Via delle Querce, 28, 47042 Villalta di Cesenatico (FC), as owner of the processing of personal data pursuant to articles 4 and 28 of the legislative decree 30 June 2003, n. 196 – Privacy Code (hereinafter the “Code”) and articles 4, n. 7) and 24 of EU Regulation 2016/679 of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data. 13 of the Code and 13 of the Regulation which will proceed with the processing of personal data referring to customers or subjects requesting information via forms (where they are natural persons).
- Object of the treatment The data processed are: name, surname and contact information such as telephone number, e-mail address. The personal data indicated above will be processed exclusively for the provision of the service as requested by the customer and for all activities instrumental to this, including the purposes of establishing and managing contractual relationships of any type, as defined by the sector regulations. The provision of the requested data is mandatory as it is necessary to carry out the service and any refusal to provide such data could lead to the failure to complete or maintain the contractual relationship; the processing will be carried out both manually and through the use of IT procedures; the data will not be disseminated.
- Purpose of the treatment The data processing will be carried out to allow the carrying out of activities related to the establishment and management of the service requested from the Data Controller. The same data will be processed lawfully, fairly and with the utmost confidentiality, mainly with electronic and IT tools and stored both on computer and paper supports and on any other type of suitable support, in compliance with the minimum security measures as required by the Code and the Regulations.
- Methods of processing The processing of personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data are subjected to both paper and electronic and / or automated processing. The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for: no later than 10 years from the conclusion of the contract; no later than 2 years from the request for information.
- Access to data The Data Controller may provide access to personal data to the following subjects (for the purpose of fulfilling the obligations connected to the relationship established or for the purpose of data retention security): to employees and collaborators of the Data Controller in their capacity as authorized persons and / or DPOs and / or system administrators, all formally appointed or appointed;
- Data communication The Data Controller may communicate the data for the purposes referred to in art. 2 to Supervisory Bodies, Judicial Authorities as well as to all other subjects to whom communication is mandatory by law for the accomplishment of the purposes provided for by law. However, the aforementioned data will not be disclosed.
- Data storage and transfer The management and storage of personal data will take place on servers located within the European Union of the Data Controller and / or third-party companies appointed and duly appointed as Data Processors. The servers are currently located in Italy. The data will not be transferred outside the European Union. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to other European Union countries and / or non-EU countries. In this case, the Data Controller ensures from now on that the transfer of non-EU data will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and / or adopting the standard contractual clauses provided for by European Commission. The data will be transferred only in the event of the acquisition or sale of a company or business unit and in any case after sending new information to the user.
- Rights of the interested party The customer in his capacity as an interested party has the rights referred to in art. 7 of the Privacy Code and art. 15 of the Regulation and precisely:
- The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in an intelligible form.
- The interested party has the right to obtain the indication:
- a) the origin of the personal data; b) the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) the identity of the owner, manager and representative; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents..
- The interested party has the right to obtain:
- updating, rectification or, when interested, integration of data;
- the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
- the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible o involves the use of means that are manifestly disproportionate to the protected right.
- The interested party has the right to object, in whole or in part:
- for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
- to the processing of personal data concerning him for the pursuit of purposes not covered by art. 2. Where applicable, the interested party also has the rights referred to in Articles 16-21 GDPR (Right of rectification, right to be forgotten, right to limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority.
- How to exercise your rights The customer can exercise the rights referred to in the previous article at any time by sending an e-mail to the address: ordini.commerciale@gmail.com