PERSONAL DATA PROCESSING POLICY
Agostinelli S.r.l., a Company with legal office at Via E. Fermi 75 – 36028 Rossano Veneto, Vicenza (hereinafter referred to as “Controller”), hereby informs you in its capacity of Data Controller that your data shall be processed in the manner and for the purposes described as follows, pursuant to Art. 13 of the Regulation (EU) 2016/679 (hereinafter referred to as “GDPR”).
1) Data subject to processing.
The Controller processes personal data, i.e. identification data communicated by you, such as first and last name, company name, email address, etc. (hereinafter also referred to as “data”).
2) Legal basis and purpose of the processing.
The personal data communicated shall only be processed to meet specific requests submitted by filling the contact form provided.
The submission of data for the foregoing purpose is necessary to meet your requests, otherwise the required information cannot be provided.
3) Processing methods and retention period.
The processing of your personal data is carried out by means of the operations described in Art. 4, paragraph 2) GDPR and more precisely: collection, recording, organization, storage, consultation, adaptation, alteration, selection, retrieval, use, restriction, disclosure, erasure and destruction of data. Your personal data are processed in both printed and electronic/digital format.
The Controller shall process the personal data for the time required to fulfill the purpose stated in paragraph 2) above, without prejudice to the Controller’s need to store data for longer periods in order to establish, exercise or defend a legal claim, or whenever judicial authorities perform their own functions.
4) Categories of recipients of the personal data.
In any case according to the restrictions and purposes set forth in the previous paragraphs, your personal data may be disclosed to the Data Processors and/or Sub-processors appointed (if any) and to individuals acting under the Controller’s, Processors’ and Sub-processors’ authority (i.e. properly trained employees and internal partners). Personal data may also be submitted to public agencies, institutions, and entities to whom the data shall be disclosed in order to fulfill an obligation required by law, regulation or EU legislation or to execute an order from the judicial authority, as well as to any other third parties as may be specifically required by law, or even when the disclosure of data shall become necessary to defend the Controller’s interests before the court.
In any case, you may request to be up-to-date with data pertaining to the Processors and the Sub-processors appointed, if any, by submitting a written request to the contact addresses listed in paragraph 6) below.
5) Rights of the Data Subject.
As Data Subject, you may claim the rights set forth in Articles 15, 16, 17, 18, 20, and 21 of the GDPR, and more precisely the rights to:
a) Access: the Data Subject has the right to obtain from the Data Controller confirmation as to whether personal data concerning him/her are being processed and, where that is the case, access to the personal data and the information concerning the purposes of the processing, the categories of personal data being processed, the recipients or categories of recipients, the retention period (if applicable), the right to rectification, erasure, restriction of processing, object, and lodge a complaint with a supervisory authority;
b) Rectification: the Data Subject has the right to obtain from the Data Controller the rectification of inaccurate personal data concerning him/her without undue delay;
c) Erasure (“Right to be forgotten”): the Data Subject has the right to obtain from the Data Controller the erasure of personal data concerning him/her without undue delay in the cases provided by Art. 17 GDPR;
d) Restriction of processing: the Data Subject has the right to obtain from the Data Controller restriction of processing personal data concerning him/her when the events set forth in Art. 18 GDPR apply;
e) Data portability: the Data Subject has the right to receive the personal data concerning him/her, which he/she has provided to a Controller, in a structured, commonly used and machine-readable format, as well as the right to transmit those data to another Data Controller without hindrance from the Controller to which the personal data have been originally provided in the cases provided by Art. 20 GDPR;
f) Object: the Data Subject has the right to object at any time to the processing of personal data concerning him/her in the cases provided by Art. 21 GDPR;
g) Withdrawal of consent: the data subject has the right to withdraw his/her consent given to the Controller at any time and the withdrawal of consent shall not affect the lawfulness of the processing based on consent given before its withdrawal;
h) Lodge a complaint with a supervisory authority (namely the Italian Data Protection Authority – “Garante della Privacy”)
6) Ways to exercise your rights.
You may exercise the above-mentioned rights at any time by sending either:
- a registered letter addressed to Agostinelli S.r.l., Via E. Fermi 75 – 36028 Rossano Veneto, Vicenza; or
- an email to the following address: firstname.lastname@example.org.