Pursuant to and for the purposes of Art. 13 of EU Regulation No. 2016/679 on the processing of personal data, the writer LARIOSETA S.P.A., with registered office in Como, Via Asiago 31, as Data Controller, informs its customers that the personal data acquired with reference to established business relationships will be processed in compliance with the aforementioned law. According to the law, data processing will be based on principles of correctness, lawfulness and transparency and protection of confidentiality, as indicated below.
1. SUBJECT OF THE PROCESSING
The personal data collected and processed by the writer are:
• identification data (personal data, registered office/address, phone, fax, e-mail, tax data, etc.)
• data relating to economic and commercial activity (orders, bank data, accounting and tax data, etc.)
2. PURPOSES OF THE PROCESSING
Your personal data are processed:
A. without your express consent (Art. 6 letter b), e) of EU Regulation No. 2016/679), for the following Service Purposes:
• to conclude the contracts for the services of the Data Controller;
• to fulfil the pre-contractual, contractual and fiscal obligations deriving from existing relationships with you;
• to fulfil the obligations provided for by the law, by a regulation, by the community legislation or by an order of the Authority (e.g. in the area of anti-money laundering), pursuant to Art. 6 paragraph 1 letter c) of EU Regulation No. 2016/679;
• to exercise the rights of the Data Controller (e.g. the right of defence in court) pursuant to art. 6 paragraph 1 letter f) of EU Regulation No. 2016/679.
In all these cases, the provision of data for the performance of the aforementioned activities is essential to the exact execution of a contract of which the interested party is a party or to the execution of pre-contractual measures adopted at the request of the party concerned and therefore failure to provide data prevents the fulfilment of the contract for the services of the Data Controller. The need to provide data for the execution of the contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the party concerned constitutes the legal basis of data processing pursuant to Art. 6 paragraph 1 letter b) and c) of EU Regulation No. 2016/679.
B. Only with your prior specific and distinct consent (Art. 6 paragraph 1 letter a) and 7 EU Regulation No. 2016/679), for the following Marketing Purposes: contacting you by email, post and/or phone to send you newsletters, commercial communications and/or advertising material about the products or services provided by the Data Controller and to assess the degree of satisfaction with the quality of the services;
The provision of data for the purposes referred to in Art. 2.B) is optional. You may therefore decide not to give any data or subsequently deny the possibility of processing data already provided, by revoking the consent pursuant to Art. 7 paragraph 3 of EU Regulation No. 2016/679: in this case, you will not be able to receive newsletters, commercial communications and advertising material relating to the Services provided by the Data Controller. However, you will continue to be entitled to the Services referred to in Art. 2.A).
We inform you that if you are already a customer of ours, we will be allowed to send you commercial communications relating to the services and products of the Data Controller similar to those already received, without prejudice to your right to revoke the consent previously given pursuant to Art. 7 paragraph 3 of EU Regulation No. 2016/679), thus specifying that the withdrawal of such consent shall not affect the lawfulness of the processing performed based on the consent prior to its withdrawal.
3. PROCESSING METHODS
The processing of your personal data is carried out by means of the operations indicated in Art. 4 No. 2) EU Regulation No. 2016/679 and precisely: collection, registration, organization, structuring, storage, consultation, processing, adaptation or modification, selection, extraction, comparison, use, consultation, interconnection, blocking, communication by transmission or any other form of making available, limitation, cancellation and destruction of data. The acquired data will be processed using electronic, computerized and telematic systems and in paper form for reasons strictly relating to the aforementioned purposes by internal employees and collaborators specifically in charge of the processing or external data processors. The data is stored both in paper and electronic format in compliance with the minimum security measures required by law, both technical and organizational, appropriate to guarantee the confidentiality and privacy of personal data, implementing security measures to prevent the alteration, loss, unauthorized treatment or access and to guarantee integrity and security of personal data.
Based on the principle of minimization, the data that the Data Controller may process will be adequate, relevant and limited to what is necessary according to the purposes for which they are processed and in any case respecting the will of the interested party.
Pursuant to Art. 13 paragraph 2 letter a) of EU Regulation No. 2016/679, the Data Controller specifies that personal data will be processed for the time necessary to fulfil the purposes mentioned above and in any case no more than 10 years after the termination of the relationship for the Service Purposes (also in consideration of the ordinary limitation period of contractual relations) and no more than 2 years after data collection for Marketing Purposes.
4. ACCESS TO YOUR DATA
Pursuant to Art. 13 letter e) of EU Regulation No. 2016/679, it is specified that personal, accounting and tax data will not be communicated, sold or exchanged with third parties, except for consultants and technicians, in their capacity as data processors or external processors, for the performance of functional activities for the company, such as administrative, operational, accounting, tax and legal activities. In this case, the use by third parties shall be carried out in full compliance with the principles of correctness, lawfulness and transparency and with the laws in force and in particular with the provisions of art. 28. 28 of EU Regulation No. 2016/679.
The updated list of external managers and processors is kept at the registered office of the Data Controller.
Without the need for express consent (Art. 6 paragraph 1 lett. b) and c) EU Regulation No. 2016/679), the Data Controller may communicate your data for the purposes referred to in Art. 2.A) to judicial and/or administrative authorities as well as to all those subjects to whom the communication is mandatory by law for the accomplishment of the said purposes. These subjects will process the data in their capacity as independent data controllers.
5. RIGHTS OF THE DATA SUBJECT
As an interested party, pursuant to Art. 13 paragraph 2 letter b) of EU Regulation No. 2016/679, you have the right to ask the data controller to access your personal data (Art. 15 of EU Regulation No. 2016/679), to rectify them (Art. 16 of EU Regulation No. 2016/679), to delete them (Art. 17 of EU Regulation No. 2016/679), to limit the processing of the data (Art. 18 of EU Regulation No. 2016/679), to oppose their processing (Art. 21 and 22 of EU Regulation No. 2016/679) and in any case you have the right to data portability (Art. 20 of EU Regulation No. 2016/679).
As an interested party, you can exercise your rights by contacting LARIOSETA S.P.A., with registered office in Como, Via Asiago 31, the Data Controller, using the contact details indicated below. Furthermore, and in any case, you have the right to lodge a complaint with a supervisory authority according to the provisions of EU Regulation No. 2016/679 and in particular, based on Art. 77 of the same Regulation, at the supervisory authority of the Member State in which you usually reside or work, or of the place where the alleged violation occurred, without prejudice to the right to apply in any case to the ordinary competent judicial authority.
DATA CONTROLLER CONTACT DETAILS:
LARIOSETA S.P.A., with registered office in Como, Via Asiago,31.
PHONE: +39 031-570823 - EMAIL: info@larioseta.com
VAT No.: IT 00223490137.