INFORMATION FOR THE PURPOSES OF ART. 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679
We would like to inform you that, for the establishment of business relations and the execution of ongoing and future contracts with you, our organization has directly obtained, as well verbally acquired and collected from you, data qualified as “personal data” by Regulation (EU) 2016/679 (i.e. the “GDPR”).
In accordance with the above regulation, the processing of such data will be carried out based on principles of lawfulness, fairness, transparency and protection of your privacy and your rights.
Pursuant to article 13 GDPR 2016/679, we provide you with the following information:
Nature of the data processed: We process your personal data, including relevant fiscal and economic details, necessary for the performance of contracts, existing or future, with your company, and to achieve effective management of business relationships. The data are processed without your consent according to art. 6, paragraph 1, letters b), e) of the GDPR, and exclusively for the following service purposes: to fulfil the pre-contractual, contractual and tax obligations deriving from existing relations with you; to fulfil the obligations required by law, regulations, community law or orders of competent Authorities; to exercise the rights of the Controller, for example the right to defence before the court. We do not hold any of your personal data defined as “special categories” or relating to “criminal convictions and offences” (Art. 9 and 10 of the GDPR).
Purpose and duration of processing: Your data are processed for the entire duration of the contract and even after its termination or expiration, to meet contractual requirements and to fulfil legal and tax obligations, and for the effective management of financial, business, and web marketing operations such as sending emails, text messages, WhatsApp messages, Google analytics, Facebook pixel and the operations specified in art. 4 (2) GDPR. The Controller will process the personal data for the time necessary to fulfil the aforementioned purposes and in any case for no more than 10 years from the termination of the business relationship for the service purposes.
Methods of processing: the processing of data will be performed with manual and/or electronic and computerised tools with organization and processing logic strictly related to the purposes thereof and in any case in a manner that guarantees the security, integrity and confidentiality of the data in compliance with the organizational, physical and logical measures required by current regulations.
Obligation or option to provide data: as regards your data that we need to know in order to fulfil the obligations required by laws and regulations, if you fail to provide data it will make it impossible for us to establish or continue our business relationship, since access to these details is necessary for the performance thereof.
Knowledge of your data: the following categories of data subjects may learn about your data, in their capacity as processors or persons in charge of the processing, appointed by the undersigned company, data controller: top management, directors and auditors; internal secretary offices; persons in charge of bookkeeping and billing; persons in charge of marketing the services; agents and representatives.
Communication and dissemination: Your personal data will not be disclosed by us to indeterminate subjects by making them available or for consultation. Your data may be communicated by us to entities and to any public or private body in general, for what specifically concerns them and is within their remit, as well as to our consultants, in order to fulfil an obligation (or right recognized by law, secondary or community regulations) or fulfil a need for communication, within the limits necessary to carry out their task at our organization, only upon our letter of engagement which imposes the duty of confidentiality and security when processing your data.
Your rights: as data subject, you have the rights set forth in art. 15 GDPR and specifically the right to:
I. to obtain confirmation as to the existence or non-existence of your personal data, even if not yet recorded, and to their communication in an intelligible form;
II. obtain information about:
a) the origin of personal data;
b) the purposes and methods of processing;
c) the logic applied to the processing, if the latter is carried out with the help of electronic means;
d) the identification of the data controller, data processor and person in charge of processing appointed pursuant to article 3 (1) GDPR; e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative in the State’s territory, data processor or person in charge of the processing;
III. to obtain:
a) the updating, rectification or integration of data;
b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
IV. to object, in whole or in part:
a) on legitimate grounds, to the processing of personal data concerning you, even though they are relevant to the purpose of collection;
b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or business communications, through the use of automated calling systems without human intervention, by email and/or through traditional marketing methods by telephone and/or paper mail. Where applicable, you also have the rights referred to in Articles 16- 21 GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge complaints with the Italian Antitrust Authority. You may at any time obtain confirmation on whether or not your personal data exists and communication of such data and the purposes for which it is processed. Moreover, you may obtain the erasure, anonymisation of the data or blocking of data that has been unlawfully processed, as well as the updating, rectification or, if interested therein, integration of the data. You have the right, on legitimate grounds, to object to the processing. We kindly ask you to promptly notify the relevant office at the company about any changes to your personal data in order to comply with art. 11, letter (c) of the above regulation, which requires that the data collected are accurate and, therefore, up to date.