On the processing of personal data in accordance with Articles 13 and 14 GDPR 2016/679
DITTA AMORE RAFFAELE S.N.C. recognizes the importance of the protection of personal data and is committed to processing them fairly, lawfully and transparently in accordance with the European Union Regulation 2016/679 (GDPR).
1. Name and contact information of the data controller
This policy applies to the processing of data by:
Owner DITTA AMORE RAFFAELE S.N.C. with registered office in Via Parteli n.29 – 38068, Rovereto (TN)
Email: firstname.lastname@example.org Pec: email@example.com
Phone: +39 0464421295 – Fax: +39 0464423295
2. Collection and storage of personal data and the type and purpose of their processing
Personal data (personal identifying information such as, for example: first and last name, company name, tax code and VAT number, address, telephone/fax number, e-mail, bank and payment references) are processed for the following purposes:
- Internal administrative, tax or accounting obligations, related to the contractual relationship and to fulfill obligations in general imposed on the Controller by laws or regulations, by EU legislation, by requests from judicial authorities or to exercise the rights of the Controller. Marketing, in the presence of your specific separate consent, for sending (by e-mail, mail, text message or telephone contact) newsletters, updates on the Holder’s activities, advertising material or commercial communications.
Your personal data will be processed and stored by the Data Controller for the entire duration of the contractual relationship and upon its termination will be retained for the time required by current accounting, tax, civil and procedural law; unless you consent to additional storage under Art. 6 c. 1 let. a GDPR.
3. Method of treatment
Your data is processed using appropriate tools and procedures to ensure its security and confidentiality, and may be carried out either by electronic means or with the aid of paper media.
4. Mandatory or optional nature of data provision. The provision of personal data related to processing is optional in nature. However, partial or total failure to provide data may result in partial or total inability to establish or continue the relationship.
5. Transmission to third parties
When necessary, your data may be processed by third parties appointed as Data Processors (pursuant to Article 28 of the GDPR) or “autonomous” Data Controllers, namely:
- by professionals, companies or professional firms providing assistance or advice to the Holder for administrative, accounting, tax, or legal protection purposes;
- by all Public Institutions established by law and more generally by all Entities established by current accounting and tax regulations as recipients of mandatory communications;
- by banking institutions or any professionals-individual, associated or corporate form-for the management of collections and payments.
6. Rights of data subjects
- Pursuant to Art. 7 c. 3 GDPR You have the right to withdraw your consent to the processing of your data at any time. As a result, from the time of revocation, we can no longer process your data; revocation of consent does not affect the lawfulness of processing based on consent before revocation.
- Pursuant to Art. 15 GDPR You have the right to obtain confirmation as to whether or not personal data concerning you are being processed.
- Pursuant to Art. 16 GDPR You have the right to obtain, without undue delay, rectification of inaccurate personal data concerning you and/or supplementation of incomplete personal data;
- Pursuant to Art. 17 GDPR You have the right to obtain, without undue delay, the erasure of personal data concerning you, insofar as the processing does not take place for the fulfillment of legal obligations or for the establishment, exercise or defense of a legal claim;
- Pursuant to Art. 18 GDPR You have the right to obtain restriction of processing, when: you dispute the accuracy of personal data, for the period necessary for the Data Controller to verify the accuracy of such data; processing is unlawful and you object to the deletion of the personal data and instead request that its use be restricted; personal data is necessary for you to establish, exercise or defend a right in court; you object to processing pursuant to Art. 21 GDPR, during the period pending verification as to whether the Data Controller’s legitimate grounds prevail over yours;
- Pursuant to Art. 20 GDPR You have the right to receive, in a structured, commonly used and machine-readable format, personal data concerning you and the right to transmit it to another Data Controller
- without hindrance, if the processing is based on consent and is carried out by automated means. In addition, you have the right to have your personal data transmitted directly to another Data Controller if this is technically feasible;
- Pursuant to Art. 77 GDPR You have the right to lodge a complaint with the Italian Data Protection Authority, Piazza di Montecitorio 121, 00186, Rome (RM).
7. Ways of exercising rights
- The exercise of rights by the User is free of charge in accordance with Article 12 GDPR. However, in the case of requests that are manifestly unfounded or excessive, including by reason of their repetitiveness, the Owner may charge the User a reasonable fee in light of the administrative costs incurred in handling his/her request, or deny satisfaction of his/her request.
- To the extent that your data are not processed for the pursuit of a legitimate interest under Art. 6 c. 1 let. f GDPR, you have the right, pursuant to Art. 21 GDPR, to object to the processing of your personal data, giving specific reasons for doing so.
To exercise your right to object, you can send an email to: firstname.lastname@example.org