Privacy

INFORMATION PURSUANT TO ARTICLE 13 OF EUROPEAN REGULATION 2016/679

Personal data communicated to the Data Controller will be treated with correctness and transparency for lawful purposes and protecting the privacy and rights of the customer in compliance with the Community legislation on the protection of personal data (EU Regulation 2016/679).

The treatments will be carried out with the following purposes and methods:

DATA CONTROLLER

In accordance with the privacy legislation in force (Art.13 of European Regulation 2016/679 “GDPR”), the Data Controller is the company Elevante srl,Via Machiavelli 15, 34132 Trieste, Tel. +39 040 9751124, [email protected]

TYPE OF DATA PROCESSED

The Data Controller will process the personal data communicated by the Customer in the pre-contractual and contractual context for the purposes indicated in this statement.

PURPOSES AND LAWFUL BASIS OF PROCESSING

The data are processed by the Data Controller for the following purposes:

  1. to allow the Data Controller to respond to any requests for information and/or estimation sent by the Customer in the pre-contractual premises (legal basis: execution of the contract for which the Data Subject is aparty);
  2. to allow the Data Controller to process a request for the booking/purchase of a service from the Customer and all related and consequent activities (legal basis: execution of the contract for which the Data Subject is aparty);
  3. to allow the Data Controller to comply with legal and accounting obligations (legal basis: compliance with legal obligations);

TYPE OF DATA PROCESSED

The data that will be processed are those strictly necessary for the purposes indicated in the previous section.

DATA RECIPIENT AND EVENTUAL CATEGORIES OF DATA RECIPIENTS

Data communicated by the customer will be accessible to employees and collaborators of the Controller;

The data will not be disseminated and will be treated with organizational and logical methods related to the aforementioned purposes.

METHODS OF DATA PROCESSING.

The processing of data by the competent corporate structures will take place through appropriate tools to ensure security and confidentiality and can be carried out, as well as with analogical tools, also through automated tools (both IT and telematics tools) to store, manage and transmit data themselves.

The treatment and storage of personal data will be carried out on servers located within the EU, in the headquarters of the Data Controller and /or third-party companies in charge and no transfer will be made of them outside the European Union.

DATA RETENTION POLICY

Personal data communicated by the customer, object of treatment for the above purposes, will be retained until the end of the pre-contractual negotiations and, in case of good end of the aforementioned negotiations, for the duration of the contract and, afterwards, for the duration of 10 years as required by the Civil Code on the conservation of correspondence and by the law on the conservation of fiscal documents.

RIGHTS OF DATA SUBJECTS

In its quality of Subject, the Customer has the possibility to exercise specific rights:

  1. to access personal data concerning him or her (once he/she has received confirmation that his/her data are subjected to treatment by the Data Controller);
  2. of rectification and integration of data pertaining to him or her;
  3. to obtain the erasure of the data pertaining to him or her;
  4. to obtain the processing treatment restriction of the data pertaining to him or her;
  5. to receive the data communicated to the Data Controller in a structured format of common use, so that they can be sent to another Data Controller;
  6. to object to the processing of his/her personal data if there are reasons related to his personal circumstances;
  7. not to be subjected to an automated decision-making process, including profiling, which produces legal effects concerning him/her;
  8. to obtain communication in the event that his/her data are subject to a serious violation;
  9. to withdraw the consent at anytime;
  10. to lodge a complaint with a supervisory authority (Data Protection Authority).

The above rights can be exercised by sending a request without a formal procedure to the Data Controller at the address reported in Art.1.

NATURE OF PROVIDING DATA AND CONSEQUENCES OF REFUSING TO ANSWER.

The communication of data for the above purposes is necessary and mandatory; in fact, in the absence of the aforementioned data, it will not be possible to proceed with the provision of the services described in points 3.

The consent to the use of the email for the period of 60 months is optional. The Customer can therefore decide not to give such consent or to revoke the consent given, according to the procedures set out in point 8, without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation.

I declare I have receiveRIGHTS OF DATAd information pursuant to Art. 13 of European Regulation 2016/679 by Elevante srl