Information for the processing of personal data pursuant to art. 13 of EU regulation N. 2016/679 (hereinafter GDPR)

TWe inform, pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter, "GDPR") that the personal data you provide may be processed, in compliance with the aforementioned legislation and the confidentiality obligations, in the manner and for the purposes set out below.

1. Object of the treatment

Pursuant to art. 4 point 2 of the Regulations, the processing of personal data means "any operation or set of operations, carried out with or automated processes and applied to personal data or a set of personal data, such as the collection, registration, organization, , storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or the destruction.

2. Recipients of Personal Data

We also inform you that (without prejudice to the request for your consent in the cases provided for by law) the Personal Data you provide may be made accessible, for the purposes mentioned above:
  • to the employees and collaborators of the Data Controller, as persons authorized to process;
  • to third-party companies or other subjects that carry out some outsourced activities on behalf of the Data Controller, in their capacity as external data processors;
  • to subjects to whom communication is mandatory by law who will process your data as holders.

3. Purpose of the processing and legal basis

The Data Controller will process your Personal Data for the achievement of specific purposes and only in the presence of a specific legal basis provided for by the applicable law on privacy and protection of personal data. Specifically, the data will be processed for purposes related to the mutual obligations deriving from the contractual relationship established with you and the Data Controller will process your Personal Data only when one or more of the following legal bases occur:
  • you have given your free, specific, informed, unequivocal and express consent to the processing;
  • the processing is necessary for the execution of the obligations provided for in the contract with the interested party (natural / legal person);
  • implementation of all operational and management activities relating to this contract (eg. invoicing, credit protection, other administrative, management and organizational services functional to the execution of the contract);
  • in the presence of a legitimate interest of the Data Controller;
  • the Data Controller is required by virtue of a legal obligation to process Personal Data;
  • in case of specific consent, statistical surveys on the degree of customer satisfaction.
The processing of your Personal Data does not require the provision of consent, pursuant to art. 6, lett. b), c) and e) of the GDPR, as strictly necessary for the following purposes:
  • execution of the obligations under the existing contract with the interested party (natural / legal person);
  • fulfillment of the obligations established by law for the Data Controller;
  • performance of a public interest task.
No profiling activity will be carried out on the data communicated.

4. Processing methods

The processing of your Personal Data is carried out by means of the operations indicated in art. 4 point 2 of the GDPR and more precisely: collection, registration, organization, conservation, consultation, processing, extraction, use, cancellation and destruction of data. The data will be processed using tools suitable for guaranteeing security and confidentiality and can also be carried out using automated tools to store, manage and transmit the data. We also inform you that the personal data referable to you will be:
  • processed lawfully and fairly;
  • collected and recorded for specific, explicit and legitimate purposes and used in other processing operations in terms compatible with these purposes;
  • accurate and, if necessary, updated;
  • relevant, complete and not excessive in relation to the purposes for which they were collected or subsequently processed;
  • kept in a form that allows the identification of the data subject for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed.

5. Data retention period

The Personal Data processed for the aforementioned purposes will be kept in compliance with the principles of proportionality and necessity, and in any case until the purposes of the processing have been pursued. Your Personal Data will normally be kept as long as the contractual relationship with the Data Controller exists, without prejudice to the needs of collecting residual credits and / or managing data in the event of any disputes or complaints, such as for example those relating to invoices issued or the fulfillment of the requested services and the possible conservation of the same where necessary for the purposes of the management of ongoing legal actions and the fulfillment of specific legal obligations.

6. How to store data and how long

In accordance with the art. 5.1 (c) of the Regulation, the information systems and the informatic programs used by the Company are configured as to minimize the use of personal and identification data; these data are processed only to the extent necessary to achieve the purposes indicated in this Policy; the data will be stored just for the time period needed to achieve the objectives pursued and, in any case, the criterion used to determine the conservation period is based on compliance with the terms permitted by applicable laws and the principles of minimization of processing, limitation of conservation and rational management of archives.

7. Transfer of data

Personal data are stored in electronic archives located in Italy. Under no circumstances is the transfer of personal data to a third country or to an international organization carried out.

8. Nature of the provision of data and consequences of refusing to respond

It being understood that you have the right to object, in whole or in part:
  • for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
  • to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
It should be noted that the provision of data for the purposes referred to in art. 2 is mandatory and in their absence, we will not be able to carry out the requested activity. For this purpose it is specified that the acquisition of the data that have been or may be requested from you is an indispensable prerequisite for the evasion of the requested activities and that any refusal to provide the data requested at the time of collection, may result in the objective impossibility for the writer to establish or regularly conduct a contractual relationship with you.

9. Rights of the interested party

In relation to the aforementioned treatments, you may exercise the rights referred to in Articles. 15-21 GDPR (Right of access, right of rectification, right to cancellation, right to limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority by registered letter with return receipt addressed to Guarantor for the protection of personal data, Piazza di Monte Citorio, 121, 00186 Rome, e-mail to the address: garante@gpdp.it, or protocol@pec.gpdp.it or fax to the number: 06 / 69677.3785.