INFORMATION FOR THE PROCESSING OF PERSONAL DATA The company GATTI ANDREA with its registered office in Bagnolo in via Tassone 32, as data controller of personal data pursuant to art. 4 of the 2016/679 EU Regulation informs you, pursuant to art. 13 of the Regulations, which will process your personal data manually and / or with the support of computerized means for the purposes indicated below. Purposes of the processing, legal basis and any third parties recipients of the data Your personal data will be processed for purposes related to the management of ordinary business relationships and, specifically, for the compilation of personal data lists, the keeping of customer / supplier accounts, invoicing, the provision of communications both by paper and electronic means. Your data may be processed for internal statistical purposes and market research. Furthermore, your data may be disclosed to third parties, for technical and operational requirements strictly related to the purposes set out above, and in particular to the following categories of subjects: a) bodies, professionals, companies or other structures appointed by us for processing related to 'fulfillment of administrative, accounting and management obligations related to the ordinary conduct of our economic activity, including for credit recovery purposes; b) to public authorities and administrations for the purposes connected with the fulfillment of legal obligations; c) banks, financial institutions or other subjects to whom the transfer of the aforesaid data is necessary for the performance of our company activity in relation to the performance of the contractual obligations assumed in your comparisons. d) suppliers of installation, assistance and maintenance services for IT and telematic systems and systems and all the services that are functionally connected and necessary for the performance of the services covered by the Contract. Failure to provide personal data will make it impossible for us to process contracts and other related obligations, as well as to properly manage mutual business relations. Please note that we may send you commercial and / or promotional communications relating to products and services similar to those object of the contractual relationship, unless you disagree.
Legal basis Your personal data will be processed for the execution of a contract concluded with you or for the execution of pre-contractual measures taken at your request. Sending commercial and / or promotional communications relating to products and services similar to those covered by the contractual relationship is based on the legitimate interest of the Owner. Data retention times Your personal data will be kept for the time strictly necessary to accomplish the purposes outlined above and to fulfill the obligations established by law. Rights of the interested party Pursuant to articles 13, paragraph 2, and from 15 to 21 of EU Regulation 2016/679, we inform you that in relation to the processing of your personal data you can exercise the following rights: a) Right to obtain the access to personal data and the following information: - confirmation that personal data is being processed; - the purposes of the processing; - the categories of personal data; - the recipients or categories of recipients to whom the personal data have been or will be communicated; - if the data are not collected from the data subject, all information available on their origin; - the existence of an automated decision-making process, including profiling; - a copy of the personal data being processed. b) Right of rectification and integration of personal data; c) Right to delete data ("right to be forgotten") if there is one of the following reasons: 1. Personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed; 2. the interested party revokes the consent to the processing of data and there is no other legal basis for the processing; 3. the party opposes the processing and there is no legitimate overriding reason to proceed with the processing; 4. personal data have been processed unlawfully; 5. personal data must be deleted to fulfill a legal obligation under Union law or the law of the Member State to which the data controller is subject; The data controller, if he has made public personal data and is obliged to delete it, must inform the other owners who process the personal data of the request to delete any link, copy or reproduction of his data. d) Right to limit the processing in the event that: 1. the data subject confirms the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data; 2. the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited; 3. although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject for
the assessment, exercise or defense of a right in court; 4. the interested party opposed the processing, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party. e) Right to propose a claim to the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority www.garanteprivacy.it. ) Right to the portability of the data or the right to receive in a structured, commonly used and automatically readable form the personal data concerning him provided to a data controller and possibly transmit them to another data controller, if the processing is done bases on consent or on a contract and is carried out by automated means. Where technically possible, the data subject has the right to obtain direct data transmission from one data controller to another. ) Right to oppose at any time the processing of personal data, including profiling, in particular in the event that: 1. processing is based on the legitimate interests of the owner, subject to explanation of the grounds of the opposition; 2. personal data are processed for direct marketing purposes. h) Right not to be subjected to a decision based solely on automated processing, including profiling, except in cases where the decision: is necessary for the conclusion or execution of a contract between the data subject and a data controller, is authorized by the law of the Union or of the Member State to which the controller is subject or based on the explicit consent of the data subject. i) Right to withdraw consent at any time. The exercise of rights is not subject to any form constraint and is free. How to exercise rights You can exercise your rights at any time by sending: - a registered letter with return receipt; - an e-mail to firstname.lastname@example.org Data controller The data controller is GATTI ANDREA Contact details: email@example.com