Source: http://ecomm.danielagregis.it/privacy_subscriptionENG.html
Timestamp: 2019-08-23 01:23:06
Document Index: 112735253

Matched Legal Cases: ['Art. 13', 'Art. 13', 'art. 20', 'art. 7', 'art. 77', 'art. 23']

Terms of personal data processing according to Art. 13 of Legislative Decree no. 196 of 2003 and Artt. 13 and 14 of Regulation EU 2016/679
We inform the data subject that Legislative Decree no. 196 of 2003 (so called “Codice in materia di protezione dei Dati Personali” – hereinafter also referred as “Code”) e il Regulation EU no. 2016/679 (hereinafter also referred “GDPR”) provide the protection of Personal Data Processing.
According to Code, GDPR and to others applicable laws on the subject, Personal Data Processing by OK’AM S.r.l. will be based on principles of propriety, lawfully and transparency, respecting the rights and fundamental freedom, the data subject dignity, with particular attention to confidentiality, to personal identity and to the right to Personal Data protection.
This informative document is given according to Art. 13 of the Code as well as according to Articles 13 and 14of GDPR and it is subject to updates which are published on the present web-site. Therefore, we advise You to regularly verify the informative document and to make reference to the updated version.
2.The Controller of processing
OK’AM S.r.l. is the controller of processing, with registered office in Via Sudorno no. 30/A, 24129 Bergamo (Italy) guarantee the respect of the personal data protection regulations by giving the following information related to the processing of personal data communicated or in any case took in other way during the use of the present web-site.
3.Personal data processed and relative purpose
3.1Data generated by access to the site
These data (such as domain names, IP addresses, operating system used, type of browser device used for connection) are not accompanied by any additional personal information and are used to manage the control requirements of the modalities of use of the web-site and to ascertain responsibility in case of computer crimes.
The legal basis that legitimate the processing of such data is the necessity to make usable the functionality of the web-site after the user access.
3.2Data granted voluntary by the user
The personal data provided by the user through registration forms are collected and processed for the following purposes:
a)for carrying out the activities of relationship with the customer on the basis of the contractual agreements and for their execution;
b)for administrative purposes and for the fulfilment of legal obligations such as those of accounting or fiscal nature, or for the fulfilment of requests from the judicial authorities;
c)in case of specific consent, for the periodic sending, by e-mail, of newsletters for receive updates on our activities and invitations to events.
The legal basis that legitimate the processing is the execution of a contract of which the data subject is a party or the execution of pre-contractual measures taken at the request of the latter. In the case expressly indicated, the legal basis is instead the consent freely provided by the data subject.
4.Nature of the data provision
Except for what specified for navigation data, the provision of data:
--with reference to the purposes referred to letters a) and b) is optional but any refusal will prevent OK'AM S.r.l. to comply with the contractual commitments undertaken;
--with respect to the purposes referred to letter c), it is also optional and their use is conditional upon the issue of an explicit consent. Any refusal will prevent OK'AM S.r.l. to send newsletters or invitations to events and initiatives.
5.Processing methods and data retention terms
The collected data will be processed using electronic devices, or in any case automated, computerized and telematic, or through manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, in such a way to guarantee their security. The data are kept for the time strictly necessary for the management of the purposes for which the data are collected, according to current regulations and legal obligations.
In any case OK'AM S.r.l. applies rules that prevent the retention of data indefinitely and therefore limits the storage time in compliance with the principle of minimization of data processing.
6.Subjects authorized to process, processors and data communication
The processing of the collected data is carried out by internal staff of OK'AM S.r.l. to this end identified and authorized for processing according to specific instructions given in compliance with current legislation.
The data collected, if necessary or suitable for the execution of the indicated purposes, may be processed by third parties, appointed as external processors, or, depending on the case, communicated to them as independent owners, namely:
(i) persons, companies, associations or professional firms that provide assistance and advice to our company, for the purposes referred to in point 3.2 lett. b);
(ii) companies and other associations that perform services connected and necessary to the execution of the above mentioned purposes (management of payments by credit card, maintenance of computer systems).
7.Place of data processing and transfer
Data processing and storage are carried out on servers located within the European Union, also through third-party companies empowered and duly appointed as Data Processors. Currently, the servers are located in France.
Data are not transferred outside the European Union. The Controller keeps the right to change the location of servers even outside the European Union, ensuring, in this case, that the transfer takes place in accordance with applicable legal provisions, with the appropriate safeguards provided for by art. no. 46 of the GDPR. In any case, personal data will never be disclosed.
8.Rights of the subjects data
Pursuant to articles 15 and following of the GDPR, the user has the right to ask at any time, the access to his personal data, the correction or cancellation of the same, the limitation of treatment in the cases provided for by art. no. 8 of the GDPR and to obtaining, in a structured format, of common use and readable by automatic device, the data concerning him, in the cases provided for by art. 20 of the GDPR. At any time, the user can revoke according to art. 7 of the GDPR the consent given; propose a complaint to the competent control authority pursuant to article 77 of the GDPR (Personal Data Protection Authority) and according to art. 77 of the GDPR, if he considers that the processing of the collected data is contrary to the applicable laws.
The user can apply a request for opposition to the processing of his personal data pursuant to Article 21 of the GDPR, giving evidence of the reasons which justify the opposition: the Controller reserves the right to evaluate the application, which would not be accepted in case of existence of legitimate and binding reasons to proceed with the processing that prevail over the interests, rights and freedom of the user.
The requests must be sent in writing to the Controller of the processing at the following e-mail address: privacy@danielagregis.it.
As usually applied on all websites, also this site uses cookies, small text files that allow you to store information on visitor preferences, to improve the functionality of the site, to simplify navigation by automating the procedures (e.g. Login, site language) and for the analysis of the use of the site.
Session cookies are essential in order to distinguish between connected users, and are useful to avoid that a required feature can be provided to the different user, as well as for security purposes to prevent cyber attacks on the site. Session cookies do not contain personal data and last only for the current session, until the browser is closed. No consent is required for them.
Consent to processing data
According to art. 23 of the Code, confirming the receipt of the present informative document the subject data gives the consent to the processing of data within the aforementioned purposes and methods in the limits in which the user's consent was required by law. In particular, the user expresses his consent for the acquisition of personal data; the communication of data to third parties as indicated in this information. This consent is valid until written revocation to be sent by registered letter with return receipt or by e-mail to privacy@danielagregis.it or by registered e-mail.