Source: http://akern.it/en/contatti-eng/privacy-policy.html
Timestamp: 2019-04-26 07:48:35+00:00

Document:
With regard to the provisions of Reg. (EU) 2016/679 (European General Data Protection Regulation), this is to provide you with the legally required information with regard to the processing of personal data supplied by the data subject.
Pursuant to articles 4 and 24 of Reg. (EU) 2016/679, the data controller is AKERN srl, in the capacity of data controller and legal representative.
The Data Controller processes the personal identification data (for example name, surname, company name, address, telephone number, email address, and bank and payment details) communicated by the data subject during the conclusion of contracts for the services offered by the Data Controller.
- the sending via email, post and/or text message and/or telephone contacts of marketing and/or promotional communications of third parties (for example, business partners or insurance companies).
– business information companies for assessment of solvency and payment practices and/or to entities which provide credit recovery services.
The entities in the aforesaid categories fulfil the function of Data Processor, or operate in complete independence as separate Data Controllers.
The personal data of the data subject are processed through the operations specified in art. 4 comma 2 of Reg. (EU) 2016/679 (GDPR), and specifically: collection, recording, organisation, storage, consultation, treatment, alteration, selection, retrieval, alignment, use, combination, freezing, disclosure, erasure or destruction of data. Personal data are processed both on paper and by electronic and/or automated means.
Data will be processed in automated and/or manual form, by procedures and with tools which guarantee the highest level of security and confidentiality, by specifically appointed persons or entities.
In compliance with the provisions of art. 5 comma 1 (e) of Reg. (EU) 2016/679, personal data collected will be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
– obtain: a) the updating, rectification or, where interested therein, integration of the data; b) the erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were disclosed or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
– object, partially or entirely: a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys, with the use of automated systems not involving an operator, by email and/or by traditional marketing means using the telephone and/or paper mail.
Where relevant, the data subject also has the rights set out in art. 16-21 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability and right to object).
Without detriment to the right to any other administrative or jurisdictional recourse, if the data subject maintains that the processing of his personal data breaches the provisions of Reg. (EU) 2016/679, under art. 15 comma f) of the said Reg. (EU) 2016/679 he/she has the right to complain to the Personal Data Protection Authority and, pursuant to art. 6 comma 1 (a) and art. 9 comma 2 (a), is entitled to withdraw the consent given at any time.
In the event that the data subject submits a data portability request, the Data Controller shall supply his/her personal data in a commonly used, readable format, subject to the provisions of art. 20, commas 3 and 4 of Reg. (EU) 2016/679.

References: art. 4
 art. 5
 art. 16
 art. 15
 art. 6
 art. 9
 art. 20