Privacy Policy
NOTICE TO CUSTOMERS ON THE PROCESSING OF PERSONAL DATA PRIVACY POLICY IN ACCORDANCE WITH EU REGULATION 2016/679 AND THE PRIVACY CODE
In accordance with EU Regulation 2016/679 and the Privacy Code, we hereby inform you that we will process your personal data for the establishment and execution of the fulfilments. Our organisation will process data relating to you, acquired even verbally, directly or through third parties, which is qualified as "personal data" for the purposes of current privacy legislation.
The legislation in question requires that anyone processing personal data inform the person concerned about what data is being processed and about certain elements qualifying the processing. This must be carried out fairly, lawfully, transparently, etc., protecting your confidentiality and your rights. In compliance with this rule, we provide you with the information.
1. Data Controller
The Data Controller is LINEA S.R.L., with registered office in Via Luigi Einaudi no. 14, Moncalieri (TO),
Tax Code and VAT no. 08734010013.
The Data Controller has not appointed a Data Protection Officer, as the requirements of the GDPR are not met and no large-scale data processing is carried out. This decision will be reviewed periodically.
2. Purposes and legal basis of the processing
Your data are processed in relation to contractual requirements and the consequent fulfilment of legal and fiscal obligations, as well as to allow effective management of the relationship between you and us, to carry out the services requested by customers, for requirements prior to the conclusion of a contract, for pre and post sales assistance. Your data may also be processed for statistical purposes, albeit purely in aggregate and anonymous form.
Should you decide to grant your consent, after having reviewed this information notice, your data may also be used by the undersigned Data Controller
for the purposes of commercial information, i.e. to provide information or updates on products, services or initiatives promoted by us or by other structures.
Should you decide not to give your - optional - consent for the aforementioned purposes, the contractual relationship will not in any case be compromised or altered.
Please note that the consent given may be revoked at any time, without affecting the lawfulness of the processing carried out up to the moment of revocation.
3. Nature of the data collected
We process your personal and tax data, as well as data of an economic nature that are necessary for the performance of the relationships arising from the aforementioned contractual relationship, existing or future with you.
We are not in possession of any of your data that could be qualified as judicial data, nor of any other data that could be qualified as special categories of personal data within the meaning of Article 9 of the GDPR.
4. Provision of data With regard to the
data that we are obliged to know in order to fulfil the obligations provided for by laws, regulations and Community legislation, or by impositions imposed by authorities empowered to do so by law and by supervisory and control bodies, failure to provide such data on your part will make it impossible to establish or continue the relationship to the extent that such data are necessary for the performance thereof.
5. Recipients and transfers outside the European Union
Your data will not be disclosed by us, by which term is meant the disclosure of such data to unspecified parties in any way, including by making them available or consulting them.
Your data may be communicated by us, this term meaning giving knowledge of it to specific subjects, in the following terms:
a. to subjects who can access the data by virtue of a provision of law, regulation or Community legislation, within the limits provided by these rules;
b. to subjects who need access to your data for purposes ancillary to the relationship between you and us, to the extent strictly necessary to carry out these ancillary tasks;
c. to our consultants, to the extent necessary to carry out their duties in our organisation, subject to our letter of appointment imposing a duty of confidentiality and security;
your personal data will not be disclosed to third parties or resold for any reason whatsoever, unless you have given your express consent.
The electronic archive of your data is stored on Italian territory and consequently no transfer of personal data outside Italy takes place.
6. Storage of data
Your personal data, even if particular, are recorded and stored only for the purposes provided for by law and for contractual purposes.
The aforementioned data, as well as contact and promotional data, shall be processed for the entire duration of the relationship and also subsequently, where necessary, for the fulfilment of legal obligations, for administrative purposes, for purposes connected with after-sales and commercial services, the latter only after consent has been given.
Your personal data will be processed using manual and automated tools, in ways strictly related to the purposes indicated above and, in any case, in such a way as to guarantee the security and confidentiality of your data.
The personal data collected for the purposes covered by this information notice will be kept, in any case, until you revoke your consent as per point 2, unless the same information is processed in other ways by the same Data Controller. In any event, upon revocation of consent, the data will no longer be processed for the purpose described in point 2.
7. Rights of the data subject As the data
subject, you have the rights set forth in Article 15 of European Regulation 2016/679 (GDPR) and in particular the right to: i.
request and obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in intelligible form;
ii. to
request and obtain information on: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic instruments; d) the identity of the data controller, data processors and any representative appointed under Article 3.1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of such data in their capacity as appointed representative in the State territory, data processors or persons in charge of processing;
iii. request and obtain a) the updating, rectification or, where interested therein, the integration of the data; b) the cancellation, transformation into anonymous form or blocking of data processed in breach of the law, including data whose retention is not necessary for the purposes for which the data were collected or subsequently processed
c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
iv. to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys, by means of automated calling systems without human intervention, by e-mail. It should be noted that the data subject's right to object, as set out in point b) above, for direct marketing purposes by means of automated methods extends to traditional methods and that, in any event, the data subject's right to object may be exercised even in part.
Therefore, the data subject may decide to receive only communications by traditional means or only automated communications or neither type of communication.
In addition, he/she has the rights set out in Articles 16-22 GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to complain to the Data Protection Authority.
8. How to exercise your
rights You may exercise your rights at any time by sending a communication by email to amministrazione@lineasrl.com.
9. Existence of automated
decision-making processes No automated decision-making processes will be based on the data communicated for the processing that is the subject of this notice.
Moncalieri (TO), 25 May 2018.