Re: Privacy policy on the processing of personal data made pursuant to Art. 13 Reg. 2016/679/EU.
This is to inform you that our company carries out the processing of your personal data. Processing is carried out in accordance with the criteria set forth in the European Data Protection Regulation, Reg. 2016/679/EU (hereinafter G.D.P.R.) and any other national legislative text, measure or authorization of the Competent Authority related thereto. According to the indicated regulations, the processing must be based on the principles of fairness, lawfulness and transparency and the protection of your privacy and rights.
1) The data controller is the company S.i.r.i. S.r.l., in the person of its temporary legal representative, Mr. Giorgio Trevisi, with registered office at Via Raimondo Dalla Costa, 44/46 – 41122 Modena (MO), phone no.: 059313191, e-mail: g.trevisi@siri.mo.it.
2) The gathered data will be used for the following purpose:
- Sending requested information for which express consent is not required (Art. 6.1(a), G.D.P.R.);
- Commercial marketing for which express consent is required (Art. 6.1(a) and (f), G.D.P.R.).
3) Procedures: personal data are processed by the controller and duly appointed officers for the proper fulfilment of the purpose indicated in point 2) by means of electronic tools and paper archives, as well as with the use of security measures to ensure the confidentiality of personal data and to prevent undue access to unauthorized parties.
4) Communication: data may be communicated to duly appointed internal and external parties who carry out the activities on behalf of the data controller.
Disclosure to third countries outside the E.U. and dissemination (e.g., social networks, websites, etc.) is not envisaged. The data controller does not use solely automated processes to achieve the purpose set forth in this policy and does not engage in profiling.
5) The Data Controller will process personal data for the time strictly necessary to achieve the above purposes and in any case for no longer than 2 years after the termination of the relationship for the stated Purposes.
6) The data subject shall have the right to request from the data controller access to or amendment or cancellation of its personal data or restriction of the processing concerning it, or the right to oppose their processing, as well as the right to request portability of the data.
The request can be made by e-mail or by fax or registered mail by specifying: “request from the data subject” by specifying in the request the right the data subject wishes to exercise (cancellation, amendment, portability, oblivion), along with a valid e-mail/certified e-mail address to which to deliver the acknowledgement.
The data controller or, anyone appointed by the same, will proceed to fulfil the request within 30 days from the date of receipt. Should the response be complex, the time could be extended to an additional 30 days, subject to timely notice to the same data subject.
Should the data subject deem it appropriate to assert its rights, it is entitled to file a claim with the competent supervisory authority, corresponding to the National Privacy Guarantor, located at Piazza Venezia, 11 – 00187 Rome, protocollo@gpdp.it.
