Source: http://www.birrabvs.it/en/privacy-disclaimer/
Timestamp: 2019-02-17 20:34:06
Document Index: 390774554

Matched Legal Cases: ['art. 13', 'Art. 15', 'art 16', 'art. 19', 'art. 17', 'art. 20', 'Art. 18', 'art. 21', 'art. 77', 'art. 78']

Privacy Disclaimer - BVS Beer
Privacy Policy ex art. 13 D.lgs. 679/2016
we wish to inform you that GDPR 679/2016 (”EU General Data Protection Regulation”) provides for the protection of natural person regarding the treatment of personal, as well as the free movement of those data.
According to article no. 5 of GDPR 679/2016, this treatment will be based on principles of accountability, fairness, lawfulness and transparency, purpose and storage limitation, data minimisation and accuracy, as well as integrity and confidentiality of the rights of the data subject.
Pursuant to Article 13 of GDPR 679/2016, we inform you the treatment has the explicit consent as legal base. About that we provide the following information:
1. The personal data you provide will be used for the following purposes:
a. The management of the tourist services and for the purposes strictly related to the management of the service itself (such as the communication to supplier and partner. The conferment of data is necessary and any refusal to supply such data may lead to failure of the relationship.
b. The fulfillment of administrative and fiscal obligations under applicable laws , regulations and E.U. legislation. The conferment of data is necessary and any refusal to supply such data may lead to failure of the relationship.
c. The promotion and marketing work, to develop activity of public relations or market studies. The conferment is facultative.
2. The data will not be disclosed to other parties and they will not be transfered to a third country or international organisation. But, after consent, they will be circulated in the following manners:
– Photos will be used in our retail channels, in our websites and in our social networks to promote the tours.
– E-mail addresses will be used only to request you a feedback on the tours.
3. The personal data provided will be stored fisical and/or electronic archives located only in Italy for maximum 10 years (as per legal obligations). The treatment will be realized with paper, computer and electronic tools, (including online profiling), to ensure the security and confidentiality of the data.
4. The treatment also concerns personal data falls into the category of “sensitive” data, that are data disclosing religious, philosophical or other beliefs, as well as personal data disclosing health.
The treatment of the sensitive data has the same purposes provided for the treatment of personal data referred to in point 1 and 2 of this privacy policy
The data will not be disclosed to other parties and they will not be transferred to a third country or international organisation.
5. The data controller is Birrificio Valdarno Superiore Srl – . Via Cataliotti n°16 – 52025 Montevarchi (AR – Italia) – P.I.: 02153750514 .
6. The data processor of the treatment is Antonio Massa – CEO of the Birrificio Valdarno Superiore Srl, Contacts Phone +39 3491207715 and email info@birrabvs.it
7. At any time you may exercise your rights under artt. 15-23 Chapter 3 DGPR 679/2016 and in particular:
DGPR 679/2016
1. According to Art. 15 the data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the following information:
5. The data subject shall have the right to obtain:
a. The update, the rectification and have incomplete personal data completed ( ref. art 16 right to rectification and art. 19 Notification obligation regarding rectification or erasure of personal data or restriction of processing)
b. Erasure, transformation on anonymous form or blocking of personal data processed in violation of law, including the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed (art. 17 Right to erasure ‘right to be forgotten’). The data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided; the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible (art. 20 Right to data portability).
6. The data subject shall have the right to obtain from the controller restriction (in full or in part) of processing for licit reason, although the data fulfil of the purpose of collection (v. Art. 18 Right to Restriction of Processing art. 21 Right to Object.)
7. The data subject shall have the right to lodge a complaint with a supervisory authority if he considers that the processing of personal data relating to him or her infringes this Regulation (v. art. 77 Right to lodge a complaint with a supervisory authority); the data subject has also the possibility of a judicial remedy against a decision of a supervisory authority (v. art. 78 Right to an effective judicial remedy against a supervisory authority.