pursuant to regulation (eu) 2016/679 ("gdpr") articles 13 and 14 and subsequent national adaptation rules
This document ("informative") Intends to provide you with indications regarding the processing of information, as specified below, which will be provided by you or otherwise available at our facility and which will be processed by the same and / or by other persons identified for the purposes indicated below. The information, in particular, is provided pursuant to EU Regulation no. 679/2016 ("GDPR") And subsequent national adaptation rules (together with the GDPR hereafter"Applicable legislation").
The data controller, pursuant to art. 4 and 24 of EU Reg. 2016/679, is ANNA VIRGILI srl - Contrada San Giovanni - 63074 San Benedetto del Tronto (TE), VAT number 01937680443, Tel. (0736) 757536, customers@annavirgili.it, in the person of pro-tempore legal representative (hereinafter "Holder").
Contact details of the Data Protection Officer (so-called "RPD-DPO")
The Data Controller does not carry out activities that require the designation of the person in charge of the protection of personal data.
Purpose and legal basis of the processing
The Personal Data collected will be processed for the purposes and under the legal bases set out below:
| Purpose | Legal basis of the processing |
|---|---|
point 3, lett. to): for the management of your contractual relationship or to execute pre-contractual measures (such as, for example, the request for information or that of a quote). In this case, you are free to provide your personal data, even particular ones; however, failure to provide it will not allow you to establish the aforementioned relationship and satisfy your request. | the processing is necessary in relation to the execution of a contract to which you are a party |
point 3, lett. b): subject to your specific consent, to send them (i) promotional communications relating to the Owner and (ii) communications relating to organized events by the Data Controller (hereinafter "marketing purposes") | your consent |
Statistics
Google Analytics, Google Analytics with anonymized IP, Google Ads conversion tracking and Facebook Ads conversion tracking (Facebook pixel).
Categories of personal data processed (pursuant to Article 14)
Within the limits of the purposes and methods described in this Notice, information that can be considered as "Personal details", Which includes your personal details, your contact details (such as, for example, mobile number, e-mail address, etc.).
Recipients and categories of recipients
Personal data will not be disseminated, or will not be disclosed to indeterminate subjects. Instead, they may be communicated to well-defined subjects, in full compliance with the provisions of the law, for purposes strictly related to those previously indicated. Any access to your personal data is limited to the subjects authorized by the Data Controller. The communication to the identified recipients, only if involved and functional, is linked to the achievement of the purposes referred to in point 3 above, therefore the personal data collected and processed may be:
- used anonymously for statistical purposes;
- made available to the Data Controller's collaborators, as managers or persons authorized to process personal data;
- communicated to third parties, natural or legal, public administrations, professionals, law enforcement agencies, government bodies, regulatory bodies, courts or other public authorities authorized by law;
- communicated to commercial partners, only in case of prior and express consent of the User;
- if necessary, transferred to another Data Controller in accordance with the provisions of the GDPR, also with regard to the right to data portability.
The information may also be communicated whenever the communication may be necessary to comply with requests from the Judicial or Public Security Authorities. The collected data will in no case be disclosed.
The list of personal data processing managers is available at the headquarters of the Data Controller.
Transfer of data abroad
The data will not be transferred outside the European Union.
Data retention period (determination criteria)
Below is a table that contains the indications of the retention times (or the criteria for determining) of the Personal Data:
| Purpose | Conservation times |
|---|---|
point 3, lett. to): contract management | For the entire duration of the relationship and subsequently for 10 years (ordinary prescription). |
point 3, lett. b): marketing purposes | 2 years from collection, without prejudice to the possibility for the interested party to modify and / or revoke his will at any time |
Data processing methods
The processing of Personal Data will be carried out using manual, computerized or telematic tools, suitable for guaranteeing their security and confidentiality and will be carried out by personnel duly trained in compliance with the Applicable Regulations. There is no automated decision making process.
In addition to cases in which it is necessary to contact you for needs related to the management of your position, where you consent to the processing of your data for the purposes referred to in point 3, lett. b), you can be contacted via e-mail, newsletter, sms, or through any equivalent electronic tool or by paper mail or call via operator at all the addresses provided. If you prefer to be contacted only at one or some of these addresses, you can make an express request using the form available by clicking on the following link: Exercise of rights module.
Rights that are recognized to you
The processing of Personal Data will be carried out using manual, computerized or telematic tools, suitable for guaranteeing their security and confidentiality and will be carried out by personnel duly trained in compliance with the Applicable Regulations. There is no automated decision making process.
We inform you that you can exercise the rights recognized by the Applicable Law including, by way of example, the right:
- to access their Personal Data and to know the origin, the purposes and purposes of the processing, the data of the subjects to whom they are communicated, the data retention period or the criteria useful to determine it (Article 15);
- to request its rectification (Article 16);
- cancellation ("oblivion"), if no longer necessary, incomplete, erroneous or collected in violation of the law (Article 17);
- to request that the processing be limited to a part of the information concerning you (Article 18);
- to the extent that it is technically possible, to receive in a structured format or to transmit to you or to third parties indicated by you the information concerning you (so-called "portability") or that which has been voluntarily provided by you (Article 20);
- to oppose their treatment based on legitimate interest (Article 21);
- as well as to withdraw their consent at any time, in the event that this constitutes the basis of the processing (the withdrawal of consent in any case does not affect the lawfulness of the processing based on the consent carried out before the withdrawal itself).
The aforementioned rights may be exercised by means of a written request addressed without formalities to the Data Controller [or to the DPO] to the contacts indicated in points 1 and 2.
The owner must proceed in this sense without delay and, in any case, at the latest within one month of receipt of the request. The deadline can be extended by two months, if necessary, taking into account the complexity and number of requests received by the Data Controller. In such cases, the Data Controller will inform you within one month of receiving your request and will inform you of the reasons for the extension.
Reminds you that, if the response to your requests has not been satisfactory in your opinion, you can contact and lodge a complaint with the Authority for the Protection of Personal Data (http://www.garanteprivacy.it/) in the ways provided for by the Law. Applicable.