Information provided pursuant to Articles 12 et seq. of Regulation (EU) 2016/679 on the protection of personal data (GDPR)
Foreword – The GDPR provides for the protection of persons and other subjects with regard to the processing of personal data. According to this legislation, the processing of personal data relating to a person, specifically to be referred to as a ‘data subject’, is governed by the principles of fairness, lawfulness and transparency, as well as the protection of the data subject’s privacy and rights.Processing of data relating to legal persons does not fall within the scope of the data protection rules of the Regulation. For the purposes of clarity and transparency towards its Customers and Suppliers, Centro Pietra Living S.r.l. Unipersonale also makes this information notice available to legal entities, describing the methods and purposes of all processing operations that the Company carries out or is entitled to carry out on personal data.
According to the GDPR and the Italian legislation, since this information relates to you, it must be qualified as ‘personal data’ and must therefore benefit from the protection provided by said legislation. Specifically, according to the aforementioned legislation, you are the data subject who benefits from the rights to protection of your personal data.1. DATA CONTROLLER
Hereby the company CENTRO PIETRA LIVING S.r.l. UNIPERSONALE with registered office in Ospedaletto (TN) Via Nazionale n. 5 c.f. and p.i. 02424520225, e-mail: info@centropietraliving.it intends to inform you pursuant to art. 13 of the EU Regulation 2016/679 (hereinafter referred to as the “Regulation” or “Applicable Legislation”), that GUANXI is the OWNER of the PERSONAL DATA that you will provide and that it will proceed to process them for the purposes and in the manner set out below. You may contact the “Data Controller” at any time for information and/or to report any problems.2. PURPOSE OF THE PROCESSING, LEGAL BASIS AND PERIOD OF DATA STORAGE
| Purpose | Type of data | Legal basis | Period of storage |
| 1.Pre-contractual/contractualProviding information on marketed products and services, if requested by the data subject; performance of existing contractual relationships. | Personal data and contact details; data necessary for the execution of the contractual relationship | Execution of a contract to which you are party or pre-contractual measures taken at the request of the person concerned; fulfilment of legal obligations. | In accordance with the law |
| 2. Support of purchased products and services. | Personal data, contact details, personal data in connection with the contracted product/service. | Execution of a contract to which you are party (to resolve faults and malfunctions). Legitimate interest (for service improvement analysis). | Five years since last interaction |
| 3. claim, exercise or defend rights in judicial proceedings | Personal data and contact details, data relating to the execution of the contract | Legitimate interest (judicial protection)Art. 6 co 1 lett. f)GDPR. | For as long as necessary for the exercise of rights in judicial proceedings. |
| 4. Marketing to existing customersSending communications relating to contracted products/services and/or similar products/services to those already contracted. | Personal data and contact details; data relating to the company they belong to and the position they hold | Legitimate interest Art. 6 co 1 lett. f) GDPR. | Until consent is revoked. |
3. OBLIGATORYITY OF THE PROVISION OF DATA
The data subject must provide the Companies with the data necessary for the performance of the contractual relationship, as well as the data necessary to fulfil the obligations provided for by laws, regulations, EU rules, or by provisions of Authorities legitimated to do so by law and by supervisory and control bodies (referred to purposes 1, 2 and 3 above). Data that are not essential for the performance of the contractual relationship are qualified and considered supplementary and their provision by the data subject, if requested, is optional and subject to consent. The consent provided may be revoked by the data subject at any time by sending an e-mail to: info@centropietraliving.it. Such revocation shall in no way affect the lawfulness of the processing based on the consents given before the revocation.4. METHODS OF DATA PROCESSING
According to and for the purposes of Articles 12 et seq. of the Regulation, we wish to inform you that the personal data that you communicate to us will be recorded, processed and stored in our archives, on paper and electronically, in compliance with the appropriate technical and organisational measures referred to in Article 32 of the Regulation. The processing of your personal data may consist of any operation or set of operations among those indicated in Article 4, paragraph 1, point 2 of the Regulation. Personal data will be processed using instruments and procedures that guarantee security and confidentiality and may be carried out, directly and/or through delegated third parties, either manually on paper or with the aid of computerised or electronic means. For the purposes of the proper management of the relationship and the fulfilment of legal obligations, the data may be included in the Controller’s own internal documentation and, if necessary, in the records and registers required by law. The data shall not be subject to profiling.5. RECIPIENTS OF PERSONAL DATA
The personal data of the data subject may be communicated to and processed by external parties operating as autonomous data controllers pursuant to Articles 4 and 24 GDPR, such as, by way of example, authorities and supervisory and control bodies and, in general, public or private parties entitled to request the data and/or parties operating as data processors pursuant to Article 28 GDPR), such as, by way of example, consulting companies and/or professional firms and/or professionals, for example legal, tax and insurance companies. The data may also be communicated by the Companies to their commercial partners/dealers for the performance of activities connected to the execution of the contract or for the performance – by the same – of commercial actions, subject to the express consent of the data subject.6. DATA TRANSFER TO NON-EU COUNTRIES
The data provided by the data subject will only be processed in countries within the European Union. Should the personal data of the data subject be processed in a non-EU country, the rights attributed to the latter by EU law will be guaranteed and the data subject will be promptly notified.7. RIGHTS OF THE INTERESTED PARTY
Pursuant to Articles 15 et seq. of the GDPR, the data subject may exercise the following rights:- access: confirmation as to whether or not personal data relating to the data subject are being processed and the right to access them; requests that are manifestly unfounded, excessive or repetitive cannot be answered
- correction: to correct/obtain the correction of personal data if they are incorrect or obsolete and to complete them if they are incomplete;
- deletion/oblivion: to obtain, in certain cases, the deletion of the personal data provided; this is not an absolute right, as companies may have legitimate or legal reasons for retaining them;
- limitation: the data will be archived, but may not be processed or further processed, in the cases provided for by law;
- portability: moving, copying or transferring data from the Companies’ databases to third parties. This applies only to data provided by the data subject for the performance of a contract or for which express consent has been given and processing is carried out by automated means;
- opposition to direct marketing;
- revocation of consent at any time, if the processing is based on consent.
According to Art. 2-undicies of Legislative Decree. 196/2003, the exercise of the rights of the data subject may be delayed, restricted or excluded, by reasoned notice given without delay, unless such notice is likely to jeopardise the purpose of the restriction, for such time and to the extent that this constitutes a necessary and proportionate measure, having regard to the fundamental rights and legitimate interests of the data subject, in order to safeguard the interests referred to in subsection 1(a) (protected money laundering interests), (e) (the carrying out of defensive investigations or the exercise of a right in court) and (f) (the confidentiality of the identity of the employee who reports offences of which he has become aware by reason of his office). In such cases, the rights of the person concerned may also be exercised through the Garante in the manner set out in Article 160 of the same Decree. In such cases, the Garante will inform the person concerned that it has carried out all the necessary checks or that it has conducted a review, as well as of the right of the person concerned to lodge a judicial appeal.
Centro Pietra Living S.r.l. Unipersonale