Privacy notice ex D.lgs.196/03 and EU Regulation nr. 679/2016
Pursuant to Article 13 of Legislative Decree 196/03 and following the entry into force of EU Regulation No. 679/2016 in accordance with the provisions of Article 13 of the aforementioned European Regulation, we wish to inform you of the following:
Purpose of the processing
Your personal data, freely communicated and acquired by us due to the activity carried out by:
Via Stendhal 54, 20144 Milan – Italy
VAT No.: 11948820151
Fiscal Code: 11948820151
will be processed lawfully and fairly for the following purposes:
The data processed are up to date, relevant, complete and not excessive in relation to the purposes listed above for which they are collected and subsequently processed.
Manner of processing
The same data will be processed, in compliance with the necessary security and confidentiality, through the following modalities: collection of data from the data subject, collection and recording for specific, explicit and legitimate purposes, used in further processing operations in terms compatible with these purposes, processing carried out with the help of electronic and automated tools (data collection by electronic means, directly from the data subject).
Legal basis of processing
The legal basis of the processing of your personal data is based on your registration on the web portal https://www.podinisrl.com/.
Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in the processing of data is given by having to respect and honor the contractual obligations signed between the parties. Pursuant to Article 6, the lawfulness of the processing is based on the manifestly expressed consent of the data subject, documented in writing. Compulsory or optional nature of the provision of data and consequences of a refusal to respond: the nature of the provision of data by you is compulsory for the data controller to be able to provide the services requested. In case of refusal it will therefore be impossible to complete the registration process and the System Owner will not be able to fulfill its contractual obligations.
Disclosure of data to third parties
Your personal data will be processed by the Data Controller, the Data Processors appointed by the Data Controller and the strictly authorized data processors. Your personal data are not subject to dissemination.
Your personal data will be kept for nr. 10 years, from the termination of the service delivery/product supply relationship at the computer archives owned by Podini srl.
Personal Data Controller’s Intention
The Data Controller will not transfer your personal data to a third country or international organization.
Processor and Data Processor
The data controller is Podini srl. Contact details of the Data Controller, email : firstname.lastname@example.org
The interested party may at any time exercise the rights reserved to him/her, enshrined in Art. 7, the full text of which is reproduced below: Art. 7 Legislative Decree 196/2003 and Art. 15 EU Regulation 679/2016 – Right of access to personal data and other rights – “The interested party has the right to obtain confirmation of the existence or otherwise of personal data concerning him/her, even if not yet recorded, and their
communication in an intelligible form. The interested party has the right to obtain information on: the origin of the personal data; the purposes and methods of processing; the logic applied in the case of processing carried out with the aid of electronic instruments; the identification details of the data controller, the data processor and the representative appointed pursuant to art. 5, paragraph 2; the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as appointed representative in the territory of the State, managers or appointees. The interested party has the right to obtain: the updating, rectification, or, when interested, the integration of data; the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed; certification to the effect that the operations as per letters a. and b. have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected. The data subject has the right to object in whole or in part: on legitimate grounds to the processing of personal data concerning him/her, even if pertinent to the purpose of collection; to the processing of personal data concerning him/her for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.” In particular, the data subject may at any time request from the Data Controller access to and rectification or erasure of the personal data concerning him or her or object to the processing of personal data concerning him or her, as well as the right to data portability. The data subject has the right to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation and has the right to lodge a complaint with a supervisory authority. The exercise of rights can be exercised by writing to the e-mail address email@example.com.