Disclosure pursuant to art. 13 Regulation EU No. 679/2016 and expression of consent
In accordance with the provisions art. 13 of Regulation EU 679/2016, we wish to inform you of the following:
- Purpose of the processing:
Your personal data, provided voluntarily and acquired by us in accordance with the activity performed, will be processed in a lawful and proper manner for the following purposes:
- information and activities to promote company business (including newsletters, direct mailings and telephone contacts).
The processed data (which may be common, identifying or specific in nature) is updated, relevant, complete and not excessive in relation to the purposes listed above for which it is collected and subsequently processed.
- Processing methods:
Your data will be processed, in compliance with the necessary security and confidentiality requirements, using the following methods: collection of data from the data subject, collected and recorded for specific, explicit and legitimate purposes and used in further processing operations compatible with these purposes. The processing may be performed with the help of electronic and automated means (collection of data electronically directly from the data subject).
- Legal basis of the processing:
The legal basis for the processing of your personal data is based on consent expressed voluntarily in accordance with art. 6 paragraph 1 letter a of Regulation EU 679/2016 and art. 7 of Regulation EU 679/2016.
- Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in the processing of the data are given by having to respect and honour the contractual obligations agreed between the parties or to respect the requirements thereof. Pursuant to art. 6, the lawfulness of the processing is based on the data subject's manifestly expressed consent.
- Compulsory or optional nature of data provision and consequences of refusal to comply:
The provision of data for promotional and disclosure purposes as above is not obligatory, and derives from any expressed explicit consent. In the event of refusal, it will not be possible to complete the promotional activity referred to above.
- Disclosure of data to third parties:
Your personal data will be processed by the Data Controller, by the Data Processors appointed by him or her and by the strictly authorised persons in charge of the processing. The data may be disclosed to institutional bodies upon their request. Your data may be disclosed, as a result of inspections or verifications (if required), to all the inspection bodies responsible for verifications and checks relating to compliance with legal requirements. Your data may also be disclosed to companies/professional firms that provide assistance, consultancy or collaboration to the Data Controller, in accounting, administrative, fiscal, legal, tax and financial matters, to public administrations for the implementation of the institutional functions within the limits established by law or by regulations and to third-party service providers to whom the data must be provided for the performance of the services in the contract. Your personal data will not be further disseminated in any manner.
- Data retention periods:
The processed personal data for the purposes under point 1 will be kept for a period of time not exceeding 24 months.
- Existence of an automated decision-making process:
There is no automated decision-making process.
- Intention of the Data Controller:
The Data Controller will not transfer your personal data to a third country or international organisation.
- Data Controller and Data Processor:
The Data Controller is GAMMA Arredamenti International SpA, with registered offices in Via Pitagora 3, in the person of its legal representative. Contact with the Data Controller shall be through the following mailbox: [email protected] Data subjects may at any time exercise their rights, laid down in articles 15 and following of the EU Regulation.
11 - Articles 15 and following of Regulation EU 679/2016 - Right of access to personal data and other rights.
The data subject has the right to obtain confirmation of the existence or otherwise of personal data concerning him or her, even if they are not already registered, and the communication of such data in intelligible form. The data subject has the right to obtain evidence of: the origin of the personal data; the purposes and methods of the processing; the logic applied in the case of processing with the aid of electronic instruments; the identity of the data controller, data processor and the designated representative pursuant to art. 5 paragraph 2; the entities or categories of entities to whom the personal data may be disclosed or who may gain knowledge of it as designated representatives within state territory, as processors or as persons in charge. The data subject has the right to obtain: the updating, correction, or when applicable, the extension of the data; the deletion, anonymisation or blocking of data that has been processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed. The data subject has the right to oppose, wholly or partly: for legitimate reasons, the processing of personal data concerning him or her, even if pertinent to the purpose of its collection; the processing of personal data concerning him or her for the purpose of sending advertising materials or for direct selling or carrying out market research or commercial communications. In particular, the data subject may at any time ask the Data Controller for access to, correction or deletion of the personal data or limitation of the processing of his or her data, or may object to the processing, as well asking for the right to data portability. The data subject has the right to withdraw his or her consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation, and has the right to lodge a complaint with a supervisory authority. The rights may be exercised by writing to the email address [email protected] The data subject also has the right to complain to the supervisory authority, pursuant to the law.
Last update: 2019-04-03 13:09:30