Information on the processing of personal data
Pursuant to and for the purposes of art. 13-14, EU Reg 2016/679 (European Regulation on the protection of personal data)
This is to inform you that EU Regulation 2016/679 (“European Regulation on the protection of personal data”) provides for the protection of persons and other subjects and compliance with the processing of personal data pursuant to articles 13 and 14, therefore, we provide you with the following information:
- Purpose, legal basis of the processing for which the data is intended
The Data Controller processes your personal data if one of the following conditions exists:- The processing is necessary for the execution of a contract and/or the execution of pre-contractual measures;
- The processing is necessary to fulfill a legal, accounting, tax obligation to which the Data Controller is subject;
- The processing is necessary for the pursuit of the legitimate interests of the Owner or third parties;
- Subject to your consent, allow you to send commercial and/or promotional communications about its products and services, as well as carry out market research.
- Source from which the personal data comes
The personal data processed are those provided by the interested party on the occasion of:- Interactions through the website;
- Requests for information, including via email and telephone, meetings in the respective offices or on the occasion of events (conferences, fairs, events, etc.);
- Previous commercial transactions or contractual relationships.
- Processing methods
In relation to the indicated purposes, your data are processed electronically and/or on paper. The processing operations are implemented in such a way as to guarantee the logical, physical security and confidentiality of your personal data, in compliance with the security measures provided for by art. 32 GDPR. The processing remains within the EU (art. 13, paragraph 1, letter f), no automated profiling activity is carried out (art. 13, paragraph 2, letter f) and the interested party has the right to lodge a complaint with the supervisory authority (art. 13, paragraph 2, letter d). - Nature of personal data
Your personal data relating to the performance of the requested service are the object of processing. Consent to the provision of your personal data is mandatory in order to execute the existing contract or the services requested and fulfill the obligations deriving from it, including legal obligations. - Scope of communication and dissemination of data
Your data may be communicated to:- All subjects whose right to access such data is recognized by virtue of regulatory provisions (legal obligations);
- To our collaborators, employees, within the scope of their duties with the confidentiality precautions required by law;.
- To all those natural and/or legal persons, public and/or private when the communication is necessary and/or inherent to the performance of our activity and in the ways and for the purposes illustrated above.
- Method and duration of storage of personal data
The Data Controller will process personal data exclusively for the time necessary to fulfill the aforementioned purposes and, in any case, for no more than 10 years from the termination of the relationship where provided for or made necessary by current regulations, subject to terms longer prescriptions. - Rights of the interested party
- Art. 15 (right of access), 16 (right of rectification) of EU Regulation 2016/679
The interested party has the right to obtain confirmation from the data controller as to whether or not personal data concerning him or her is being processed and in this case, to obtain access to the personal data and the following information:- The purposes of the processing;
- The categories of personal data in question;
- The recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organizations;
- The expected retention period of personal data or, if this is not possible, the criteria used to determine this period;
- The existence of the right of the interested party to ask the data controller to rectify or delete personal data or to limit the processing of personal data concerning him or to oppose their processing;
- The right to lodge a complaint with a supervisory authority;
- The existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and envisaged consequences of such processing for the data subject.
- Right referred to in art. 17 of EU Regulation 2016/679 – right to cancellation (“right to be forgotten”)
The interested party has the right to obtain from the data controller the deletion of personal data concerning him or her without unjustified delay and the data controller has the obligation to delete personal data without unjustified delay, if one of the following reasons exists:- The personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
- The interested party withdraws the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing;
- The interested party objects to the processing pursuant to Article 21, paragraph 1, and there is no overriding legitimate reason to proceed with the processing, or objects to the processing pursuant to Article 21, paragraph 2;
- The personal data have been processed unlawfully;
- The personal data must be erased for compliance with a legal obligation under Union or Member State law to which the controller is subject;
- The personal data were collected in relation to the offer of information society services referred to in Article 8, paragraph 1 of EU Regulation 2016/679.
- Right referred to in art. 18 Right to limit processing
The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:- The interested party contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
- The processing is unlawful and the interested party opposes the erasure of the personal data and requests instead that their use be limited;
- Although the data controller no longer needs them for the purposes of the processing, the personal data are necessary for the interested party for the establishment, exercise or defense of legal claims;
- The interested party has objected to the processing pursuant to Article 21, paragraph 1, EU Regulation 2016/679 pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
- Right referred to in art.20 Right to data portability
The interested party has the right to receive the personal data concerning him/her provided to a data controller in a structured, commonly used and machine-readable format and has the right to transmit such data to another data controller without impediments by the data controller.
- Art. 15 (right of access), 16 (right of rectification) of EU Regulation 2016/679
- Revocation of consent to processing
The interested party has the right to revoke consent to the processing of your personal data by contacting the Data Controller.