INFORMATION PURSUANT TO ART. 13 and ss. OF EU REGULATION 2016/679 (Last Upd. May 2018)
This information also respects and fully complies with Recommendation no. 2/2001 that the European authorities for the protection of personal data adopted on 17 May 2001 to identify certain minimum requirements for the collection of personal data online and, in particular, the manner, timing and nature of the information that data controllers must provide users when they connect to web pages, regardless of the purpose of the link. It is specified that the consent mechanisms will be obvious, brief and easily understandable; if the original conditions for which consent was sought were to change, for example if the purpose of data processing changed, additional consent will be required under EU Regulation 2016/679. According to the rules of the Regulation, the processing carried out by the data controller will be based on the principles of lawfulness, correctness, transparency, limitation of purpose and storage, data minimization, accuracy, integrity and confidentiality. Users/visitors must read this information carefully before submitting any type of personal information and/or filling in any electronic form on the site itself.
Pursuant to Art. 13 et seq. of EU Regulation 2016/679 on the processing of personal data, the data controller informs that it will process your personal data in compliance with the aforementioned legislation; in relation to the aforementioned processing it also provides the following information:
1. DATA CONTROLLER
The data controller is Service OnTime S.r.l. Via Arnolfo 32, 50121 FLORENCE (IT), in the person of its legal representative,
email : firstname.lastname@example.org
Phone +39 055 033 4458
2. PURPOSE, LEGAL BASIS AND NATURE OF THE CONFERMENT
Your personal data will be processed for the following purposes:
- Website surfing
The processing is necessary for the pursuit of the legitimate interests of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject that require the protection of personal data (ex art. 6, par. 1, lette f GDPR and recital 47) do not prevail, taking into account the reasonable expectations of the data subject based on his/her relationship with the data controller. Activities strictly necessary for the operation of the site and the provision of the navigation service on the platform. The conferment is necessary for the navigation of the website.
- Subscription to the newsletter or request to be contacted by the data subject
The legal basis is the consent to the processing of their personal data (ex6, par. 1, lett. a GDPR). The provision of data is optional and does not preclude the processing for the other purposes of processing.
3. METHODS OF PROCESSING
In relation to the purposes referred to in the preceding point, the processing of personal data is done in accordance with the principles of confidentiality, fairness, lawfulness and transparency, through manual, computer and telematic tools, with logic closely related to the purposes also through the use of fax, telephone, cell phone, email or other techniques of distance communication, personal data will be managed by implementing appropriate technical and organizational measures to ensure a level of security appropriate to the risk under Article 32 RGPD.
4. DATA RECEIVERS
The processed data will not be disclosed to third parties. The following may become aware of your data, in relation to the processing purposes outlined above: a) persons who can access the data under the provisions of the law provided by the law of the European Union or by that of the Member State to which the data controller is subject; b) employees, specifically appointed pursuant to art. 29 GDPR; c) persons who carry out the processing as data processors ex art. 28 GDPR on behalf of the controller. The list of those responsible is available at the headquarters of the owner and the interested party can request it to one of the contacts in point 1 of the information.
5. DATA TRANSFER
Your data will not be transferred to third countries, i.e. outside the European Union. It is in any case understood that the owner, if necessary, will have the right to move the location of the servers in Italy and/or European Union and/or non-EU countries. In this case, the owner assures as of now that the transfer of data outside the EU will take place in accordance with the applicable provisions of law by entering into agreements, if necessary, to ensure an adequate level of protection and / or adopting the standard contractual clauses provided by the European Commission.
6. DATA RETENTION PERIOD
Personal data will be processed by the data controller only for as long as is necessary for the pursuit of the purposes for which they were collected, specifically, your data will be kept until you revoke your consent. In particular, personal data will be processed for a period of time equal to the minimum necessary, as indicated by Recital 39 of EU Reg. 2016/679, without prejudice to an additional storage period that may be imposed by law, as also provided by Recital 65 of EU Reg. 2016/679.
7. RIGHTS OF THE INTERESTED PARTY
With regard to the data itself, the Data Subject, or a person delegated in writing, may exercise the following rights: a) the right of access, expressly provided for by art. 15 of EU Reg. 2016/679, i.e. the possibility to access all information of a personal nature concerning him/her; b) the right of rectification, expressly provided for by art. 16 of EU Reg. EU 2016/679, i.e. the possibility to obtain the updating of inaccurate personal data concerning him/her without justified delay; c) the right to be forgotten, expressly provided for by art. 17 of EU Reg. 2016/679, consisting in the right to the deletion of personal data concerning the direct data subject; d) the right to restriction of processing when one of the hypotheses provided for by art. 18 of EU Reg. 2016/679 applies; e) the right to receive certification that the operations carried out pursuant to Articles 16, 17 and 18 Reg. EU 2016/679 have been brought to the attention of those to whom the data have been communicated, unless this proves impossible or involves a disproportionate effort, pursuant to art. 19 EU Reg. 2016/679; f) the right to data portability, expressly provided for by art. 20 of Reg. EU 2016/679, i.e., the right to obtain in an interoperable format your data and/or the right to have your personal data transmitted to another data controller without hindrance; g) the right to object to the processing of personal data, expressly provided for by Art. 21 of EU Reg. 2016/679; h) the right to withdraw consent at any time, as set forth in Art. 7 of EU Reg. 2016/679; i) the right to lodge a complaint with a supervisory authority, pursuant to Art. 77 of EU Reg. 2016/679; l) the right to file a judicial appeal pursuant to Art. 79 of EU Reg. 2016/679. To exercise your rights, you may contact the data controller at the contact points indicated in this notice.
The data controller remains available for any need for clarification and, should the processing be modified with respect to that described in this document, the data controller will provide an updated information notice.
4. DATA RECEIVERS