INFORMATION ON THE PROCESSING OF PERSONAL DATA
(Articles 13 and 14 of EU Regulation 2016/679)
FPC, with registered office in via Terraggio 21 - Milan, e-mail address firstname.lastname@example.org (hereinafter the "Data Controller"), informs that it is the Data Controller - pursuant to articles 4, n. 7) and 24 of EU Regulation 2016/679 of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data (hereinafter, the "Regulation") and of the Italian harmonization legislation - of your personal data collected from the site https://borgo-office.it.
The processing of personal data means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, even if not registered in a data bank, such as collection, registration, organization, structuring, storage, processing, selection, blocking, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
The Data Controller informs you, therefore, that pursuant to the Italian harmonization legislation it will proceed with the relative processing for the following purposes manually and / or with the support of IT or telematic means.
1 – Purpose of the processing
The data is acquired and processed in compliance with the rules established by the Regulation for the following purposes:
- management and use of personal data for the purposes of the regular provision of the requested service, such as, for example: provision of services, inclusion in company records, processing of internal statistics, issuing of invoices, credit notes, estimates and offers, and in any case, to meet the obligations arising from the services requested;
- to fulfill the obligations established by law, regulations, community legislation, tax and civil laws.
- to carry out promotional communications
2 – Communication and dissemination of personal data for the pursuit of the primary purposes of the processing
The data may be disclosed to any other third party when the communication is mandatory by law, including the scope of prevention / repression of any illegal activity.
3 – Mandatory or optional consent for the pursuit of the purposes of the processing of personal data
The provision of data to the undersigned owner is mandatory only for data for which there is a regulatory obligation in this regard. Any refusal to provide such mandatory data could force the Data Controller to learn them from third sources (where lawfully possible), or lead to the inability to provide the requested information and services. Any refusal to provide data for which there is no obligation to provide pursuant to the law, but strictly functional to the execution of existing contracts or to provide the information and services requested, does not entail any consequence in relation to the relationships in place. course, without prejudice to the possible impossibility of following up on the operations connected to such data or the impossibility of executing the contract.
In any case, even where the data subject has given consent to authorize the Data Controller to pursue all the purposes mentioned in the points above, he will still be free to revoke it at any time.
We inform you specifically and separately, as required by art. 21 of the Regulation, that the interested party has the right to object at any time to the processing of personal data concerning him carried out for these purposes and that if the interested party objects to the processing, the personal data can no longer be processed for these purposes.
4 – Transfer of personal data to countries outside the European Union
The data collected and processed are not transferred to companies or other entities outside the EU territory.
5 – Data retention times other information
With reference to the personal data being processed for the purposes of the regular provision of the requested service, the same will be kept in compliance with the principle of proportionality and in any case until the purposes of the processing have been pursued, for a period of time not exceeding that necessary. for the purposes for which they were collected or subsequently processed and using the Italian civil and tax laws on prescription as a criterion.
6 – Data Controller and Data Processors
The data controller is FPC, with registered office in via Terraggio 21 - Milan, e-mail address email@example.com
To get in touch with the Data Controller or find out the complete and updated list of data processors appointed by the Data Controller, send an e-mail to the e-mail address firstname.lastname@example.org.
The Data Protection Officer (DPO) is a person who collaborates with the Data Controller.
7 – Exercise of rights by the interested party
Pursuant to articles 13, paragraph 2, letters (b) and d) 14, paragraph 2, letters c) and e), 15, 18, 19 and 21 of the Regulations, the interested party is informed that:
a) he has the right to ask the Data Controller, as the data controller, to access personal data, correct or delete them or limit their processing or to oppose their processing, in the cases provided for;
b) he has the right to data portability pursuant to art. 20 of the Regulation;
c) he has the right to lodge a complaint with the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority at www.garanteprivacy.it;
d) any corrections or cancellations or limitations of processing carried out at the request of the interested party - unless this proves impossible or involves a disproportionate effort - will be communicated by the Data Controller to each of the recipients to whom the personal data have been transmitted. The Data Controller may communicate these recipients to the interested party if the interested party requests it.
The exercise of rights is not subject to any formal constraints and is free.
The address for the exercise of rights pursuant to Articles 15-22 of the Regulation (also with reference to requests addressed to third parties to whom the data have been communicated with the specific consent of the interested party) is email@example.com.