and/or unauthorized access.

Data are stored in electronic and/or paper form, in compliance with applicable laws and limited to the period of time necessary to achieve the purposes indicated above and may be stored for a longer period due to applicable legal obligations or on the basis of the User’s consent.

4) Legitimacy of processing and optional or mandatory nature of consent

For the purposes referred to in points 2.a) and b) above, submission of data by the User is necessary and, failure to provide, even partially, the requested data will make it impossible i) to perform the obligations arising from the contract in which the data subject is involved and/or ii) to provide the services offered/requested; in relation to this purpose, consent is not required and the processing is legitimate pursuant to art. 6 (1) (b), (c) of the GDPR.

For the purposes referred to in points 2 c), d), e) the processing is based on the consent freely expressed by the Data Subject pursuant to art. 6 (a) GDPR. The provision of personal data for this purpose is entirely optional and does not affect the use of the services.

The processing of the data referred to in points c) and d) may be carried out without the consent of the Data Subject if the Data Subject has provided his/her e-mail address when purchasing a product or service pursuant to art. 130 paragraph 4 of the Privacy Code, provided that the user has not refused to send such communications. The legal basis of this processing, pursuant to art. 6 (a) (f) of the GDPR, is represented by the legitimate interest of the Data Controller to promote its products or services in a context in which the data subject can reasonably expect such processing, to which the User may object at any time.

5) Communication and transfer of personal data 

User’s data are collected and processed at the offices of the Data Controller or at the offices of the technical staff in charge of the maintenance of the Site, called External Data Processor.

Without prejudice to communications made to comply with legal obligations, personal data may be communicated for the pursuit of the purposes indicated to other recipients or categories of recipients, as independent data controllers or, where necessary, data processors specifically selected and appointed pursuant to art. 28 of the GDPR.

The Data Controller informs the User that, being part of the Generac Group, some data may be transferred to other companies of the Generac Group that are based in the United States of America.

Considering that the United States does not guarantee an adequate level of protection of personal data compared to that provided for in the European Union, the Data Controller has taken steps to ensure that the transfer of the User’s personal data to that country takes place only in compliance with the conditions set out in art. 45/49 of the GDPR and, in particular: contractual agreements based on Standard Contractual Clauses (“SCCs”) drawn up by the European Commission pursuant to Article 46 of the GDPR, Binding Corporate Rules approved by an EU Authority as well as the Data Privacy Framework. Should the Company intend to transfer the personal data of the Data Subjects to non-EU countries other than those mentioned above, such transfer will take place only in compliance with the conditions set out in art. 45/49 of the GDPR.

Transfer to the other companies of the PR Industrial Group (inside or outside the EU) for the purpose referred to in point 2.e) is based on the explicit consent of the User.

The data will not be disseminated under any circumstances.

 6) Your rights

Pursuant to the Privacy Code and the GDPR, the User has the right to access their personal data, to obtain confirmation of the existence or otherwise of their personal data and to know its content and origin, to verify its accuracy or to request its integration, updating, rectification, deletion, portability, as well as the right to request its deletion and to object to its processing for legitimate reasons.

In addition, you have the right to withdraw your consent at any time; The withdrawal of consent does not affect the lawfulness of the processing based on the consent obtained before the withdrawal.

To exercise their rights, the User may, at any time, contact the Data Controller by sending an e-mail to the address: “privacy@pramac.com“.

Users also have the right to lodge a complaint with the competent supervisory authority in the event that they believe that their personal data is being processed in such a way as to result in violations of the GDPR.

7) Updates

This Privacy Policy may be amended over time, also in relation to the possible entry into force of new regulations.

Browsing the Site is subject to the Privacy Policy in the footer of the Site itself.

The User of the Site is therefore invited to periodically consult both Privacy Policies.