Source: https://aidaglobal.it/italian/privacy-policy.htm
Timestamp: 2019-04-25 21:02:18+00:00

Document:
The Controller processes personal and identity data (such as name, surname, society denomination, address, phone number, e-mail, bank and payment reference codes), hereafter referreas “personal data” or just “data”) that you provide when you sign contracts of service with the Controller.
We highlight that if you are already our customers, we may send you commercial communications referring to Controller’s services or products similar to those already provided to you, except you disagree to this (art. 130 par. 4 Privacy Code).
The treatment of your personal data is carried out through the operations as specified in art. 4 of the Privacy Code and art. 4 n. 2) of the GDPR, and precisely: reception, recording, organization, storage, recall, elaboration, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data. Your personal data are processed both electronically and on paper.
The Controller will process personal data for the time necessary to pursue the above mentioned purposes and in any case not beyond 10 years from the ceasing of the relationship deriving from the service purposes and not beyond 2 years from data gathering for marketing purposes.
Third parties (as an example, credit institutions, professional firms, consultants, etc.) carrying out outsourcing activities on behalf of the Controller, as external processors.
Subjects to whom such communication is compulsory by law in relation to the above mentioned purposes.
The above mentioned subjects will process data as autonomous Controllers.
Your data will not be made public.
Personal data are stored on servers located within the European Union. No transfer to non-EU nations is foreseen.
The provision of data is compulsory for the purposes mentioned in art. 2.A). The refusal to provide data prevents the provision of services mentioned in art. 2.A).
The provision of data for the purposes mentioned in art. 2.B) is optional. You may decide not to provide any data or to withdraw consent to process data that you already provided at a later time: in this case, you will not be enabled to receive newsletters, commercial communications and advertisements regarding the services offered by the Controller. You will still be entitled to the services mentioned in art. 2.A).
Oppose, totally or partially: a) for legitimate reasons to the processing of your personal data, even if related to the purpose of processing; b) to the processing of your personal data for the purpose of sending advertising material, or direct sale, or marketing analysis or communication, by means of automated calling systems without a human operator, email or conventional marketing procedures by telephone or paper mail. We underline that the subject’s right to opposition, as previously stated, to direct marketing purposes by automated means is extended to the conventional ones, and that the subject may always request a partial opposition. Therefore, the subject may decide to receive communication only through conventional modalities or only through automated modalities or none of the above.
Where applicable, the subject has also the rights stated in art. 16-21 of the GDPR (right to rectification, right to erasure, right to restriction of processing, right to data portability and right to object), in addition to the right to appeal to the Supervisory Authority.
In compliance with art. 6 of the Regulation, processing is lawful in that it is necessary for the performance of a contract to which the data subject is party and in order to take steps at the request of the data subject prior to entering into a contract.
The Controller will process data lawfully, fairly and in a transparent manner, in compliance with the principles established in the General Data Protection Regulation, ensuring personal data protection and the fundamental rights and freedom.
The Controller of data processing is AIDA Srl, Viale Alexandre Gustave Eiffel, 100 – 00148 Roma – Italy.
The Controller of data processing is AIDA Srl, Viale Achille Grandi, 15-20096 Pioltello-Milano – Italy.
An updated list of processors is kept at the Controller’s headquarters.
Soggetti ai quali la comunicazione sia obbligatoria per legge per l’espletamento delle finalità dette.
I dati personali sono conservati su server ubicati all’interno dell’Unione Europea. Non sono previsti trasferimenti presso nazioni extra UE.
Nel rispetto dell’Art. 6 del Regolamento, il trattamento è lecito in quanto necessario all’esecuzione del contratto di cui gli Interessati sono parte e all'esecuzione di azioni precontrattuali adottate a favore degli stessi.
Il Titolare del trattamento tratterà dati personali in modo lecito, corretto e trasparente, nel rispetto dei principi sanciti dal Regolamento Generale sulla Protezione dei Personali, garantendo la tutela dei dati personali e i diritti e le libertà fondamentali.

References: art. 4
 art. 4
 art. 2
 art. 2
 art. 2
 art. 2
 art. 16
 art. 6