Source: https://www.floema.it/gdpr-en
Timestamp: 2019-04-24 09:46:35+00:00

Document:
The data controller is Floema S.R.L., with registered office in via Del Molino, 14, CAP 61028, Sassocorvaro (PU) - ITALY, intends to provide the data subject with complete information on the purposes and methods of processing personal data.
Personal data (e.g. personal data, telephone number, e-mail, etc.) are processed by computer media or in any case with the aid of computerized or automated tools in compliance with the security measures and, in any case, in order to guarantee the integrity, security and confidentiality of the data.
2.2) Profiling for marketing purposes.
The personal data will also be processed primarily for purposes strictly connected and instrumental to the fulfilment of the obligations inherent in the mentioned points 1-3. The consent you have expressed is the legal basis of the processing pursuant to art. 13, paragraph 1), letter c) of the GDPR.
The provision of your data for the purposes referred to in paragraph 1) of art. 3 is mandatory. This treatment is necessary for Floema S.R.L., any refusal to provide the data in question will make it impossible for Floema S.R.L. to proceed with the processing of your personal data and, therefore, to proceed with the report. With reference to the purposes of the processing referred to points 2) and 3) of the art. 3, the consent to the data processing is optional and may be expressed by completing this document. The lack of consent will not have any consequences on the possibility of giving it later. Failure to consent will only imply the consequences described below: the impossibility of Floema S.R.L. to send commercial information and to communicate / transfer personal data for marketing purposes.
In any case, even if you have given your consent to authorize Floema S.R.L. to carry out the purposes set out in points 2) and 3), will remain free at any time to revoke it. Following receipt of this opt-out request, _ will immediately remove and delete data from the databases used for processing for purposes of _ and inform for the same purpose of cancellation any third parties to whom the data have been communicated. Simply receiving the cancellation request will automatically be validated as confirmation of cancellation.
2. 2) all institutions (including Public Authorities) who have access to data under regulatory or administrative provisions. The personal data you have provided and subsequently processed in connection with the management of the service are not subject to disclosure.
1. 1) for a period of 10 years, subject to legal exceptions.
3. 3) for the purposes indicated in point 2) of the art. 3 for 10 years, subject to legal exceptions, from the moment of consent to treatment.
In reference to article 13, paragraph 2, letters b) and d), 15, 18, 19 and 21 GDPR, the interested party is informed that he has the right to: a. Access to personal data: as the answer is less in progress, access to information: words, data categories, recipients, retention period, right of complaint and authorization of control, the right to adopt the correction or limitation of the treatment or opposition to the processing itself as well as the existence of an automated decision-making process; b. Request for rectification or limits of the same or limitation of treatments by "limitation" means the marking of the data stored with the aim of limiting the treatment in the future; c. Opposition to processing: interest in pursuing a legitimate interest of the owners; d. Data portability: in the case of automated processing carried out on the basis of consent or in execution of a contract, data in force. In particular, the data provided by the holders is in .xml format. Revocation of consent for marketing use, direct market research and profiling, the exercise of the law does not prejudice in any way the lawfulness of the treatments carried out before the revocation; f. Propose a claim pursuant to art. 77 RGPD to the competent supervisory authority based on your habitual residence, workplace or place of violation of your rights; for Italy it is responsible for the protection of personal data, which can be contacted via the contact details on the website http://www.garanteprivacy.it. The rementioned rights may be exercised by sending a specific request to the Data Controller through the contact channels indicated in art. 1 of this information. Requests relating to the exercise of your rights will be processed without undue delay and, in any case, within one month of the application; only in cases of particular complexity and in the number of requests, this deadline may be extended by a further 2 (two) months. e) obtaining data portability; We inform you specifically and separately, as required by art. 21 GDPR that if personal data are processed for marketing purposes, the data subject has the right to object at any time and that if the data subject objects to the processing, personal data can no longer be processed for these purposes. The exercise of rights is not subject to any form constraint and it is free.

References: art. 13
 art. 3
 art. 3
 art. 3
 art. 77
 art. 1
 art. 21