The Data Controller pursuant to articles 4 and 24 of EU Reg. 2016/679 is Nube di Nicoli Antonio & C. SNC, Via Don Luigi Meroni 87 – Figino Serenza (CO) in the person of its pro tempore Legal Representative. This policy is drafted in compliance with art. 13 of EU Reg. 2016/679 (European Regulation on the protection of personal data)
|PURPOSE OF PROCESSING||LAWFULNESS OF PROCESSING||DATA RETENTION OR CRITERIA||NATURE OF UNDERWRITING|
|browsing this internet site||legitimate interest Art 6 lett f)||Cookies policy/ Session||Mandatory|
|contact request||legitimate interest Art 6 lett f)||1 year||Optional but necessary to receive an answer|
|for administrative and accounting activities in general: data processing for administrative and accounting purposes are those related to organizational, administrative, financial and accounting activities regardless of the nature of data processed||legitimate interest Art 6 lett f) and performance of a contract art 6 lett b)||10 years
Art. 2220 Codice Civile
|Necessary but necessary fot the legitimate interest of data controller|
|Direct Marketing throught newsletter for similar goods or services purchased by the subject
(c.d. “soft spam”)
|legitimate interest Art 6 lett f) of the data controller to create marketing campaigns direct to customers.
art. 130 c4 TU Privacy
|Until unsubscribe (opt – out )||Optional but necessary fpt the legitimate interest of data controller|
Personal data: any information relating to a natural person (‘data subject’), with particular regard to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person – see art. 4 par. 1 no. 1 GDPR.
Personal data processing means: “any operation or set of operations which is performed with regard to personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.
PURPOSE AND LAWFULNESS OF PROCESSING
Personal data shall be processed lawfully, in compliance with the provisions of art. 6 EU Reg. 2016/679, for the following purposes
DATA RECIPIENTS OR RECIPIENT CATEGORIES
Personal data will be shared with recipients, who will process the data as processors (art. 28 of EU Reg. 2016/679) or as natural persons acting under the authority of the Data Controller and Data Processor (art. 29 of EU Reg. 2016/679), for the purposes listed above . For example data shall be shared with:
– subjects providing management services for the computer system used by Nube di Nicoli Antonio & C. SNC and its communication networks (including email);
– Company that provide service for the above purposes( brochure,video,flyers etc)
– firms or companies within the context of assistance and consultancy relationships;
– competent authorities to fulfil legal obligations and/or provisions of public bodies, on request;
– Hosting manager
– Company of the group
Subjects belonging to the abovementioned categories shall become the Data Processors, or shall operate in a completely autonomous way, as Data Controllers in their own right. The list of designated Data Processors is constantly updated and is available at the firstname.lastname@example.org
DATA TRANSFER TO THIRD COUNTRIES AND/OR INTERNATIONAL ORGANISATIONS AND SAFEGUARDS
Personal data can be transferred to European Union or non-European Union Countries. Should the Data Controller transfer data outside the European Union, he shall do so only with prior notice to the data subject in compliance with articles 44 and ff of EU Regulation 2016/679 “General principle for transfers”. Subject can request condition for the data transfer at email@example.com
RIGHTS OF THE DATA SUBJECTS
You shall be able to exercise your rights under articles 15, 16, 17, 18, 19, 20, 21 and 22 of EU Regulation 2016/679 by writing to the Data Controller in compliance with art. 38 par. 4, at the following address: firstname.lastname@example.org . You shall have the right to obtain, at any moment, from the controller, access to your personal data, and their rectification or erasure, as well as the restriction of their processing. Moreover, you have the right to object at any time to the processing of your data (including automated processing, such as, for instance, profiling) and to receive the personal data concerning you. Without prejudice for any other administrative and jurisdictional recourse, if you believe that the processing of your personal data violates the provisions of EU Reg. 2016/679, you have the right, pursuant to art. 15 letter f) of said EU Reg. 2016/679, to lodge a complaint with the Data Protection Authority and, pursuant to art. 6 paragraph 1 letter a) and to art. 9 paragraph 2 letter a), to revoke your consent to the processing at any time. In case of a request for data portability, the Data Controller shall provide your personal data to you in a structured, commonly used and machine-readable format, without prejudice for the provisions of paragraphs 3 and 4 of art. 20 of EU Reg. 2016/679.
CHANGES TO THE PRIVACY STATEMENT