Privacy policy in accordance with RE 679/2016
Dear Sir/Madam,
We wish to inform you that RE 679/2016 (“European Regulation on the Protection of Personal Data”) provides for the protection of persons and other subjects with regard to the processing of personal data. According to the indicated legislation, this processing will be based on the principles of fairness, lawfulness and transparency and protection of your privacy and rights. In accordance with Article 13 of RE 679/2016, therefore, we inform you that:
Purpose of processing:
The data you provide will be processed for the following purposes.
- administrative, accounting, tax, social security, and other activities related and instrumental to the establishment of relationship with customers, suppliers, collaborators, etc.
- Personal data will also be processed for sending commercial and promotional information, direct sales, services and events (hereinafter collectively referred to as “marketing activities”) of Cid srl, and for marketing activities. The processing for marketing purposes will take place through traditional means (paper mail) and through the use of distance communication techniques, such as telephone, e-mail, SMS. The provision of data for this purpose is optional and the processing requires the customer’s consent. The consent given for sending commercial and promotional communications through automated tools as per RE 679/2016 also extends to traditional contact methods.
Legal basis for processing:
The legal basis for the processing of your personal data is based on the Constitution regarding the right to information and the fulfillment of contractual obligations.
Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in the processing of data is given by having to respect and honor the contractual obligations signed between the parties. Pursuant to Article 6, the lawfulness of processing is based on the manifestly expressed consent of the data subject, documented in writing.
Retention Times
The data you provide, will be kept for as long as necessary, which unless otherwise provided by law, may be kept up to a maximum of 5 years after the services you have requested have been performed.
Existence of an automated decision-making process
There is no automated decision-making process, with the exception of the internal subscription administrative accounting system. The data you provide will not be used for digital and automated profiling.
Data transfer to third countries
The Data Controller will not transfer your personal data to a third country or international organization
Data Processing of Minors
No data from children under the age of 18 are collected and processed
Method of treatment:
The same data will be processed, in compliance with the necessary security and confidentiality, through the following methods: collection of data from the data subject, collected and recorded for specific, explicit and legitimate purposes and used in further processing operations in terms compatible with these purposes, The data will be processed mainly with electronic and computer tools and stored both on computer media and on paper media and on any other type of suitable media, in compliance with the provisions of RE 679/2016 on adequate security measures. The processing will be carried out by specially appointed individuals, in the following ways: with computer and manual supports.
Compulsory or optional nature of providing data and consequences of refusal to respond:
- The provision of data is compulsory in that only data essential for access to online specials, formalization of quotations, offers, agreements and commercial contracts are requested; refusal, even partial, to provide such data could result in failure or partial performance of the agreement and/or contract.
- Optional in case of communication, direct marketing activities and profiling. No personal data are transferred to third parties for marketing activities.
Disclosure of personal data to third parties:
They may become aware of the data in question in their capacity as our managers or appointed collaborators. We also inform you that the data referring to you may then be communicated for related processing (always in compliance with the aforementioned security and confidentiality measures) to:
- Ente Diocese of Venice;
- Gente Veneta speakers for subscription renewal;
- Public agencies in charge (Social Security agencies, Ministry of Finance. etc.).
- Public and private parties who can access the data by virtue of provisions of the law, regulations or EU legislation, within the limits provided by these rules;
- Professional firms (Accountants, Consultants, etc.).
- Fisc (Italian Federation of Catholic Weeklies) only anonymous data for statistical purposes
Owner and Data Processor:
The owner as well as person in charge of the treatment is: CID srl Dorsoduro 1 – 30123 Venice – Tel. 041959999 P. IVA: 02341300271 info@genteveneta.it
(DPO Appointment)
Exercise of rights by the data subject
Pursuant to Articles 13 (2) (b) and (d), 15, 18, 19 and 21 of the Regulations, the data subject is informed that:
(a) he/she has the right to request from the Data Controller access to, rectification or erasure of, or restriction of, personal data concerning him/her or to object to their processing in the cases provided for;
(b) he has the right to file a complaint with the Data Protection Authority, following the procedures and directions published on the Authority’s official website at http://www.garanteprivacy.it;
(c) any rectification or erasure or restriction of processing made at the request of the data subject – unless this proves impossible or involves a disproportionate effort – will be communicated by the Controller to each of the recipients to whom the personal data have been transmitted within 10 to 14 working days. The Controller may notify the data subject of these recipients if the data subject so requests.
The exercise of rights is not subject to any formal constraints and is free of charge. For utility, Articles 15 to 23 of the Regulations can be found at this link: http://eur-lex.europa.eu/legal-content/IT/TXT/HTML/?uri=CELEX:32016R0679&from=IT