INFORMATION ABOUT ON THE PROCESSING OF PERSONAL DATA
ART. 13-14 OF THE GDPR
(GENERAL DATA PROTECTION REGULATION) 2016/679
Marketing / commercial purpose
The undersigned Company informs that for the management of business relationships with you, is the owner of your data c.d. “Personal” pursuant to and for the purposes of the Code regarding the protection of personal data (Legislative Decree 196/2003) and subsequent amendments and of the EU Regulation 2016/679 (“GDPR”).
and therefore informs you that:
1. OWNER CONTACTS
The Data Controller of personal data is ELLEGI MEDICAL OPTICS S.R.L. in person of the legal representative pro tempore, with registered office in Pozzuoli (NA) Via Pisciarelli n.79, 80078 that can be contacted by mail to this same address or: by e-mail to the address email@example.com, by Pec at firstname.lastname@example.org, by telephone at 0815499645.
2. PURPOSE OF THE TREATMENT
Your personal data are processed:
A) without your express consent (Article 24 letter a), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following Service Purposes:
– conclude the contracts for the services of the Owner;
– fulfill the pre-contractual, contractual and tax obligations deriving from relations with you in existence;
– fulfill the obligations established by law, by a regulation, by community legislation or by an order of Authority (such as for anti-money laundering);
– exercise the rights of the owner, for example the right to defense in court;
B) Only subject to your specific and distinct consent (articles 23 and 130 of the Privacy Code and article 7 of the GDPR), for the following Marketing Purposes:
– send you via e-mail and / or sms newsletter, commercial communications and / or advertising material on products or services offered by the Owner;
3. TREATMENT MODALITIES
The processing of your personal data is carried out by operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic processing.
Your data may be made accessible for the purposes referred to in art. 2.A) and 2.B):
– to previously authorized employees, collaborators and agents of the owner
– system administrators;
– to third-party companies or other subjects (as an indication, credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) who carry out outsourced activities on behalf of the Owner, in their capacity as external managers of treatment.
– companies operating in the transport sector;
Data communication without the need for express consent (pursuant to Article 24 letter a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2.A) to Supervisory Bodies (such as IVASS), Judicial Authorities, to insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of mentioned purposes. These subjects will process the data in their capacity as independent data controllers.
Your information will not be diffused.
5. NATURE OF DATA CONFERENCE AND CONSEQUENCES OF THE REFUSAL TO REPLY
The provision of data for the purposes referred to in art. 2.A) is mandatory. In their absence, we cannot guarantee the services of the art. 2.A).
The provision of data for the purposes referred to in art. 2.B) is optional.
You can therefore decide not to give any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material concerning the Services offered by the Data Controller. However, you will continue to be entitled to the Services referred to in art. 2.A).
6. STORAGE TIME
The Data Controller will process the personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the Service Finality relationship and no later than 2 years from the collection of data for the Marketing Purposes.
7. PLACE OF TREATMENT
The data are currently processed and archived at the registered office, in Pozzuoli (NA) Via Pisciarelli n.79, 80078. They are also processed, on behalf of the Desk, by professionals and / or companies appointed to perform accounting and administrative activities and work advice, as indicated above.
8. RIGHTS OF THE INTERESTED PARTY
As an interested party, he has the possibility to exercise against the Company all the rights recognized and guaranteed by art. 7 and ss. of the Privacy Code and the new provisions of the European General Regulation 679/16 (c.d. GDPR), will have in particular the right to obtain at any time:
a) confirmation of the existence or otherwise of the processing of personal data concerning them and, if so, to gain access to personal data as well as information on the categories of personal data processed, the recipients or categories of recipients to which personal data are or will be communicated, on the expected retention period, on the existence of the right to request rectification, cancellation or limitation of processing, on the right to lodge a complaint with a supervisory authority, on the existence of a automated decision making, including profiling;
b) the immediate correction of inaccurate personal data and the integration of incomplete personal data;
c) the immediate cancellation of personal data concerning it when the consent is revoked, are no longer necessary for the purposes for which they were collected or otherwise processed or the legal basis for processing has ceased to have been unlawfully processed or this obligation is imposed by law or judicial authorities;
d) the limitation of the processing of personal data concerning it if it contests the accuracy of the same or the processing is illegal or even if the Company no longer needs it for processing, personal data are still necessary for the verification, exercise or defense of a right in court;
e) the personal data concerning you provided to the Company in a structured format, commonly used and readable by automatic device and to transmit this data to another data controller without impediments by the Company, if the processing is done by automated means . If technically feasible, you also have the right to obtain direct transmission (so-called “data portability”) of your personal data from the Company to another data controller;
f) the withdrawal of consent provided for the processing of sensitive data.
In addition to the rights mentioned above, it is always up to the Data Subject to submit a claim for any matter concerning the processing of their personal data before the Personal Data Protection Authority.
The above rights may be exercised by sending a written request or by e-mail to the Company using the contacts provided in paragraph 1 of this statement.
The company will take care to inform you if it intends to further process the data you have provided for a purpose other than that for which it was collected.
Pozzuoli, 25th may 2018
The holder of the treatment