INFORMATION FOR THE PROCESSING OF PERSONAL DATA
We inform you that, pursuant to EU Regulation 2016/679 (hereinafter “Regulation”), and in relation to the rules for the protection of personal data privacy, the processing of information concerning you will be based on I.R.A.L. Srl (hereinafter “Data Controller” or “Data Controller”) to the principles of correctness, lawfulness and transparency, protecting your privacy and your rights.
Pursuant to articles 13 and 14 of the Rules, we provide you with the following information:
IDENTITY AND CONTACT DATA OF THE HOLDER OF THE TREATMENT
The Data Controller is: I.R.A.L. Srl
The office where the processing takes place is: Viale Forlanini 23 – 20134 – MILANO – Italy
CONTACT DATA OF DATA PROTECTION MANAGER
The Data Protection Officer identified by the Data Controller is: I.R.A.L. S.r.l., contacted with reference to the issues concerning the processing of Personal Data at the e-mail address: email@example.com.
PURPOSE OF DATA PROCESSING AND LEGAL BASIS OF TREATMENT
Data processing is aimed solely at:
a) to the correct and complete execution of the sale;
b) sending invitations to events organized for advertising purposes;
c) to send information or otherwise to subscribe to the newsletter prepared by the Owner.
The processing will be carried out in the case a) on the basis of the voluntary contribution of such essential for the execution of the contract, while in cases b) and c) on the basis of an explicit consent, requested and acquired.
CATEGORIES OF PERSONAL DATA PROCESSED
The Personal Data processed may be traced to the macro-categories of identifying data, data subject to special processing (sensitive data), all those types of particular data which the Data Controller may become aware of for achieving the purpose set out in point 3.a of the present information.
DATA PROCESSING MODE
Personal Data will be processed using manual, computerized or telematic tools, suitable for guaranteeing security and confidentiality, and will be carried out by personnel duly trained in compliance with the Applicable Regulations. We also inform you that the Personal Data referred to you, will be processed in compliance with the methods indicated by the Regulations, which provide, inter alia, that the data are:
– processed lawfully and fairly;
– collected and registered for specific, explicit and legitimate purposes;
– exact and, if necessary, updated;
– relevant, complete and not excessive in relation to the formalities of the processing;
– kept in a form that allows the identification of the data subject for a period of time not exceeding that necessary for the purposes for which they are collected or subsequently processed;
– processed according to univocal procedures established by a single control authority (“Lead Authority”), identified with reference to the State in which the Controller has its main office.
Furthermore, the business processes of the Data Controller guarantee the confidentiality and security of the information and its conservation in compliance with the legislative requirements and the security measures required.
FIELD OF COMMUNICATION OF PERSONAL DATA
The Data Processed may be communicated for the purposes referred to in point 3 to external collaborators and consultants, subjects operating in the commercial and / or data processing sector and, in general, to all those subjects for whom communication is necessary for the correct fulfillment of the purposes indicated in point 3. The absence of such communications, therefore, could result in the objective impossibility for the Owner to comply with legal obligations connected to the performance of the contractual relationship.
Subjects who may have access to the data provided, exclusively for the purposes of collaboration aimed at protecting the rights of the data subject, or who will receive the data will be required to adopt appropriate methods in accordance with the provisions of the law.
DATA CONSERVATION PERIOD (DETERMINATION CRITERIA)
The Data are processed and stored for the time required by the purposes for which they were collected.
Personal Data collected for purposes related to the execution of a contract between the Data Controller and the data subject will be retained until the execution of the contract is completed;
Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until such interest is met. The User can obtain further information regarding the legitimate interest pursued by the Data Controller by contacting the Data Controller or the Person in Charge of Personal Data Protection.
It should be noted that the Data Controller may be obliged to keep Personal Data for a period of time