Pursuant to regulation (eu) 2016/679 ("GDPR") articles 13 and 14 and subsequent national adjustment RULES
This document (“Informative”) aims to provide you with information regarding the processing of information, as specified below, which will be provided by you or otherwise available at our facility and which will be handled by it and / or by other subjects identified for the purposes indicated below. The Information note, in particular, is provided pursuant to EU Regulation no. 679/2016 (“GDPR”) and subsequent national adaptation rules (together with the GDPR below “Applicable Regulations”).
The Data Controller, the legal entity that determines the purposes and means of processing personal data, is: Gabriella TONON - Via G. Bertolissi 35, 33077 - Sacile, (PN) Tel. +39 0434 70820 Email: email@example.com (below "Data Controller").
The Data Controller does not carry out activities that require the designation of the person in charge of protection of personal data.
Personal Data collected will be processed for the purposes and on the basis of the following legal bases for the management of your contractual relationship or to execute pre-contractual measures (such as, for example, the request for information or the estimate). In this case, you are free to give your Personal Data also particular; however, failure to provide it will not allow you to establish the aforementioned relationship and satisfy your request.
Legal basis for processing
processing is necessary in relation to the execution of a contract of which you are a party.
Within the limits of the purposes and methods described in this Notice, information that may be considered as "Personal Data" may be processed, which includes your personal details, your contact details (such as, for example, mobile number, e-mail address , etc.).
Personal data will not be disseminated, or will not be disclosed to indeterminate subjects. They may instead be the subject of communication to well-defined subjects, in full compliance with the provisions of the law, for purposes strictly related to those previously indicated. Any access to your personal data is limited to the subjects authorized by the Data Controller. The communication to the identified recipients, only if involved and functional, is linked to the achievement of the purposes referred to in paragraph 3 above, therefore personal data collected and processed may be:
a) used anonymously for statistical purposes;
b) made available to the Data Controller's collaborators, as Managers or persons authorized to process personal data;
c) disclosed to third parties, physical or legal, public administrations, professionals, law enforcement agencies, government agencies, regulatory bodies, courts or other public authorities authorized by law;
d) communicated to commercial partners, only in the event of the prior and express consent of the User.
e) if necessary, transferred to another Data Controller in accordance with the provisions of the GDPR, including with regard to the right to data portability. .
The information may also be disclosed whenever the communication may be necessary to comply with requests from the Judicial Authority or Public Security. The collected data will not be disclosed under any circumstances.
The list of the Personal Data Processing Managers is available at the Data Controller's headquarters.
The data will not be transferred outside the European Union.
Below is a table containing the indications of the retention times (that is, of the determination criteria) of the Personal Data:
3, lett. a): contract management. Retention times For the duration of the relationship and thereafter for 10 years (ordinary prescription).
Personal Data will be processed using manual, computerized or telematic tools, suitable for guaranteeing security and confidentiality, and will be carried out by personnel duly trained in compliance with the Applicable Regulations. There is no automated decision making process.
In cases where it is necessary to contact you for needs related to the management of your position, you can be contacted by e-mail, text message, or through any equivalent electronic tool or by mail or call by operator to all the contact details provided. If you prefer to be contacted only to one or some of these addresses, you can make a specific written request without formalities to the Owner.
We inform you that you will be able to exercise the rights recognized by the applicable legislation including, but not limited to, the right: a) to access their Personal Data and to know the origin, the purposes and purposes of the processing, the data of the subjects to whom they are communicated, the retention period of the data or the criteria used to determine it; b) to ask for a correction; c) the cancellation ("oblivion"), if no longer necessary, incomplete, erroneous or collected in violation of the law; to request that the treatment be limited to a part of the information concerning you; e) to the extent that it is technically possible, to receive in a structured format or to transmit to you or to any third parties indicated by you the information concerning you (so-called "portability") or those that you have voluntarily provided; f) to oppose their treatment based on legitimate interest; g) and to revoke their consent at any time, if this constitutes the basis of the treatment (the revocation of consent, however, does not affect the lawfulness of the treatment based on consent before the revocation itself).
The aforementioned rights may be exercised by means of a written request addressed without formalities to the Controller at the contact indicated in point 1.
Holder must proceed in this direction without delay and, in any case, no later than one month after receipt of the request. The deadline may be extended by two months if necessary, taking into account the complexity and the number of requests received from the Data Controller. In such cases, the Data Controller within one month of receiving your request, will inform you and will inform you of the reasons for the extension.
reminds you that, if the reply to your requests has not been satisfactory in your opinion, you can contact and submit a complaint to the Authority for the Protection of Personal Data (http://www.garanteprivacy.it/) in the ways provided for by the Applicable Regulations.
Review May 2018