ACCORDING TO EU REGULATION 2016/679 (“GDPR”) ART. 13 NATIONAL STANDARDS AND SUBSEQUENT ADJUSTMENT
This document ( "Policy") is intended to provide guidance on the treatment of information, as specified below, that will be provided by you or otherwise available at our facility and will be treated the same and / or other subjects identified for the following purposes. The Statement, in particular, It is provided in accordance with EU Regulation. 679/2016 ( "GDPR") and subsequent adjustment of national standards (in conjunction with the GDPR hereinafter "Applicable Regulation").
1. Identity and contact details of the data controller
The data controller, in accordance with Articles. 4 and 24 Reg. EU 2016/679, Accessories is the Val Vibrata srl, with headquarters in Via Erirtea 9 – 00199 ROMA, P. VAT 02018960449, phone 0861/751377; e-mail: firstname.lastname@example.org, in its legal representative pro-tempore (the "Owner").
2. Contact details of the Head of Data (Protection c.d. “RPD-DPO”)
The Data Controller does not carry out activities that provide for the appointment of the post of Head of Personal Data Protection.
3. Purpose and legal basis of the treatment
The Personal Data collected will be processed for the purposes and on the basis of the legal bases listed below:
Aims Legal Base of treatment
point 3, became. a): for the management of his contractual relationship or order to implement pre-measures (such as, for example, the request for information or to estimate). In this case, You are free to submit your Personal Data, but the absence will not allow you to set up the above report and to answer your needs. the treatment is necessary in connection with the performance of a contract to which you are a party and you need to fulfill a legal obligation to which the controller is subject holder
point 3, became. b) prior specific consent, revocable at any time, to send you promotional communications relating to the data and communications related to events organized by the Controller (the "marketing purposes") your consent
4. Categories of personal data processed
Within the limits of the aims and procedures described in this Disclosure, They may be dealt with information that can be considered as "personal data", These may include His general, His contact information (such as, for example, cellphone number, email address, etc.).
5. Recipients or categories of recipients
Personal data will not be diffused, or not will be given to unidentified entities. They will instead be subject to well-defined communication subjects, in full compliance with legal requirements, for purposes closely related to those previously indicated. Any access to your personal data is restricted to persons authorized by the Holder. The communication to the identified recipients, if involved, and functional, It is linked to the achievement of the purposes referred to in the preceding paragraph 3, Therefore, the personal data collected and processed will be:
used in anonymous form for statistical purposes;
made available to the employees of the Owner, as managers or persons authorized to process personal data;
disclosed to third parties, natural or legal, Public administrations, professionals, police, government agencies, regulatory bodies, courts or other government authorities authorized by law;
Suppliers of services for the management of information systems and communication networks including email, newsletter management and Internet sites;
Company studies or in the ambit of assistance and consultancy;
if necessary, transferred to another holder of the treatment in accordance with GDPR, Also concerning the right to data portability.
The information will, Furthermore, be notified whenever the communication may be required to comply with requests made by judicial or public safety. The data collected will not be disseminated in any case.
The list of the personal data processing personnel is available from the office of the Data Controller.
6. Transfer of data abroad
The data will not be transferred outside the European Union.
6. the data retention period (determination criteria)
In accordance with the provisions of Article. 5 comma 1 became. e) of Regulation. EU 2016/679 the personal data collected will be kept in a form which permits identification of data subjects for a period of time not exceeding to the achievement of the purposes for which personal data are processed. Below is a table that contains the information of the storage time (ie the calculation criteria) of the personal data:
Purpose Preservation time
point 3, became. a): Contract management for the duration of the relationship and then to 10 years (ordinary prescription).
point 3, became. b) marketing purposes 5 years from the harvest, still possible for that person to amend and / or revoke your will at any time
8. data processing mode
The processing of personal data carried out using manual, or telecommunications, that guarantee security and confidentiality and will be performed by trained personnel in compliance with the Applicable Regulation. There is no automated decision making.
In addition to cases in which you need to contact for requirements related to the management of His position, if you consent to the processing of data for the purposes of point 3, became. b), She can be contacted via e-mail, newsletter, sms, instant messaging or through any electronic device or equivalent by mail or hard copy call through operator at all the contact details. Where prefers to be contacted only to one or some of these addresses, it will make explicit written request addressed to the holder.
9. Rights that are recognized
We inform you that you can exercise your rights under the applicable legislation including, but not limited to, the right:
a) to access their Personal Information and know its origin, the aims and purposes of the processing, the data of the subjects to which they are communicated, the data retention period or the useful criteria to determine it (Article 15);
to request correction (art.16);
cancellation ( "forgetfulness"), if no longer needed, incomplete, incorrect or collected in violation of the law (article 17);
to ask that the treatment is limited to part of the information concerning you (Article 18);
to the extent that is technically possible, to receive in a structured format or send to you or to third parties by you indicated the information about you (c.d. "Portability") or those that have been voluntarily provided by you (art.20);
to oppose their treatment based on legitimate interest (Article. 21);
and to withdraw his consent at any time, in the case where this constitutes the basis of the treatment (the withdrawal of consent, however, does not affect the legality of the consensus-based treatment done before the revocation same).
The aforementioned rights may be exercised by written request addressed to the holder to contacts indicated at point 1.
The Cardholder must proceed without delay in this direction and, anyway, at the latest within one month of receiving the request. The period may be extended by two months, if necessary, given the complexity and the number of requests received by the Holder. In such cases the owner within one month of receipt of your request, It will inform you and will set you aware of the reasons for the extension.
Please remember that, where the response to your requests has not been satisfactory in your notice, You may contact and submit a complaint to the Guarantor Authority for the Protection of Personal Data (http://www.garanteprivacy.it/) as provided by Applicable Regulation.