This information is provided in compliance with art. 13 of Regulation 2016/679 (GDPR), pursuant to art. 13 of Legislative Decree no. 196/2003 (Code regarding the protection of personal data) and relates to all personal data processed in the manner indicated below.
THE DATA CONTROLLER
The Data Controller of the personal data collected is Michelangelo Nari (via Vittorio Caprioli, 207 – Rome).
The personal data provided may be communicated to appropriately appointed recipients who will process the data as data processors and / or as agents, in order to comply with contracts or related purposes.
The complete list of data processors and persons in charge of processing personal data can be requested by sending a specific request to the email address firstname.lastname@example.org.
TRANSFER OF DATA
In the event that personal data are transferred outside the European Union, for technical and operational purposes and to ensure a high continuity of the service, the Data Controller ensures that the transfer is based on an adequacy decision of the Commission, to the in order to ensure that the level of protection of natural persons guaranteed by current legislation and in particular by EU Regulation 2016/679 is not affected.
The personal data processed are collected as they are provided directly by the interested party or collected automatically.
The data provided directly by the interested party are all personal data that are provided to the Data Controller in any way, directly by the interested party.
The data collected automatically are the navigation data. These data, although not collected in order to be associated with the identity of the user, could indirectly, through processing and associations with data collected by the Data Controller, allow its identification.
Following the sending of newsletters, the platform used allows to detect the opening of a message and the clicks made within the newsletter itself, together with details relating to the IP and the browser / device used. The collection of this data is essential for the operation of the implicit renewal systems of the treatment (see the item Treatment Methods) and an integral part of the operation of the sending platform.
PURPOSE OF THE TREATMENT
The provision of personal data has as a legal basis for the processing contractual or pre-contractual needs or the fulfillment of legal obligations to which the Data Controller is subject. For this reason, any refusal to process or failure, incorrect or partial provision of data could have the consequence of the impossibility of a correct provision of the service or the impossibility, for the Owner, to respond to requests for information sent by the interested.
The provision of data for the purpose of sending newsletters for promotional, commercial information or research purposes is optional and the refusal to give the relative consent to the Treatment will give rise to the impossibility of being updated about commercial initiatives and / or promotional campaigns, to receive offers or other promotional material.
REVOCATION OF CONSENT
The interested party can withdraw his consent to receive promotional and commercial communications immediately, by sending a request to the email address email@example.com or by clicking on the unsubscribe link that can be found in the footer of each promotional and commercial email received.
The personal data provided may be communicated to appropriately appointed recipients who will process the data as data processors and / or as persons in charge.
The Data Controller does not communicate any of the information of the interested parties to third parties without their consent, unless required by law. In any case, the disclosure of the personal data processed is excluded. The complete list of data processors, joint controllers and persons in charge of processing personal data can be requested by sending a specific request to the email address firstname.lastname@example.org.
METHOD OF TREATMENT
Personal data are processed with automated tools for the time strictly necessary to achieve the purposes for which they were collected, providing in any case for the annual verification of the data stored in order to delete those deemed obsolete, unless the law provides for archiving obligations .
The data processing is normally carried out at the headquarters of the Data Controller, by personnel or external collaborators duly designated as data processors. The complete list of data processors and persons in charge of processing personal data can be requested by sending a specific request to the email address email@example.com.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
Registration and related processing are considered valid until the user unsubscribes from this email, or 12 months after the last communication for which he has evidence of direct interaction (click, opening, reply).
RIGHTS OF THE INTERESTED PARTY
Pursuant to articles 15 – 21 of EU Regulation 2016/679, each interested party is granted a series of rights.
Right of Access: the interested party, pursuant to art. 15, has the right to obtain confirmation that a processing of personal data concerning him is in progress and, if necessary, to obtain a copy. He also has the right to obtain access to personal data concerning him and to further information such as the purpose of the processing, the categories of recipients, the data retention period and the rights that can be exercised.
Right of rectification: the interested party, pursuant to art. 16, has the right to obtain the correction of inaccurate personal data concerning him or the integration of the same.
Right to erasure: the interested party has the right to obtain the erasure of personal data concerning him, without undue delay, if there is one of the reasons provided for by art. 17.
Right to limitation of treatment: the interested party has the right, in the cases provided for by art 18 of Regulation 2016/679, to obtain the limitation of treatment.
Right to data portability: the interested party has the right to receive personal data concerning him in a structured format, commonly used and readable by an automatic device and has the right to transmit such data to another holder without impediment, according to what provided by art. 20 of Regulation 2016/679;
Right to object to processing: the interested party has the right to object to the processing of personal data concerning him according to the provisions of art. 21 of Regulation 2016/679.
The interested party also has the right to lodge a complaint with the competent supervisory authority, the Privacy Guarantor.
The requests referred to in the previous points must be sent in writing to the Data Controller. The Data Controller will, within the time limits established by current legislation, provide prompt response to requests to exercise the rights of the interested parties.
Any clarification or request for clarification can be sent in writing to the Data Controller.
UPDATES AND MODIFICATIONS
The Data Controller reserves the right to modify, supplement or periodically update this Information in compliance with the applicable legislation or with the measures adopted by the Guarantor for the protection of personal data.