Pursuant to art. 13 of EU Regulation 2016/679 and in relation to personal data of which MALAVASI G. S.R.L. (hereinafter, the “Company” or “Owner”) will be in possession, we would like to inform you of the following:
The holder of the treatment is MALAVASI G. S.R.L. Via Nazionale, 28 – S.S. 12 – 41030 Sorbara di Bomporto (MO) e mail: firstname.lastname@example.org in person of its legal representative pro tempore.
Purposes of data processing
The personal data provided by the user in an optional, explicit and voluntary manner are only used by MALAVASI G. S.R.L. – as Data Controller in order to process any requests made (for example, when requesting information or clarifications by calling the numbers indicated on the website or writing to the e-mail addresses therein).
Nature of the provision of data
With the exception of navigation data, necessary for the implementation of IT and telematic protocols, the provision of personal data by users is free and optional.
However, failure to provide the data will result in the inability to proceed with the requests forwarded or that the user intends to forward.
Data relating to site navigation
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (success, error, etc.) and other parameters related to the operating system and the user’s computer environment.
These data are used for the sole purpose of obtaining anonymous statistical information on the use of the Site and to check its correct functioning and are deleted immediately after processing.
The data could be used to ascertain responsibility in case of any computer crimes against the Site.
Third parties who perform part of the processing and / or activities connected and instrumental to them on behalf of the Data Controller of the Treatment. These persons have been appointed as data controllers, having to intend individually with this phrase, in accordance with Article 4 in point 8) of the Rules, “the natural or legal person, public authority, service or other body that processes Personal Data on behalf of the Data Controller “(hereinafter the” Data Processor “);
Individuals, employees and / or collaborators of the Data Controller of the Treatment, who have been entrusted with specific and / or more processing activities on your Personal Data. These individuals have been given specific instructions on the safety and correct use of Personal Data and are defined, in accordance with Article 4 paragraph 10) of the Regulation, “persons authorized to process Personal Data under the direct authority of the Owner or the Data Processor “(hereinafter the” Authorized Persons “).
If required by law or to prevent or suppress the commission of a crime your Personal Data may be disclosed to public bodies or judicial authorities without being defined as Recipients. In fact, in accordance with article 4 of point 9) of the Regulation, “public authorities that may receive communication of Personal Data in the context of a specific investigation in accordance with Union or Member State law are not considered Recipients”.
Methods of data processing
The treatment will be carried out in an automated and / or manual form, in compliance with the provisions of art. 32 of EU Regulation 679/2016 concerning security measures, by persons specifically authorized and in compliance with the provisions of Articles 29 of the Regulations.
Your personal data are not subject to disclosure
Data profiling and / or automated decision-making processes
Your personal data are not subject to profiling and / or decision-making processes
Data transfer abroad
Personal Data will be processed by the Data Controller within the territory of the European Union.
If for technical and / or operational reasons it is necessary to make use of subjects located outside the European Union, we inform you from now on that these subjects will be appointed as Data Processors pursuant to and for the purposes of article 28 of the Regulations and the transfer of your Personal Data to these subjects, limited to the performance of specific treatment activities, will be regulated in accordance with the provisions of Chapter V of the Rules. All necessary precautions will therefore be taken to ensure the fullest protection of your Personal Data by basing this transfer: (a) on adequacy decisions of the third country recipients expressed by the European Commission; (b) on appropriate guarantees expressed by the recipient third party pursuant to Article 46 of the Rules; (c) on the adoption of binding corporate rules, c.d. corporate binding rules.
Data retention period
One of the principles applicable to the processing of your Personal Data concerns the limitation of the retention period, governed by Article 5, paragraph 1, point e) of the Regulation that states “Personal Data are stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed; Personal Data may be stored for longer periods provided that they are processed exclusively for archival purposes in the public interest, scientific or historical research or for statistical purposes, in accordance with Article 89, paragraph 1, without prejudice to the implementation of technical measures and adequate organizational requirements required by this regulation to protect the rights and freedoms of the interested party “.
In light of this principle, your Personal Data will be processed by the Data Controller only for what is necessary for the pursuit of the purpose of this Information. In particular, your Personal Data will be processed for a period of time equal to the minimum necessary, as indicated in Recital 39 of the Rules, ie until the termination of the contractual relations between you and the Data Controller without prejudice to an additional retention period which may be imposed by law as also provided for by Recital 65 of the Rules.
Rights of the interested party
The Regulation confers to the subjects whose personal data are processed specific rights, among which:
(a) obtain confirmation of whether or not personal data processing is being processed and obtain access thereto (Article 15 of the Rules);
(b) obtain the correction of inaccurate personal data (Article 16 of the Regulations);
(c) obtain the cancellation of any personal data concerning him, in accordance with the right to the right (Article 17 of the Regulations);
(d) obtain the limitation on the processing by the Owner (Article 18 of the Regulations);
(e) obtain their personal data in a structured, legible and understandable way, as well as obtain that such data are transmitted to another data controller without hindrance (Article 20 of the Rules);
(f) oppose the processing of personal data (Article 21 of the Rules).
Right to adhere to a supervisory authority
You have the right to appeal to the supervisory authority (Privacy Authority) at any time, if they believe that the processing of their data is operated in an unorthodox manner.
You may revoke the consent given to the Data Controller at any time, without such revocation affecting the processing performed until that moment by the Data Controller.
You can exercise your rights with a written request sent to the Company, to the postal address of the registered office or to the email address indicated above.
This information may change over time – also related to the possible entry into force of new industry regulations, the updating or provision of new services or technological innovations – for which we invite you to periodically consult this page.
– Version: January 2019