Information provided pursuant to art. 13 of Regulation (EU) 2016/679 on the protection of personal data (RGPD) for the processing of data and request for consent
This Information is provided to inform you of the processing of your personal data.
Index
- Identity and contact details of the Data Controller 1
- Type of data being processed 1
- Origin of personal data 1
- Purpose and legal basis of the processing 1
- Methods of data processing 2
- Place of treatment 2
- Recipients of personal data and dissemination 2
- Data transfer to non-EU countries 2
- Data retention period 2
- Rights of the interested party 2
- Communication and provision of data 3
Expression of consent (articles 6 and 7 of EU Regulation no. 679/2016): – [tick the box corresponding to the choice made]: 3
Identity and contact details of the Owner
The owner of any treatment carried out by Soc. Coop. Samarcanda with legal and administrative headquarters in Via della Magliana Nuova 302 is Mr. Fabrizio Finamore as pro-tempore president.
The data controller guarantees the security, confidentiality and protection of the personal data in his possession, at any stage of the processing process.
- Type of data being processed
The Data Controller will process the following personal data for the purposes referred to in point 4: name, surname and e-mail address. - Origin of personal data
The personal data that Samarcanda processes are collected from the interested party. - Purpose and legal basis of the processing
Your personal data will be processed for the following purposes:
A. market research and customer satisfaction surveys relating to the products and services of the undersigned company, as well as other associated and/or controlled companies.
The provision of data is optional. For the treatment referred to in letter A. it is specified that the legal basis is represented by the express consent.
Failure to consent to the processing of the same for the purposes referred to in letter A. will make it impossible to provide the promotional services set out in letter A..
We will not use personal data for different and additional purposes to those described in this information, except by informing you in advance and, where necessary, obtaining your consent. - Methods of data processing
Personal data will be processed with IT tools and/or through manual processing for the time necessary to achieve the purposes for which they were collected for the definition of data retention, please refer to art. 9. Said treatment will include – in compliance with the principles of correctness, lawfulness, transparency and protection of confidentiality – the operations strictly necessary for the purpose.
Furthermore, it should be noted that your personal data will not be subjected to profiling, nor subjected to any fully automated decision-making process. - Place of treatment
The data are currently processed and archived at the registered office located in Via della Magliana Nuova 320, and are only handled by technical or administrative personnel, expressly authorized and trained for this purpose, with logic strictly related to the purposes for which the data are collected and, in any case, in order to guarantee its security and confidentiality in compliance with the provisions of EU Reg. 2016/679 and Legislative Decree 196/03, as amended by Legislative Decree 101/18. - Recipients of personal data and dissemination
The personal data provided may be communicated to suitably appointed recipients who will process the data as data processors and/or as authorized persons.
The Data Controller does not communicate any of the data subjects’ information to third parties without their consent, except where required by law. In any case, the dissemination of the personal data processed is excluded. The complete list of data processors, joint controllers and persons in charge of processing personal data can be requested by sending a specific request to the e-mail address: privacy@samarcanda.it. - Data transfer to non-EU countries
Your Personal Data is processed by the Data Controller within the territory of the European Union and is not disclosed. - Data Retention Period
The personal data provided in reference to point 4, letter A., will be processed according to the methods set out in point 5 for 2 (two) years from the time of issue of the specific and express consent to the processing, unless revoked.
Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorized access.
It should be noted that also for the purposes of the legislation on anti-money laundering, the data relating to services falling within the aforementioned legislative framework will, as required by law, be kept for ten years from the completion of the service.
The Opposition to the processing can be made by the interested party in accordance with the provisions of point 10 of this information. - Rights of the interested party
The user (pursuant to articles 15, 16, 17, 18, 19, 20, 21 and 22 of EU Reg. 2016/679) may, at any time, exercise the rights indicated below.
to. Withdrawal of consent: the interested party has the right to withdraw his consent at any time. The withdrawal of consent does not affect the lawfulness of the treatment based on the consent before the withdrawal;
b. Access to personal data: obtain confirmation whether or not data concerning him is being processed and, if so, access to the following information: purposes, data categories, recipients, retention period, the right to lodge a complaint with a supervisory authority, the right to request rectification or cancellation or limitation of treatment or opposition to the treatment itself as well as the existence of an automated decision-making process;
c. Request for rectification or cancellation of the same or limitation of the treatments that concern him; “limitation” means the marking of stored data with the aim of limiting its processing in the future;
d. Opposition to processing: object for reasons related to your particular situation to the processing of data for the execution of a task of public interest or for the pursuit of a legitimate interest of the Data Controller;
And. Data portability: in the case of automated processing carried out on the basis of consent or in execution of a contract, to receive the data concerning him in a structured format, commonly used and readable by an automatic device;
f. Propose a complaint pursuant to art. 77 GDPR to the competent supervisory authority based on your habitual residence, place of work or place of infringement of your rights; for Italy, the Guarantor for the protection of personal data is competent, who can be contacted via the contact details indicated on the website http://www.garanteprivacy.it.
The aforementioned rights may be exercised by sending a specific request through the contact channels indicated in point 1 of this information. - Communication and provision of data
The provision of data is mandatory for all that is required by legal and contractual obligations and therefore any refusal to supply them in whole or in part may make it impossible for Samarcanda to execute the contract or to correctly carry out all the required obligations at point 4. - Expression of consent (articles 6 and 7 of EU Regulation no. 679/2016): – [tick the box corresponding to the choice made]:
