Source: https://privacy.at-media.it/en/
Timestamp: 2019-04-22 02:19:53+00:00

Document:
The Data Controller processes personal data, identification (name, surname, company name, address, telephone number, e-mail address, bank and payment details ...), hereinafter "personal data" or even "data" you have provided on conclusion contracts for services rendered by AT MEDIA SRL.
Exercise the rights of the Owner, such as the right to defense in court.
The Owner expressly indicates that, if you have already used the services we have rendered and have already been our Customers, it will be possible for us to send you commercial communications relating to services rendered by AT MEDIA SRL, subject to your disagreement (Article 130 c.4 Privacy Code).
The processing of your personal data is carried out through the operations indicated in art. 4 of the Privacy Code and art. 4 n.2 GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.
The data will be processed using appropriate tools to ensure the security and confidentiality of the same and will be processed both in paper form and electronic and / or automated, including through telematic or innovative channels to store, manage and transmit the data.
The Data Controller will process the personal data for the time necessary to fulfill the purposes specified above and in any case for no more than 10 years from the termination of the relationship for the purposes of service and no later than 2 years from collection for marketing purposes.
Without the need for express consent (Article 24 letter A-b-d Privacy Code and Article 6 letter B-c GDPR) the Data Controller may communicate your data for the purposes referred to in art. 2 ° to Supervisory Bodies (such as IVASS), judicial authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of the aforementioned purposes. These subjects will process data in their capacity as data controllers.
Personal data is stored on servers located in Frankfurt within the European Union. The Owner, if necessary, will still have the right to move the servers even outside the EU; in this case, the Data Controller ensures from now on that the transfer will take place in accordance with the provisions of the current law, subject to the stipulation of the standard contractual clauses provided by the European Commission.
The provision of data for the purposes referred to in art. 2nd is mandatory. Otherwise, we will not be able to guarantee the Services referred to in the same article.
The provision of data for the purposes referred to in art. 2b is optional. It is therefore your right to decide not to give any data or subsequently deny the possibility to process the data already provided: in this case you will not receive newsletters, invitations to events, commercial communications and advertising material related to the services offered by the Owner but will always continue to to be entitled to the Services referred to in art. 2a.
Oppose, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of collection: b) to the processing of personal data that concern you for the purpose of sending advertising material or direct selling or for carrying out market research or commercial communication, through the use of automated systems call without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or paper mail. It is noted that the right of opposition of the interested party, referred to in this point b) for direct marketing purposes through automated methods extends to traditional ones and that in any case the possibility of exercising the right to oppose even partially. Therefore, the interested party may decide to receive communications only through traditional or only automated methods or none of the two types of communication.
Where applicable, the person concerned has the rights set forth in articles 16-21 GDPR (right of rectification, right to be forgotten, right to limit processing, right to data portability, right of opposition) as well as the right of complaint to the Guarantor Authority.

References: art. 4
 art. 4
 art. 2
 art. 2
 art. 2
 art. 2