Privacy policy 2019-10-17T06:33:23+00:00

Privacy policy in compliance with article 13 of EU Reg, 2016/679 – GDPR


The Data Controller pursuant to articles 4 and 24 of EU Reg. 2016/679 is Nube di Nicoli Antonio & C. SNC, Via Don Luigi Meroni 87 – Figino Serenza (CO) in the person of its pro tempore Legal Representative. This policy is drafted in compliance with art. 13 of EU Reg. 2016/679 (European Regulation on the protection of personal data)

browsing this internet site legitimate interest Art 6 lett f) Cookies policy/ Session Mandatory
contact request legitimate interest Art 6 lett f) 1 year Optional but necessary to receive an answer
for administrative and accounting activities in general: data processing for administrative and accounting purposes are those related to organizational, administrative, financial and accounting activities regardless of the nature of data processed legitimate interest Art 6 lett f) and performance of a contract art 6 lett b) 10 years
Art. 2220 Codice Civile
(Accounting records
Necessary but necessary fot the legitimate interest of data controller
Direct Marketing throught newsletter for similar goods or services purchased by the subject
(c.d. “soft spam”)
legitimate interest Art 6 lett f) of the data controller to create marketing campaigns direct to customers.
art. 130 c4 TU Privacy
Until unsubscribe (opt – out ) Optional but necessary fpt the legitimate interest of data controller

Personal data: any information relating to a natural person (‘data subject’), with particular regard to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person – see art. 4 par. 1 no. 1 GDPR.
Personal data processing means: “any operation or set of operations which is performed with regard to personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.

Personal data shall be processed lawfully, in compliance with the provisions of art. 6 EU Reg. 2016/679, for the following purposes

Personal data will be shared with recipients, who will process the data as processors (art. 28 of EU Reg. 2016/679) or as natural persons acting under the authority of the Data Controller and Data Processor (art. 29 of EU Reg. 2016/679), for the purposes listed above . For example data shall be shared with:
– subjects providing management services for the computer system used by Nube di Nicoli Antonio & C. SNC and its communication networks (including email);
– Company that provide service for the above purposes( brochure,video,flyers etc)
– firms or companies within the context of assistance and consultancy relationships;
– competent authorities to fulfil legal obligations and/or provisions of public bodies, on request;
– Hosting manager
– Company of the group
Subjects belonging to the abovementioned categories shall become the Data Processors, or shall operate in a completely autonomous way, as Data Controllers in their own right. The list of designated Data Processors is constantly updated and is available at the

Personal data can be transferred to European Union or non-European Union Countries. Should the Data Controller transfer data outside the European Union, he shall do so only with prior notice to the data subject in compliance with articles 44 and ff of EU Regulation 2016/679 “General principle for transfers”. Subject can request condition for the data transfer at

You shall be able to exercise your rights under articles 15, 16, 17, 18, 19, 20, 21 and 22 of EU Regulation 2016/679 by writing to the Data Controller in compliance with art. 38 par. 4, at the following address: . You shall have the right to obtain, at any moment, from the controller, access to your personal data, and their rectification or erasure, as well as the restriction of their processing. Moreover, you have the right to object at any time to the processing of your data (including automated processing, such as, for instance, profiling) and to receive the personal data concerning you. Without prejudice for any other administrative and jurisdictional recourse, if you believe that the processing of your personal data violates the provisions of EU Reg. 2016/679, you have the right, pursuant to art. 15 letter f) of said EU Reg. 2016/679, to lodge a complaint with the Data Protection Authority and, pursuant to art. 6 paragraph 1 letter a) and to art. 9 paragraph 2 letter a), to revoke your consent to the processing at any time. In case of a request for data portability, the Data Controller shall provide your personal data to you in a structured, commonly used and machine-readable format, without prejudice for the provisions of paragraphs 3 and 4 of art. 20 of EU Reg. 2016/679.

The Data Controller reserves the right to modify, update, add or remove portions of the current Privacy Policy at his discretion and at any time. We encourage you to periodically review this page for the latest information on our privacy practices. To make this review easier for you, our privacy statement will contain the date of the publication on the website and updating. Using the website, after the changes post, will mean silent acceptation of the privacy policy.

Updated 12/12/18