INFORMATION FOR THE PROCESSING OF PERSONAL DATA
We inform you pursuant to art. 13 EU Regulation no. 2016/679 (hereinafter “GDPR”) that your data are processed in the manner and for the following purposes:
- Object of the treatment
The personal, identifying data (for example, name, surname, company name, address, telephone, e-mail, bank references, etc. later, “personal data” or even “data“) communicated by you when concluding contracts with MOLON ANTONIO E LORENZO SRL (hereinafter the “Owner“) will be treated in accordance with the provisions dictated by the GDPR regarding privacy.
- Purpose of the treatment and consequences of the refusal to communicate the data or refusal of consent
Your personal data are processed:
A) without your express consent (Article 6 letter b), c), e), f) GDPR), for the following service purposes:
– fulfill the pre-contractual, contractual and tax obligations deriving from existing relationships with you
– fulfill the obligations established by law, by a regulation, by EU legislation or by an order of the Authority (such as for example in the matter of anti-money laundering);
– exercise the rights of the owner, for example the right to defense in court;
B) only with your specific and distinct consent (art.7 GDPR), for the following marketing purposes:
– send you via e-mail, post and / or sms and / or telephone contacts, newsletters, commercial communications and / or advertising material on products or services offered by the Owner and detection of the degree of satisfaction with the quality of services;
– detection of the degree of customer satisfaction on the quality of services;
We inform you that you are already our customer, we can send you commercial communications relating to the owner’s services and products similar to those you have already used, except for your dissent.
The provision of data for the purposes referred to in section A) above is mandatory. The lack of data and / or any refusal to process will make it impossible for the Data Controller to perform the requested services or supplies.
The provision of data for the purposes referred to in section B) is optional, with the consequence that you can decide not to provide the data or your consent or to withdraw it at any time: in this case, you will not receive newsletters, commercial communications and advertising material related to the services offered by the Owner.
You will however continue to have the right to receive the requested services or supplies from the Owner.
- Method of treatment
The processing of your personal data is carried out by means of the operations indicated in art. 4 no. 2) GDPR and precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subjected to both paper and electronic and / or automated processing.
- Duration of treatment
Your personal data will be kept for the time strictly necessary to carry out the purposes described above and to fulfill the obligations established by law and, in any case, for a period not exceeding 10 years.
- Access to data
Your data may be made accessible for the purposes referred to in art. 2.A) and 2.B):
– to employees and collaborators of the Data Controller in Italy and abroad, in their capacity as persons in charge and / or internal managers of the treatment and / or system administrators;
– to third-party companies or other subjects (as an indication, credit institutions, studies, professionals, consultants, insurance companies for the provision of insurance services, etc.) who carry out outsourcing activities on behalf of the Owner, in their capacity as managers external treatment.
- Sharing data
Your data may be shared, for the purposes set out above or for technical operational needs related to these purposes:
– entities, professionals, companies or other structures appointed by the Data Controller for the processing related to the fulfillment of the administrative, accounting and management obligations related to the ordinary performance of the economic activity of the Data Controller, also for credit recovery purposes;
– public authorities and administrations for the purposes related to the fulfillment of legal obligations or to persons entitled to access them by virtue of provisions of law, regulations, community regulations;
– banks, financial institutions or other subjects to whom the communication of data is necessary for the performance of the Data Controller’s activity in relation to the fulfillment of the contractual obligations assumed towards you;
– employees or collaborators of the Data Controller in their capacity as persons in charge and / or internal managers of the treatment and / or system administrators;
– suppliers of installation, assistance and maintenance services for IT and telematic systems and systems and services functionally connected and necessary for the fulfillment of the services you requested.
- Data transfer
Personal data are stored on servers located within the European Union. In any case, it is understood that the Owner, if necessary, will have the right to move the servers even outside the EU. In this case, the Data Controller ensures as of now that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to stipulation of the standard contractual clauses provided by the European Commission.
- Rights of the interested party
In accordance with the provisions of Chapter III, Section I GDPR, you, as an interested party, can exercise the following rights:
a) Right to obtain access to personal data and to obtain the following information:
– confirmation that the processing of personal data is in progress;
– the purposes of the treatment;
– the categories of personal data;
– the recipients or categories of recipients to whom the personal data have been or will be communicated;
– if the data are not collected from the interested party, all information available on their origin;
– the existence of an automated decision-making process, including profiling;
– a copy of the personal data being processed.
b) Right to rectification and integration of personal data;
c) Right to erasure of data (“right to be forgotten”) in certain circumstances indicated below:
1. personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
2. You withdraw your consent to the processing of data and there is no other legal basis for the processing;
3. You object to the treatment and there is no prevailing legitimate reason to proceed with the treatment;
4. the personal data have been unlawfully processed;
5. personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the data controller is subject;
The Data Controller, if he has made personal data public and is obliged to delete them, must inform the other owners who process the personal data of the request to delete any link, copy or reproduction of his data.
d) Right to limitation (suspension) of processing in the event that:
1. You contest the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
2. the processing is unlawful and you object to the deletion of personal data and instead request that its use be limited; 3. although the data controller no longer needs it for processing purposes, personal data are necessary for you to ascertain, exercise or defend a right in court;
4. You have objected to the processing, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
e) Right to lodge a complaint with the Guarantor for the protection of personal data:
You can lodge a complaint following the procedures and indications published on the official website of the Guarantor Authority www.garanteprivacy.it.
f) Right to data portability:
You have the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning you provided to a data controller and possibly transmit them to another data controller, if the treatment is based on consent or on a contract and is carried out by automated means. Where technically possible, you have the right to obtain direct transmission of data from one data controller to another.
g) Right to object:
You can object to the processing of personal data at any time, including profiling, in particular if:
1. the processing takes place on the basis of the legitimate interest of the owner, subject to an explanation of the reasons for the opposition;
2. personal data are processed for direct marketing purposes.
h) Right not to be subjected to a decision based solely on automated processing, including profiling:
except in cases where the decision is necessary for the conclusion or execution of a contract between you and the Data Controller, is authorized by Union or Member State law to which the Data Controller is subject or is based on the Your explicit consent.
i) Right to withdraw consent at any time:
with any obvious consequence deriving from the impossibility of the Data Controller to be able to comply with legislative or contractual provisions if the treatment is established by these provisions.
The exercise of rights is not subject to any form constraint and is free of charge.
- How to exercise your rights
You can exercise your rights at any time by sending a registered letter with return receipt. to MOLON ANTONIO E LORENZO S.R.L., or a pec: INFO@PEC.OFFICINEMOLON.COM
- Holder of the treatment
Molon Antonio e Lorenzo S.r.l. with headquarters in Via Puglia 5, 35043 Monselice (Pd).
