Pursuant to Article 13 and Article 14 of the EU Regulation 679/2016 regarding personal data, we inform you that the processing of personal data provided when filling in the form “Request for Information” will be carried out in compliance with the EU Regulation 2016/679, as well as with the EU Directives numbers 58/2002 and 136/2009.
The data controller of personal data is Podartis S.r.l. Unipersonale based in Via Erizzo 123 / c – 31035 Crocetta del Montello (Treviso -Italy) Tel. +39 042329311, firstname.lastname@example.org
LOCATION OF DATA PROCESSING
Processing related to personal data collected by filling in the forms “Request for Information” takes place predominantly on the premises of the Data Controller and is stored for a specified period on the servers of the service provider. The personal data collected will not be disseminated and/or disclosed to third parties and will not be transferred to non-EU countries.
An external Data Processor has been appointed for the processing of the personal data described below; said external data processor is “Twin Studio S.r.l.” based in Via Marsala 2– 20121 Milan (Italy) and acts as a service provider and developer of the website platform.
A complete list of the External Data Processors designated by the Data Controller is available from the Data Controller.
TYPES OF DATA
This disclosure relates to the personal data sent by the user (in technical terms, the data subject) who fills in the “form” present on the website. Moreover, during normal operation, the computer systems and the software procedures ensuring the proper functioning of this website acquire certain personal data that is implicitly transmitted by the usage of Internet communication protocols.
METHODS OF DATA PROCESSING
Kindly also be informed that, pursuant to Article 5 of GDPR 679/2016, your personal data will be processed lawfully, fairly and in a transparent manner; it will be collected for specific and legitimate purposes and subsequently processed in a manner consistent with those purposes; it will be adequate, relevant, and limited to the minimum necessary in relation to the purposes for which it is processed; it will be accurate and, if necessary, up-to-date; it will be kept in a form which permits the identification of data subjects; it will be processed in such a way as to ensure a sufficient level of safety of personal data, including protection, through appropriate technical and organisational measures, against unauthorised or unlawful processing and loss, destruction or accidental damage.
Provision of data is based on consent provided freely and voluntarily by the data subject. Failure to grant consent will mean your data and your request cannot be sent, so we will not be able to provide you with a reply. This data will not be saved on other media or storage devices, nor will other data acquired during your browsing session be saved.
PURPOSES OF THE DATA PROCESSING
The sole aim of the contact form on this website is to allow visitors to use it in order to contact the Company/Data Controller by email, if they so wish. Indeed, the only reason we collect and process personal data is to get back in touch with users by using the details on the “Request for information” form in order to deal with any requests that the users might have made in the message.
The legal basis for processing Personal Data can be found in Art. 6 par. 1 point (b) of the GDPR which cites that processing is necessary for the provision of the Services or in order to deal with the requests of the data subject.
DURATION OF DATA CONSERVATION
Personal and particular data will be kept (in a digital format as well) for a period of time that does not exceed the purposes for which it is processed and, in any case, no longer than 36 months from the time of collection.
RIGHTS OF THE DATA SUBJECT
Data subjects shall be granted the rights envisaged under Articles 15, 16, 17, 18, 20 and 21 of the afore-mentioned EU GDPR and, in particular, the right to access their personal data, to request its rectification, updating and deletion, the limitation to processing, if data is incomplete, erroneous or collected in violation of the law, as well as the right to data portability and the right to object to its processing for legitimate reasons; said rights may be exercised by sending in a request to the data controller.
Data subjects are also entitled to lodge a complaint with the Supervisory Authorities.
CHANGES TO THIS PRIVACY STATEMENT
This Privacy Statement is subject to change. We recommend that you check it frequently and always make reference to the most recent version.