Information about processing of personal data

The holder and controller of data, VEGA HOLSTER s.r.l. Via Di Mezzo, 31 56030 – Calcinaia (PISA) P. IVA 01300980503 Tel +39 0587 489190 Fax +39 0587 489901 email Web site: (hereafter, “Controller”), hereby informs You (data subject), pursuant to art. 13 of Italian Legislative Decree 30.6.2003 n. 196 (hereafter, “Privacy Code”) and art. 13 of EU Regulation n. 2016/679 (hereafter, “GDPR”) that we will process data you have spontaneously provided that does NOT pertain to special categories of personal data indicated in article 9 of the GDPR (also known as “sensitive” data, i.e. personal data that reveals racial or ethnic origins, political opinions, religious or philosophical beliefs, union membership, genetic data, biometric data, data regarding health or sex life or sexual orientation), and is NOT data regarding criminal convictions and offences or related security measures as indicated in article 10 GDPR (our clients are companies, firms and professionals).

Purposes and legal basis of processing

Your data will be processed, without your express consent (art. 6 lets. b and c GDPR), for the following purposes: performance of a contract or in order to take steps at the request of the data subject prior to entering into a contract (including the sending of information on our products and services, unless you make use of the right to oppose data processing, now or in the future) with our direct customers; compliance with a legal obligations and, with your consent, for the sending of information on our products and services to final customers (art 6 lets. a and f GDPR). Thus the legal basis for processing are legal compliance, performance of contracts and legitimate interests/consent.

Processing methods

Your data will be processed using both paper and electronic and/or automated means.


The Controller shall hold personal data for the period of time necessary to fulfill the above purposes, and in any case no longer than 2 years from the cessation of the relationship, unless otherwise established by law.

Communication of data

Your personal data will be accessible to specifically authorized employees and collaborators of the Controller, to external processors governed by a contract, and to subjects involved in achieving the above-indicated purposes (performance of contracts, pre-contractual steps and legal compliance). Your data will not be disclosed, disseminated, nor is there any intention on the part of the Controller to transfer data to a third country or international organization, unless upon your specific express request or in your interest.


You have the right to access at any time personal data that concerns you (art. 15 GDPR) and is in our possession by writing to the above-indicated addresses; you also have the right, under conditions established by law, to request the rectification of inaccurate personal data (art. 16 GDPR) or the erasure of said data under GDPR provisions (art. 17 GDPR) or the restriction of processing (art. 18 GDPR) as well as the right to data portability (art. 19 GDPR) or to object to processing (art. 21 GDPR), except in the case of legal and contractual obligations; you also have the right to lodge a complaint with a Supervisory Data Protection Authority.

Mandatory or optional nature of data provision and consequences of refusal

The provision of your data is optional but necessary for the above-indicated purposes (contract performance, enter into a contract, legal compliance, sending informations) and to process your request for information. You will always have The possibility and the right of object or refuse the sending of informational material on our products by contacting us at the above Controller’s addresses. Neither automated decision-making processes nor profiling will be utilized.