PRIVACY INFORMATION OF 28/05/2018
Information pursuant to and for the purposes of art. 13-14, EU Reg. 2016/679
(European regulation on the protection of personal data)
 

Dear Sir / Madam
We wish to inform you that EU Reg. 2016/679 ("European regulation on the protection of personal data") provides for the protection of persons and other subjects and respect for the processing of personal data.
Pursuant to articles 13 and 14, therefore, we provide you with the following information:

1. Purpose, legal basis of the processing for which the data are intended
The treatment will be performed on the basis of art. 6 (paragraphs a / b / c)
The processing of the personal data you provide is aimed at:
1. Fulfillment of requests for products and services
2. Fulfillment of legal and tax obligations
3. Sending information about our business

2. Source from which personal data comes and purpose

Only the data you provide will be used and stored

3. Processing methods
In relation to the aforementioned purposes, your data are subject to computer and paper processing. The processing operations are implemented in such a way as to guarantee the logical, physical security and confidentiality of your data.

4. Nature of personal data
Your personal data relating to the performance of the service requested by you are processed.
During the provision of the service it may be necessary to acquire and carry out processing operations of your data. You are asked to express your consent in writing.

5. Scope of communication and dissemination of data
Your data may be disclosed to:
• all subjects whose right of access to such data is recognized by virtue of regulatory provisions;
• to our collaborators, employees, as part of their duties;

6. Retention period.
Your data will be kept as long as you are our customer and for any subsequent periods only to comply with legislative or tax obligations

7. Rights of the interested party
7.1 Art. 15 (right of access), 16 (right of rectification) of EU Reg. 2016/679

The interested party has the right to obtain from the data controller confirmation that the processing of personal data concerning him or her is in progress and in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations;
d) the retention period of the personal data envisaged or, if this is not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the data controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.

7.2 Right pursuant to art. 17 of EU Reg. 2016/679 - right to cancellation ("right to be forgotten")
The data subject has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay, if one of the following reasons exists: a) the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the processing ;
c) the interested party opposes the processing pursuant to Article 21, paragraph 1, and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21, paragraph 2;
d) the personal data have been unlawfully processed;
e) the personal data must be deleted to fulfill a legal obligation under the law of the Union or of the Member State to which the data controller is subject;
f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1 of EU Reg. 2016/679

7.3 Right referred to in art. 18 Right to limitation of treatment
The interested party has the right to obtain from the data controller the limitation of the processing when one of the following hypotheses occurs:
a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;
c) although the data controller no longer needs it for processing purposes, the personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) the interested party opposed the processing pursuant to article 21, paragraph 1, EU Reg. 2016/679 pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

7.4 Right referred to in Article 20 Right to data portability
The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller

8. Withdrawal of consent to treatment
The interested party has the right to withdraw consent to the processing of your personal data by contacting the Data Controller at the addresses indicated below.
The Owner is: CTA Srl The Manager is: Angela Albizzati