INFORMATION FORM CONTACT FOR THE PROCESSING OF PERSONAL DATA
INFORMATION FORM CONTACT FOR THE PROCESSING OF PERSONAL DATA
Information document Article 13 EU Reg. 2016 / 679- GDPR – Information on the processing of personal data collected from the interested party.
In compliance with the provisions of EU Reg. 2016/679 (European Regulations for the protection of personal data) we provide the necessary information regarding the processing of personal data provided. The information must not be considered valid for other websites that may be consulted through links on the website of the owner’s domain, which is not to be considered in any way responsible for third party websites.
This is an information that is provided pursuant to art. 13 of EU Reg. 2016/679 (European Regulations for the protection of personal data) and is also inspired by the provisions of Directive 2002/58 / EC, as updated by Directive 2009/136 / EC, regarding Cookies and envisaged by the Provision of the Authority for the protection of personal data of 08.05.2014 regarding cookies.
Personal data that can be processed: «personal data»: any information concerning an identified or identifiable natural person («concerned»); an individual is identified as identifiable, either directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social; (C26, C27, C30)
1. HOLDER OF THE TREATMENT, pursuant to art. 4 and 24 of EU Reg. 2016/679, is GFB SRL, with registered office in Via Mazzini, 6 – 43121 Parma – TEL. 0525-71938 E-MAIL: [email protected]
2. RESPONSIBLE FOR DATA PROTECTION (RPD / DPO Data Protection Officer), pursuant to art. 37 – 39 of EU Reg. 2016/679: NOT PRESENT
3. PURPOSE AND LEGAL BASIS OF TREATMENT
The personal data provided will be processed, in compliance with the conditions of lawfulness pursuant to art. 6 lett. f) (legitimate interest) EU Reg. 2016/679, for the following purposes:
compilation form data collection for request for contact with sending the requested information.
Data processing is based on Article 6 (1) (f): (recital 47) taking into account the reasonable expectations of the data subject at the time and in the collection of personal data, when the data subject can reasonably expect that treatment is carried out for this purpose.
4. ADDRESSEES OR CATEGORIES OF ADDRESSEES OF DATA
The personal data provided will be communicated to recipients, who will process the data as managers (Article 28 of EU Reg. 2016/679) and / or as natural persons acting under the authority of the Data Controller and the Data Processor (Article 29 of EU Reg. 2016/679), for the purposes listed above under point 3. Precisely, the data will be communicated to:
subjects that provide services for the management of the information system used by and telecommunications networks, including e-mail, newsletters and website management; – studies or companies in the context of assistance and consultancy relationships; – competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request. The subjects belonging to the aforementioned categories perform the function of Data Processor, or operate in complete autonomy as separate Data Controllers. The list of data processors is constantly updated and available by writing to [email protected] or at the registered office of the owner mentioned above.
5. DATA TRANSFER TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION AND GUARANTEES
Personal data is stored within the European Union in order to comply with the aforementioned purposes. The data will be transferred according to Article 44 – General principle for the transfer; Article 45 – Transfer on the basis of an adequacy decision; Article 46 – Transfer subject to adequate guarantees. The interested party can obtain information about the guarantees for data transfer by writing an email to [email protected] or to the registered office of the Data Controller.
6. DATA STORAGE OR CRITERIA FOR DETERMINING THE PERIOD
The processing will be carried out in an automated and manual way, with methods and tools aimed at guaranteeing maximum security and confidentiality, by subjects specifically appointed to do so.
In compliance with the provisions of art. 5 paragraph 1 letter e) of Reg. UE 2016/679 the personal data collected will be stored in a form that allows identification of data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed. The retention of personal data provided depends on the purpose of the processing:
for contact request (maximum 1 year).
7. RIGHTS OF THE INTERESTED PARTIES
You can assert your rights as expressed in EU Regulation 2016/679, by contacting the Data Controller, by sending an e-mail to [email protected] or by writing to the office of the owner indicated above.
You have the right, at any time, to ask the Data Controller to access your personal data (Article 15), the correction (Article 16) or the cancellation (Article 17) of the same, or the limitation of processing (Article 18) or to oppose their treatment based on legitimate interest (Article 21).
Withdrawal of consent. The processing has no legal basis in the consent but in legitimate interest. If the treatment is based on consent, you have the right to withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation.
To oppose the treatment and to exercise the other rights you can write to [email protected]
You have the right to lodge a complaint with a supervisory authority.
The communication of personal data is not an obligation. You are free to provide personal data in the dedicated areas on the site. Failure to provide personal data will make it impossible to use the services offered by the data controller. There is no automated decision-making process.
Update date 14/02/2019
