Informative pursuant to art. 13 of the European Regulation 679/2016
In accordance with art. 13 of the European Regulation (EU) No. 2016/679 (hereinafter GDPR), the Adriano Marco and Vittorio Simple Agricultural Company, established in Alba (CN), 12051, Frazione San Rocco sinus D'elvio No. 13/A, as the holder of the treatment, informs her that her data will be processed With the modalities and for the following purposes.
1) Subject of treatment
The owner treats his personal identifying information (such as nominative, company name, tax code and VAT number, address, telephone numbers, bank details) communicated by you in the context of contractual relations.
2) Purpose of treatment
Your personal data are processed:
A) without its express consent, pursuant to art. 6 lit. b) GDPR, for the following purposes:
Fulfil the pre-contractual, contractual and fiscal obligations arising from relations with you in being;
Fulfil the obligations laid down by law, regulations, Community legislation or an order of authority (e.g. in the field of anti-money laundering);
Exercising the rights of the holder such as, for example, the right of defence in court;
b) only after his specific and distinct consent, ex art. 7 GDPR, for the following Marketing purposes:
Send Them by e-mail, mail and/or SMS and/or telephone contacts, commercial communications and/or advertising material on products offered by the rightholder.
3) Legal basis
The treatment is necessary for the execution of a contract of which each customer is part or the execution of pre-contractual measures adopted at the request of the same.
For the Marketing purpose identified in the preceding point, the treatment will be done only after its specific and distinct consent, which will constitute the legal basis of the treatment. You will then have the right to withdraw your consent at any time. The withdrawal of consent shall, however, not prejudice the lawfulness of consent-based treatment prior to revocation.
4) Non-conferral of data
The conferral of data for the purpose referred to in subparagraph (a) of point 2 is a necessary requirement for the execution of the contract. Therefore, failure to communicate such data entails the impossibility for the holder to follow up the activities relating to the main treatment, namely:
– The management of the contract;
-the obligations, even legal, deriving from the relationship established.
The conferral of data for the purpose referred to in subparagraph (b) of point 2 is optional and therefore there are no consequences in the event of a refusal of it, if not the impossibility of providing it with more information on the developments of our services and greater Adaptation of the same to his needs.
5) Method of treatment
Your personal data are subject to both paper and electronic and/or automated processing also by inserting them into databases, lists and lists suitable for storing, managing data, in the ways and limits necessary for the pursuit of purposes.
Specific security measures are observed to prevent data loss, illicit or incorrect use, and unauthorized access. Not limited to: firewall, antivirus, antimalware, backup.
Your data will be processed exclusively by persons authorised to the treatment expressly appointed and educated.
The holder will treat the personal data for the time necessary to fulfill the above purposes and for the period prescribed by the laws relating to the obligations of conservation for fiscal and civil purposes.
For Marketing purposes the data will be processed until the person concerned exercises the right of withdrawal.
7) Access to data
The personal data processed by the rightholder will not be disseminated, or it will not be given knowledge to indeterminate persons, in any possible form, including that of their making available or simple consultation.
Your data may be made accessible for the purposes set out in point 2:
To employees and collaborators of the rightholder, in their capacity as persons in charge and/or responsible for processing;
Third-party companies or other entities (as an indication, credit institutions, professional firms, consultants, etc.) who carry out outsourcing activities on behalf of the rightholder, in their capacity as external managers of the treatment.
Therefore, some of the personal data collected may be disclosed for example to:
– Consultants and freelancers, also in associated form, companies and law firms, etc., for administrative and accounting purposes, for professional consultancy activities and tax and legal assistance;
– Banks and credit institutions for the management of receipts and payments;
– Insurance undertakings;
– Financial administrations and public bodies in compliance with regulatory obligations;
– Data processing and computer services companies (e.g. Web hosting, data entry, management and maintenance of infrastructures and computer services, etc.).
They may be communicated to persons entitled to access it by virtue of legal provisions, regulations and Community regulations.
The updated list of external managers is in any case available at the owner's office.
Moreover, on the basis of the work carried out, some authorised to the treatment have been legitimated to treat the personal data, within the limits of their competences and in accordance with the instructions given to them by the holder.
The updated list of persons authorized to treat the personal data is in any case available at the owner's office.
8) Rights of the person concerned
The Artt. 15 and following of the GDPR (*), confer the right to obtain:
Confirmation of the existence or absence of personal data concerning it, even if not yet registered, and their communication in intelligible form;
The indication of the origin of the personal data, of the purposes and modalities of the treatment, of the logic applied in the case of treatment carried out with the aid of electronic instruments, the identification details of the holder;
The updating, rectification, integration, cancellation, processing anonymously or blocking of data processed in violation of the law, including those whose preservation is not necessary in relation to the purposes for which the data is collected or subsequently treated;
The attestation that these transactions have been brought to the attention, including with regard to their content, of those to whom the data have been communicated, except in cases where such fulfilment proves to be impossible or involves the use of means Manifestly disproportionate in relation to the protected right.
You also have the right:
To revoke at any time the consent given to the processing of personal data (without prejudice to the lawfulness of treatment based on consent prior to revocation);
To oppose, in whole or in part, for legitimate reasons, the processing of personal data concerning it, albeit relevant to the purpose of the collection;
To oppose, in whole or in part, the processing of personal data concerning him for the purposes of sending advertising material or direct sales or for the completion of market research or commercial communication;
To submit a complaint to the guarantor for the protection of personal data in the cases provided for by GDPR;
To obtain from the holder of the treatment the limitation of the treatment when one of the hypotheses foreseen by art. 18 of regulation;
The portability of personal data within the limits referred to in article 20 of the GDPR.
9) Means of exercising rights
The person concerned may at any time exercise the above rights by sending a communication:
By mail to the address email@example.com;
or via mail via A/R addressed to Adriano Marco and Vittorio simple Agricultural Company, Frazione San Rocco sinus D'elvio No. 13/A, 12051 Alba (CN).
The holder is obliged to provide you with an answer within one month of the request, extendable up to two months in case of particular complexity of the request.
10) Identity and contact details of the data controller
The holder of the treatment is the Adriano Marco and Vittorio simple Agricultural company, with headquarters in Frazione San Rocco sinus d'elvio N. 13/A, 12051 Alba (CN), N. Tel. 0173.362294, e-mail firstname.lastname@example.org, in person of Adriano Marco, legal representative of Adriano Marco and Vittorio SSA.
(*) Reg. (EC) 27 April 2016, no 2016/679
Article 15 right of access of the person concerned
1. The person concerned shall have the right to obtain from the holder of the treatment confirmation that a processing of personal data concerning him or not is in progress, to obtain access to personal data and to the following information:
A) The purpose of the treatment;
b) The categories of personal data in question;
(c) Recipients or categories of recipients to whom personal data have been or will be communicated, in particular if recipients of third countries or international organisations;
(d) Where possible, the retention period of personal data envisaged or, if it is not possible, the criteria used to determine that period;
e) The existence of the right of the person concerned to ask the holder of the treatment for the rectification or cancellation of personal data or the limitation of the processing of personal data concerning him or to oppose their treatment;
(f) The right to propose a complaint to a supervisory authority;
g) Where the data are not collected from the person concerned, all information available on their origin;
(h) The existence of an automated decision-making process, including the profiling referred to in article 22 (1) and (4), and, at least in such cases, significant information on the logic used, and the importance and expected consequences of such treatment For the interested party.
2. Where personal data is transferred to a third country or an international organisation, the person concerned shall have the right to be informed of the existence of adequate safeguards within the meaning of article 46 relating to the transfer.
3. The holder of the treatment shall provide a copy of the personal data subject to treatment. In the case of further copies requested by the person concerned, the data controller may charge a reasonable cost contribution based on administrative costs. If the person concerned submits the request by electronic means, and unless otherwise indicated by the person concerned, the information shall be provided in an electronic format of common use.
4. The right to obtain a copy referred to in paragraph 3 shall not affect the rights and freedoms of others.
Article 16 Right of adjustment
The person concerned has the right to obtain from the holder of the treatment the correction of the inaccurate personal data concerning him without undue delay. Taking into account the purpose of the treatment, the person concerned has the right to obtain the integration of incomplete personal data, including by providing an additional declaration.
Article 17 right to cancellation (' Right to oblivion ')
1. The person concerned shall have the right to obtain from the holder of the treatment the cancellation of the personal data concerning him without undue delay and the holder of the treatment has the obligation to cancel without undue delay the personal data, if There is one of the following reasons:
A) personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
(b) The person concerned revokes the consent on which the treatment is based in accordance with article 6(1)(a)), or article 9(2)(a)), and if there is no other legal basis for the treatment;
(c) The person concerned is opposed to treatment within the meaning of article 21 (1) and there is no prevailing legitimate reason for processing, or is opposed to treatment within the meaning of article 21 (2);
d) Personal data has been treated illicitly;
e) Personal data must be deleted in order to fulfil a legal obligation under the law of the Union or the Member State to which the holder of the treatment is subject;
(f) Personal data have been collected in relation to the provision of information society services referred to in article 8 (1).
2. The holder of the treatment, if he has made public personal data and is obliged, in accordance with paragraph 1, to delete them, taking into account the available technology and the costs of implementation shall take reasonable measures, including techniques, to inform the holders of Treatment that they are treating the personal data of the request of the interested party to delete any link, copy or reproduction of its personal data.
3. Paragraphs 1 and 2 shall not apply to the extent that treatment is necessary:
A) for the exercise of the right to freedom of expression and information;
(b) For the fulfilment of a legal obligation requiring the treatment provided for by the Law of the Union or the Member State to which the holder of the treatment is subject or for carrying out a task carried out in the public interest or in the exercise of public authority of which the holder of the treatment is invested;
(c) For reasons of public interest in the field of public health in accordance with article 9(2)(h) and (i)) and article 9 (3);
(d) For the purpose of archiving in the public interest, scientific or historical research or for statistical purposes in accordance with article 89 (1), insofar as the right referred to in paragraph 1 risks making it impossible or severely affecting the Achieving the objectives of such treatment; Or
e) For the assessment, operation or defence of a right in the judicial proceedings.
Article 18 right of limitation of treatment
1. The person concerned shall have the right to obtain from the holder of the treatment the limitation of treatment when one of the following assumptions occurs:
(a) The person concerned disputes the accuracy of the personal data, for the period necessary for the holder of the treatment to verify the accuracy of such personal data;
b) The treatment is unlawful and the person concerned is opposed to the deletion of personal data and asks instead that its use is limited;
(c) Although the holder of the treatment no longer needs it for the purposes of processing, personal data shall be necessary for the person concerned to establish, exercise or defend a right in judicial proceedings;
(d) The person concerned was opposed to treatment within the meaning of article 21 (1), pending verification of the possible prevalence of the owner's legitimate reasons for treatment with respect to those of the person concerned.
2. Where the treatment is limited in accordance with paragraph 1, such personal data shall be treated, except for storage, only with the consent of the person concerned or for the assessment, exercise or defence of a right in judicial proceedings or to protect the Rights of another natural or legal person or for reasons of relevant public interest of the Union or of a Member State.
3. The person who has obtained the limitation of treatment in accordance with paragraph 1 shall be informed by the holder of the treatment before such limitation is withdrawn.
Article 20 right to data portability
1. The person concerned shall have the right to receive in a structured format, of common use and readable by automatic device, the personal data relating to him supplied to a holder of the treatment and has the right to transmit such data to another holder of the processing Without impediments by the holder of the treatment provided to them if:
(a) The treatment is based on consent under article 6(1)(a)) or article 9(2)(a)) or on a contract within the meaning of article 6(1)(b)); E
b) The treatment is carried out by automated means.
2. When exercising its rights in relation to the portability of data pursuant to paragraph 1, the person concerned shall have the right to obtain the direct transmission of personal data from one holder of the treatment to another, if technically feasible.
3. The exercise of the right referred to in paragraph 1 of this article shall be without prejudice to article 17. This right shall not apply to the treatment necessary for the performance of a task of public interest or related to the exercise of public powers to which the holder of the treatment is invested.
4. The right referred to in paragraph 1 shall not affect the rights and freedoms of others.
Article 21 right of opposition
1. The person concerned shall have the right to oppose at any time, on grounds relating to his or her particular situation, the processing of personal data concerning him within the meaning of article 6(1)(e) or (f)), including profiling on the basis of such Provisions. The holder of the treatment shall refrain from further processing the personal data unless he demonstrates the existence of legitimate grounds for the treatment prevailing on the interests, rights and freedoms of the person concerned or for The establishment, exercise or defence of a right in judicial proceedings.
2. Where personal data is processed for direct marketing purposes, the person concerned shall have the right to oppose at any time the processing of personal data concerning such purposes, including the profiling insofar as it is Connected to that direct marketing.
3. Where the person concerned is opposed to treatment for direct marketing purposes, the personal data shall no longer be treated for such purposes.
4. The right referred to in paragraphs 1 and 2 shall be expressly brought to the attention of the person concerned and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the person concerned.
5. In the context of the use of information society services and without prejudice to Directive 2002/58/EC, the person concerned may exercise his or her right of opposition by means of automated vehicles using technical specifications.
6. Where personal data is processed for scientific or historical research purposes or for statistical purposes in accordance with article 89 (1), the person concerned shall, on grounds relating to his/her particular situation, be entitled to oppose the processing of personal data which It concerns him, except if the treatment is necessary for the execution of a task of public interest.