INFORMATION FOR THE PROCESSING OF PERSONAL DATA
PURPOSE FOR SENDING NEWSLETTERS AND / OR ADVERTISING AND PROMOTIONAL MATERIALS PURSUANT TO AND FOR THE EFFECTS REFERRED TO IN ART. 13 GDPR 679/2016
In compliance with the provisions of the GDPR 679/2016 we are to inform you, as “Interested”, on a specific purpose of the collection and on the methods of processing personal data relating to your Company / Person, which we have acquired directly from you, for allow us to carry out our business in an appropriate manner and according to current regulatory provisions.
We therefore provide you with the correct information on the processing of personal data, as specifically indicated below.
1. IDENTITY AND CONTACT DATA OF THE HOLDER
The Data Controller is the FGR ROSSETTO SNC Company – Registered Office: Via C. Rezzonico, 6 – 35131 – Padua (PD) – Administrative and Warehouse: Via Roma, 38 / E – 35010 – Villa del Conte (PD) – VAT number: IT04578080287, mail: info@erimiti.com.
2. PURPOSE OF THE TREATMENT
Without prejudice to the fulfillment of obligations under EU laws, regulations and regulations, the data collected will be processed by us for the performance of the following activities:
a) invio di newsletter e/o di materiale e/o comunicazioni pubblicitarie e promozionali, relativi a prodotti, servizi od eventi riconducibili all’attività della ns. Company.
3. LEGAL BASIS OF THE PROCESSING
The legal basis of the treatment is the specific consent you have given.
4. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
The personal data collected may be communicated by us exclusively to the third parties indicated below:
a) supplier of the platform for sending newsletters or supplier of the promotional / advertising material shipping service, which the Owner uses for the provision of information, promotional and advertising activities.
Personal data may also be known by the personnel expressly appointed by the Data Controller who will be able to handle the data management operations.
The specific identification data of the aforementioned third parties may be known by you at any time through the exercise of the right of access recognized to you and without prejudice to any legal limitations in this regard.
5. NTENTION OF THE DATA CONTROLLER TO TRANSFER PERSONAL DATA TO A THIRD COUNTRY OR TO AN INTERNATIONAL ORGANIZATION
It is not the intention of the Data Controller to transfer the data collected to a third country or to an international organization.
6. RETENTION PERIOD OF THE PERSONAL DATA COLLECTED
The personal data collected will be kept for one year from the date of your manifestation of consent for the processing of data and, in any case, until the possible withdrawal of consent, without prejudice to any longer retention periods established by law.
After the retention period, as described above, we will proceed with the total elimination of the data you have provided.
7. DATA SUBJECT’S RIGHTS
GDPR 679/2016 recognizes certain rights to the interested party:
a) right of access to the data collected and processed – art. 15;
b) right to obtain data correction – art. 16;
c) right to obtain the deletion of data and right to be forgotten – art. 17;
d) right to obtain the limitation of treatment – art. 18;
e) right to data portability to another holder – art. 20;
f) right to object to the processing – art. 21;
g) right to not be subjected to automated processing – art. 22;
h) right to withdraw consent at any time, without prejudice to the lawfulness of the treatment based on the consent given before the revocation – art. 7;
i) right to lodge a complaint with the Control Authority – art. 77;
j) right to lodge a judicial appeal against the supervisory authority (art. 78) and against the Data Controller or Data Processor (art. 79).
For the exercise of the rights referred to in points a) to h) it is necessary to contact the Data Controller.
8. NATURE OF THE CONFERENCE
The provision of personal data by the interested party, although not mandatory, is necessary for the achievement of the purposes indicated above. Failure to provide data makes sending of newsletters and / or advertising and promotional material inexecutable.
The interested party is responsible for promptly informing the Data Controller of any changes concerning the personal data provided.
9. AUTOMATED DECISION-MAKING PROCESSES INCLUDING PROFILING
The data provided will not be processed through automated decision-making processes, including profiling.
10. PROCESSING METHOD
The data provided will be processed by us in accordance with the provisions of the GDPR 679/2016 and in the following ways:
a) access to data and archives allowed only to data processors;
b) data and area protection through appropriate measures that are systematically monitored;
c) data collection by direct contact with the interested party;
d) registration and processing both through IT media and through files and paper supports;
e) organization of archives mainly in computerized form, but also on paper;
f) checks and data changes following any request by the interested party.
11. COMPLAINT TO THE CONTROL AUTHORITY
The interested party has the right to lodge a complaint with the Control Authority if he believes that the treatment that concerns him violates the GDPR 679/2016.
The reference authority is the Guarantor for the protection of personal data
http://www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524
Last updated: 20/09/2018