Source: https://www.vermop.it/vermop-italia/legale/tutela-dei-dati.html
Timestamp: 2019-04-21 04:28:03+00:00

Document:
The following data protection declaration is the foundation of our action and an integral part of the business relationship with customers, interested parties and third parties.
On the basis of legal and technical changes, we adapt the data protection declaration when necessary. The most recent version of the data protection declaration, which has been published on the internet site, is valid.
It is possible to object to setting of cookies at any time by a matching change of the setting in the internet browser. Cookies which have been set can be deleted. We point out that possibly not all the functions of our internet site can be used to the complete extent if cookies are deactivated.
Whenever the internet site is accessed, VERMOP Salmon GmbH collects data and information by means of an automated system. They are stored in the log files of the server.
Processing of the data serves to provide the contents of our internet site, to guarantee functionality of our information technology systems and to optimise our internet site. The data in the log files are always stored separate from the users' other personal data.
VERMOP Salmon GmbH uses Google Analytics, a web analysis service of Google Inc. ("Google"). Google Analytics uses so-called "cookies", text files which are stored on your computer and enable an analysis of the use of website by you. The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server in the USA and stored there. Google will use this information in order to evaluate your use of the website, to collate reports about the website activities for the website operators and to render further services connected with the use of the website and the internet. Google will also transmit this information to third parties if necessary to the extent that this is prescribed by law or to the extent that third parties process these data by order of Google.
You can prevent the installation of cookies by a matching setting of your browser software; however, we point out that you will possibly not be able to use all the functions of this website to the complete extent in such a case. By using this website, you declare your agreement to the processing of the data collected about you by Google in the way described above and for the aforementioned purpose.
On the internet sites, you will find links to third parties' offers. VERMOP Salmon GmbH cannot assume any liability for these sites and their dealings with personal data.
VERMOP Salmon GmbH expressly declares that VERMOP Salmon GmbH has no kind of influence on the design and the contents of the linked sites. For this reason, VERMOP Salmon GmbH hereby expressly dissociates itself from the contents of all the linked sites on the homepage and does not make these contents its own. This declaration applies to all the links displayed on the homepage and to all the contents of the sites to which the banners, buttons and links visible with VERMOP Salmon GmbH lead.
For reasons of security and protection of the transmission of confidential contents, such as the inquiries which you send to us as the site operator, this site uses an SSL encryption. You can recognise encrypted transmission by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser line.
When the SSL encryption has been activated, the data which you transmit to us cannot be read by third parties.
If the data subject makes use of the possibility of registering on the internet site of the controller of the processing, stating personal data, the data in the input mask in question are transmitted to the controller of the processing. The data are exclusively stored for the purpose of internal use by the controller of the processing.
At registration, the user's IP address and the data and time of the registration are stored. This serves to prevent misuse of the services. There is no forwarding of the data to third parties. An exception exists if a statutory obligation to forwarding exists.
Registration of the data is necessary for provision of contents or services. Registered persons have the possibility of having the stored data erased or adapted at any time. The data subject receives information about the personal data stored about him/her at any time.
If our company's newsletter is subscribed to, the data in the input mask in question are transmitted to the controller of the processing.
At the registration to the newsletter, the user's IP address and date and time of the registration are stored. This serves to prevent misuse of the services or of the data subject's e-mail address. There is no forwarding of the data to third parties. An exception exists if a statutory obligation to forwarding exists.
The data are used exclusively for the dispatch of the newsletter. The subscription to the newsletter can be terminated by the data subject at any time. Likewise, the consent for the storage of the personal data can be withdrawn at any time. For this purpose, there is a matching link in each newsletter.
There is a contact form on the VERMOP Salmon GmbH internet site which can be used for electronic contacts. As an alternative, contact via the e-mail address which has been provided is possible. If the data subject gets in touch with the controller of the processing via one of these channels, the personal data transmitted by the data subject are automatically stored. The storage merely serves purposes of processing or contact with the data subject. There is no forwarding of the data to third parties.
This is a voluntary statement of personal data. As a matter of principle, VERMOP Salmon GmbH has taken all technical and organisational measures so that these data are secure as well.
Nevertheless, please be careful with the information and do not transmit any sensitive data via this contact form, e.g. your bank account details.
The controller of the processing only processes and stores the data subject's personal data for as long as is necessary to achieve the purpose of the storage. Storage can be done in excess of this to the extent that this has been provided for by European or national legislation in Union law ordinances, acts or other directives to which the controller of the processing is subject.
As soon as the purpose of storage does not exist or the storage period provided for by the aforementioned directives expires, the personal data are erased or blocked as a routine matter.
You can claim all your rights against the company in accordance with the contact data in point 1 or against our data protection coordinator in accordance with the contact data in point 2.
h.	the existence of automated decision-making including profiling according to Art. 22 subparagraphs 1 and 4 GDPR and – at least in these cases – meaningful information about the logic involved and the implications and the planned effects of such a processing for the data subject.
This right of information can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or severely impairs it and the restriction is necessary for the performance of the research or statistical purposes.
You have a right to rectification and/or completeness against the controller to the extent that the processed personal data concerning you are incorrect or incomplete. The controller has to make the rectification without undue delay.
Your right to rectification can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or severely impairs it and the restriction is necessary for the performance of the research or statistical purposes.
d.	If you have objected to the processing pursuant to Art. 21 subparagraph 1 GDPR and it is not yet certain whether the controller’s legitimate reasons prevail over your reasons.
If processing of the personal data concerning you has been restricted, these data - apart from their storage - may only be processed with your consent or in order to establish, to exercise or to defend legal claims or to protect the rights of any other natural or legal entity or for reasons of an important public interest of the Union or of a Member State.
If the processing has been restricted pursuant to the aforementioned preconditions, you will be notified by the controller before the restriction is rescinded.
Your right to restriction of the processing can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or severely impairs it and the restriction is necessary for the performance of the research or statistical purposes.
a.	The personal data concerning you are no longer necessary for the purposes for which they have been recorded or processed in any other way.
b.	You withdraw your consent on which the processing was based pursuant to Art. 6 subparagraph 1 lit. a or Art. 9 subparagraph 2 lit. a GDPR and there is no other legal foundation for the processing.
c.	You make an objection against the processing pursuant to Art. 21 subparagraph 1 GDPR and there are no prevailing legitimate reasons for the processing, or you make an objection against the processing pursuant to Art. 21 subparagraph 2 GDPR.
d.	The personal data concerning you have been processed unlawfully.
e.	Erasure of the personal data concerning you is necessary for fulfilment of a legal obligation pursuant to Union law or the law of the Member States to which the controller is subject.
f.	The personal data concerning you have been recorded with a view to services offered by the information society pursuant to Art. 8 subparagraph 1 GDPR.
If the controller has made the personal data concerning you public and if he is obliged to erase them pursuant to Art. 17 subparagraph 1 GDPR, he shall take suitable measures, also of a technical nature, taking the available technology and the costs of implementation into due account, in order to inform the persons responsible for data processing who are processing the personal data about the fact that you as the data subject have demanded erasure of all the links to these personal data or of copies or replications of these personal data from them.
e.	to establish, to exercise or to defend legal claims.
If you have claimed the right to rectification, erasure or restriction of processing from the controller, the latter is obliged to inform all the recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of the processing, unless this proves to be impossible or is connected with disproportionately great efforts.
The right to be informed about these recipients accrues to you vis-à-vis the controller.
b.	the processing is done by means of automated procedures.
When exercising this right, you further have the right to have the personal data concerning you transmitted directly from one controller to another controller to the extent that this is technically feasible. Freedoms and rights of other persons may not be impaired by this.
The right to data portability does not apply to a processing of personal data which is necessary in order to attend to a task which is in the public interest or is done when exercising public authority which has been assigned to the controller.
You have the right to make an objection against the processing of the personal data concerning you which is done on the basis of Art. 6 subparagraph 1 lit. e or f GDPR at any time for reasons which result from your particular situation; this also applies to a profiling based on these provisions.
In such a case, the controller no longer processes the personal data concerning you unless he can prove cogent reasons for the processing worthy of protection which prevail over your interests, rights and freedoms, or the processing serves establishing, exercising or defending legal claims. If the personal data concerning you are processed for purposes of direct advertising, you have the right to make an objection against the processing of the personal data concerning you for the purpose of such advertising at any time; this also applies to the profiling to the extent that it is connected with such direct advertising. If you object to the processing for the purpose of direct advertising, the personal data concerning you shall no longer be processed for these purposes.
You also have the right to object to the processing of the personal data concerning you for scientific or historical research purposes or for statistical research purposes pursuant to Art. 89 subparagraph 1, GDPR, for reasons which result from your particular situation.
Your right to objection can be restricted to the extent that it prospectively makes implementation of the research or statistical purposes impossible or severely impairs it and the restriction is necessary for the performance of the research or statistical purposes.
You have the right to withdraw your declaration of consent under data protection law at any time. The lawfulness of the processing done on the basis of the consent until the revocation is not affected by the withdrawal of the consent.
c.	is made with your explicit consent.
With a view to the cases stated in a. and c., the controller takes suitable measures in order to safeguard the rights and freedoms and also your legitimate interests, which includes at least the right to achieve intervention by a person on the part of the controller, to portray your own point of view and to object to the decision.
Notwithstanding any other administrative law or judicial remedy, you also have the right to a complaint to a supervisory authority, in particular in the Member State of your place of residence, your workplace or the place of the assumed breach if you are of the opinion that the processing of the personal data concerning you breaches the GDPR.
The supervisory authority to which the complaint has been sent notifies the complainant about the status and the outcome of the complaint, including the possibility of an effective judicial remedy pursuant to Art. 78 GDPR.
As a matter of principle, there is no forwarding of the data, possible exceptions have been regulated in the above points. Above all, forwarding is not done for commercial purposes (address trading).
To the extent that we obtain consent from the data subject for processing procedures, Art. 6 subparagraph 1 lit. a European General Data Protection Regulation (GDPR) serves as the legal foundation for the processing of personal data.
In the processing of personal data which is necessary to perform a contract, the contracting party of which is the data subject, Art. 6 subparagraph 1 lit. b GDPR serves as the legal foundation. This also applies to processing procedures necessary to implement pre-contractual measures.
In the event of vital interests of the data subject or of another natural entity making processing of personal data necessary, Art. 6 subparagraph 1 lit. d GDPR serves as the legal foundation.
If processing is necessary to safeguard a legitimate interest of our enterprise or a third party and if the data subject’s interests, fundamental rights and fundamental freedoms do not prevail over the first named interest, Art. 6 subparagraph 1 lit. f GDPR serves as the legal foundation for the processing. Our enterprise's justified interest is implementing our business activity.
Personal data are stored for the duration of the statutory archiving period in question. After the expiry of the period, the data are erased as a routine matter to the extent that there is no necessity for the preparation or the performance of a contract.

References: Art. 22
 Art. 21
 Art. 6
 Art. 9
 Art. 21
 Art. 21
 Art. 8
 Art. 17
 Art. 6
 Art. 89
 Art. 78
 Art. 6
 Art. 6
 Art. 6
 Art. 6