Information provided pursuant to art. 13-14 of the GDPR (General Data Protection Regulation) 2016/679
We inform you that, for the establishment and execution of contractual relationships with you in progress, our organization is in possession of your data, also acquired verbally, directly or through third parties, qualified as personal by the European Regulation 2016/679 from (GDPR).
According to the indicated legislation, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
Pursuant to article 13 of the GDPR 2016/679, therefore, we provide you with the following information:
Nature of the data processed: We process your personal, fiscal and economic data necessary for the performance of existing or future contractual relationships with your company. as well as to achieve effective management of commercial relations.
The data are processed without your express consent (Article 24 letter a, b, c Privacy Code and Article 6 letter b, and GDPR), solely and exclusively for the following Service Purposes: fulfill pre-contractual and contractual obligations and tax arising from existing relationships with you; fulfill the obligations established by law, by a regulation, by community legislation or by an order of the Authority; exercise the rights of the owner, for example the right to defense in court.
We are not in possession of your data that can be qualified as particular or of a judicial nature (articles 9 and 10 of the GDPR).
Purpose of the processing and duration: Your data are processed for the entire duration of the contractual relationship and also subsequently, for contractual needs and related fulfillment of legal and tax obligations, and for an effective management of financial and commercial relationships, operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR.
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the Service Purposes.
Processing methods: The processing will be carried out both with manual and / or IT and telematic tools with organizational and processing logics strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data in compliance with organizational, physical and logical measures provided for by the provisions in force.
Obligation or right to provide data: As regards the data that we are obliged to know, in order to fulfill the obligations established by law, failure to provide them by you makes it impossible to establish or continue the relationship, within the limits of which such data are necessary for the execution of the same.
Scope of knowledge of your data: The following categories of subjects may become aware of your data, as managers or processors, appointed by the undersigned company, data controller: managers, directors and auditors; internal secretarial offices; accounting and billing staff; employees in the marketing of services; agents and representatives.
Communication and dissemination: Your data will not be disclosed by us to indeterminate subjects by making them available or consulted.
Your data may be communicated by us, as far as their respective and specific competence is concerned, to Bodies and in general to any public or private subject with respect to which there is an obligation for us (or faculty recognized by law or secondary legislation or community) or need for communication, as well as to our consultants, within the limits necessary to carry out their assignment at our organization, subject to our letter of appointment which imposes the duty of confidentiality and security.
Your rights: In your capacity as an interested party, you have the rights referred to in art. 7 of the Privacy Code and art. 15 GDPR and precisely the rights of: i. obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form; ii. obtain the indication: a) of the origin of the personal data; b) the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) the identity of the owner, manager and the representative appointed pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or agents; iii. obtain: a) the updating, rectification or integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including data which need not be kept for the purposes for which the data were collected or subsequently processed; c) the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is proves impossible or involves the use of means that are manifestly disproportionate to the protected right; iv. object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by email and / or through traditional marketing methods by telephone and / or paper mail. Where applicable, you will also have the rights referred to in Articles. 16-21 GDPR (Right of rectification, right to be forgotten, right to limitation of treatment, right to data portability, right of opposition), as well as the right of complaint to the Guarantor Authority. At any time you can obtain confirmation of the existence or not of personal data concerning you and the communication of such data and the purposes on which the processing is based. Furthermore, you can obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as the updating, rectification or, if you are interested in this, the integration of the data. You can oppose, for legitimate reasons, the treatment itself.
We kindly ask you to promptly report any changes to your personal data to the company's reference office in order to comply with art. 11, letter (c) of the aforementioned legislation, which requires that the data collected be accurate and, therefore, updated.
Owner and manager of the treatment:
The data controller is Rainbow Srl
based in Via Giomein 53 - 11028 Breuil-Cervinia (AO)
The Data Processor, to whom you can contact to exercise your rights and / or for any clarifications regarding the protection of personal data, can be reached at: firstname.lastname@example.org
The Data Controller