INFORMATION PURSUANT TO ART. 13 OF EU REGULATION 679/2016
INFORMATION PURSUANT TO ART. 13 OF EU REGULATION 679/2016
Pursuant to EU Regulation 679/2016 containing the "General Data Protection Regulation" ("Regulation EU/679/2016"), SUSTAINEED SRL SOCIETA' BENEFIT (hereinafter "the Company"), in its capacity as Data. Controller, is required to provide information regarding the use of its customers personal data.
This information also refers to the processing carried out by the subjects who perform, on behalf of the Company, the tasks of a technical and organizational nature described in paragraph 1.
1. Purposes and methods of processing. Nature of the provision of data.
The personal data in the Company's possession are provided directly by the person to whom the personal data refer ("Data Subject"). Personal data may also be acquired by the Company in the exercise of its activity or by third parties.
Personal data are processed as part of the Company's normal business for the following purposes:
Personal data are processed as part of the Company's normal business for the following purposes:
a) purposes strictly connected and instrumental to the management of relations with the Data Subject.The provision of personal data necessary for these purposes is not mandatory, but refusal to provide them may make it impossible for the Company to provide the service itself, in relation to the relationship between the data and the service requested. Their processing does not require the consent of the data subject;b) fulfilment of obligations imposed by laws, regulations or EU legislation. The provision of personal data necessary for these purposes is mandatory and the related processing does not require the consent of the data subject;c) other purposes functional to the Company's activities such as:
• the survey of the degree of customer satisfaction on the quality of the services provided and on the activity carried out by the Company, carried out, also through specialized companies, through personal or telephone interviews, questionnaires, etc.;
• the promotion and sale of products and services of the Company or of third parties, carried out through letters, telephone, advertising material, automated communication systems, e-mail marketing, etc., including in the face of profiling personal data processing, such as "any form of automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular, to analyse or predict aspects relating to the professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of that natural person;
• the processing of studies and market research, carried out through personal or telephone interviews, questionnaires, sending information material on products and services provided by the Company, also in the context of profiling personal data processing, such as "any form of automated processing of personal data
consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning the professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of that natural person".
The provision of data necessary for the purposes referred to in letter c) above is not mandatory and their processing requires the consent of the interested party.
In relation to the purposes described, the processing of personal data is carried out by manual processing or electronic or automated tools, according to logics strictly related to the purposes themselves and in any case in such a way as to guarantee the confidentiality and security of personal data.
• the promotion and sale of products and services of the Company or of third parties, carried out through letters, telephone, advertising material, automated communication systems, e-mail marketing, etc., including in the face of profiling personal data processing, such as "any form of automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular, to analyse or predict aspects relating to the professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of that natural person;
• the processing of studies and market research, carried out through personal or telephone interviews, questionnaires, sending information material on products and services provided by the Company, also in the context of profiling personal data processing, such as "any form of automated processing of personal data
consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyse or predict aspects concerning the professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements of that natural person".
The provision of data necessary for the purposes referred to in letter c) above is not mandatory and their processing requires the consent of the interested party.
In relation to the purposes described, the processing of personal data is carried out by manual processing or electronic or automated tools, according to logics strictly related to the purposes themselves and in any case in such a way as to guarantee the confidentiality and security of personal data.
2. Categories of data subject to processing
In relation to the purposes described in paragraph 1 above, the Company and the other parties who perform, on behalf of or for the same, the tasks described in paragraph 1 above, process personal data relating to: Name and Surname, address and other elements of personal identification; tax code; email; telephone; identification details of banking relationships (e.g. IBAN); data relating to family and personal situations, data relating to the level of education and work of the Data Subject and, for companies, the personal data of the legal representative/attorney. In providing the services and activities indicated in this policy, the Company does not need to process personal data that art. 9 of the aforementioned Regulation defines as "particular" (such as, for example, personal data suitable for revealing the state of health, political and trade union opinions, religious beliefs, etc.).
3. Categories of subjects to whom the data may be communicated or who may become aware of it in their capacity as data processors or persons in charge of the processing.
In order to pursue the purposes described in paragraph 1, the Company needs to communicate the personal data of the Data Subjects to third parties, belonging to the following categories:
- persons who perform, on behalf of the Company, the technical or organisational tasks indicated in paragraph 1, including the accounting processing company;- Supervisory Authorities and Bodies, Judicial Authorities and in general, public or private entities with functions of public importance;- external companies and/or professionals used by the Company in the context of assistance and consultancy relationships;- third-party companies for processing for promotional purposes, where the Data Subject has given his/her consent;
The recipients of the communications described in this policy operate in total autonomy, as separate data controllers, or, in some cases, have been designated by the Company as data processors. Their list, which is constantly updated, is available from the Company.
Certain categories of persons, as processors, may access your personal data for the purpose of carrying out the tasks assigned to them. In particular, the Company has designated, as persons in charge of the processing of customer data, the employees of the Company itself, including system administrators, for the purpose of fulfilling the tasks assigned to them, the temporary workers used by the Company, and the interns.
Certain categories of persons, as processors, may access your personal data for the purpose of carrying out the tasks assigned to them. In particular, the Company has designated, as persons in charge of the processing of customer data, the employees of the Company itself, including system administrators, for the purpose of fulfilling the tasks assigned to them, the temporary workers used by the Company, and the interns.
Personal data may also become aware of personal data, on the occasion of the performance of the tasks assigned to them, by the subjects designated by the Company as Data Processors. The identity of the data processors designated by the Company can be ascertained in the manner indicated in paragraph 5 below.
The personal data processed by the Company and by the subjects who carry out the technical and organisational tasks described in paragraph 1 on its behalf are not disseminated.
The personal data processed by the Company and by the subjects who carry out the technical and organisational tasks described in paragraph 1 on its behalf are not disseminated.
4. Personal data retention periods.
Personal data will be processed for the entire duration of the contractual relationships established, and also subsequently, for the fulfilment of all legal obligations and in any case for a period not exceeding 10 years from the termination of the contractual relationship or beyond in the cases expressly required by law. In the
case of processing for promotional purposes, until the data subject's request to object to the sending and the latter's desire to opt out of receiving commercial communications.
case of processing for promotional purposes, until the data subject's request to object to the sending and the latter's desire to opt out of receiving commercial communications.
5. Rights of the Data Subject pursuant to art. 15 et seq. of EU Regulation 679/2016.
Please note that the legislation on the protection of personal data gives Data Subjects the opportunity to exercise specific rights. In particular, each interested party has:
a) the right of access, expressly provided for by art. 15 of Regulation 679/2016, i.e. the possibility of accessing all personal information concerning him;b) the right to rectification, expressly provided for by art. 16 of Regulation 679/2016, i.e. the possibility of obtaining the updating of inaccurate personal data concerning him/her without undue delay;c) the right to be forgotten, expressly provided for by art. 17 of Regulation 679/2016, consisting of the right to erasure of personal data concerning the data subject;d) the right to restriction of processing when one of the hypotheses provided for by art. 18 of Regulation 679/2016;e) the right to data portability, expressly provided for by art. 20 of Regulation 679/2016, i.e. the right to obtain one's data in an interoperable format and/or the right to have one's personal data transmitted to another data controller without hindrance from this Company;f) the right to withdraw consent at any time, expressly provided for by art. 7 of Regulation 679/2016;g) the right to lodge a complaint with the Guarantor in the event of a breach in the processing of data pursuant to art. 77 of Regulation 679/2016;h) the right to bring judicial redress in the event of unlawful data processing, including against the acts taken by the Guarantor pursuant to Article 78 of Regulation 679/2016;i) the right to object at any time to the processing of the data for the sending of commercial communications and advertising or direct sales material, by sending an email below amministrazione@sustaineed.it address, expressly requesting the cancellation of their names from the advertising list.
6. Data Controller and Data Processors.
The Data Controller of the personal data referred to in this information is SUSTAINEED SRL SOCIETA' BENEFIT, with registered office in Viale delle Nazioni 10, Verona (VR) - 37135 - Tel. 035.0341144.
Requests relating to the exercise of the rights referred to in art. 7 of the Code may be forwarded, in writing, also by e-mail sent to the amministrazione@sustaineed.it. address of the Data Controller.
Requests relating to the identity of the other Data Processors designated by SUSTAINEED SRL SOCIETA' BENEFIT as well as the requests referred to in paragraph 5 above may also be made orally.
The complete list of the Managers appointed by the Company may be requested by e-mail sent to the amministrazione@sustaineed.it. mailbox.
Personal data protection officer appointed pursuant to art. 38 of EU Regulation 679/2016 is SUSTAINEED SRL SOCIETA' BENEFIT which can be contacted to obtain any clarification regarding this information at 035.0341144 or by email at amministrazione@sustaineed.it.
Requests relating to the exercise of the rights referred to in art. 7 of the Code may be forwarded, in writing, also by e-mail sent to the amministrazione@sustaineed.it. address of the Data Controller.
Requests relating to the identity of the other Data Processors designated by SUSTAINEED SRL SOCIETA' BENEFIT as well as the requests referred to in paragraph 5 above may also be made orally.
The complete list of the Managers appointed by the Company may be requested by e-mail sent to the amministrazione@sustaineed.it. mailbox.
Personal data protection officer appointed pursuant to art. 38 of EU Regulation 679/2016 is SUSTAINEED SRL SOCIETA' BENEFIT which can be contacted to obtain any clarification regarding this information at 035.0341144 or by email at amministrazione@sustaineed.it.
SUSTAINEED SRL SOCIETA’ BENEFIT
COOKIE USE STATEMENT