Information on the processing of personal data
The company La Maga S.r.l., based at Via Sebastiano Caboto no. 7 – 30173 – Venice-Mestre (VE) (hereinafter, “Data Controller”), as Data Controller, informs you pursuant to Art. 13 EU Regulation no. 2016/679 (hereinafter, “GDPR”) that your data will be processed in the following manner and for the following purposes.
1) Subject of Treatment.
The Data Controller processes personal – identifying data (e.g., first name, last name, social security number, date and place of birth, address, telephone, e-mail), hereafter also just “data,” that you may have provided.
2) Legal basis and purpose of processing.
The processing of personal data provided may take place:
1. to execute any contractual obligations, as well as to fulfill any legal obligations to which the Owner is subject. Such processing is necessary to fulfill the obligations undertaken by the Controller and arising from the commercial contract that may exist between you and La Maga S.r.l., as well as to fulfill the resulting legal obligations.
2. to respond to specific requests, received through the completion of special contact “forms”.
The provision of data for the purposes set forth in paras. 1. and 2. is required; without it, it will not be possible to execute the contract or provide the requested information.
3) Method of processing and storage period.
The processing of your personal data is carried out by means of the operations specified in Art. 4 n. 2) GDPR and namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, use, restriction, communication, deletion and destruction of data. Your personal data are subject to both paper and electronic/digital processing.
The Holder will process personal data, because of the points 1. and 2. of the preceding paragraph, for the time necessary to fulfill the above purposes, without prejudice to the Holder’s need to store for longer periods related to the need to ascertain, exercise or defend a right in court or, whenever judicial authorities exercise their functions.
4) Categories of recipients of personal data.
Also within the limits and for the purposes referred to in paragraph 2), in order to give specific execution and for reasons functional to the same, your personal data may possibly be communicated, as well as to the data processors and/or sub-processors (if appointed) and to persons acting under the authority of the same or of the Data Controller (employees and internal collaborators duly instructed), to public Bodies and Institutions, to the subjects to whom the communication of the data must be made in fulfillment of an obligation provided for by law, a regulation or EU legislation or to comply with an order of the Judicial Authority, as well as to any other third parties, in the cases expressly provided for by law, or even if the communication will be necessary for the protection of the Owner in court.
In any case, Ella may request to be updated on the data relating to the managers and sub-managers, if any, appointed, by submitting a written request to the contact details in Section 7 below.
6) Rights of the Interested Party.
In your capacity as a Data Subject, You have the rights under Articles 15, 16, 17, 18, 20 and 21 of the GDPR, namely the rights to:
a) Access: the Data Subject has the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to the personal data, information regarding the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients, the retention period (if possible), the right to rectification, erasure, restriction, objection, and complaint to a supervisory authority;
b) rectification: the Data Subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him/her without undue delay;
(c) erasure (“right to be forgotten”): the Data Subject has the right to obtain from the Data Controller the erasure of data concerning him/her without undue delay in the cases provided for in Art. 17 of the GDPR;
d) limitation of processing: the Data Subject has the right to obtain from the Data Controller the limitation of the processing of data concerning him/her when the hypotheses set forth in Art. 18 of the GDPR;
e) data portability: the Data Subject has the right to receive the personal data concerning him/her provided to a data controller in a structured, commonly used and machine-readable format, and has the right to transmit such data to another data controller without hindrance from the data controller to whom he/she provided them in the cases provided for in Art. 20 of the GDPR;
f) opposition: the Data Subject has the right to object at any time to the processing of personal data concerning him/her in the cases provided for in Art. 21 of the GDPR;
(g) Revocation: the Data Subject has the right to revoke the consent given to the Controller at any time, without affecting the lawfulness of the processing based on the consent given before revocation;
h) propose complaints to the supervisory authority (Italian privacy guarantor).
7) Methods of exercising rights.
You may at any time exercise your rights by sending:
– A return receipt to La Maga S.r.l., headquartered at Via Sebastiano Caboto no. 7 – 30173 – Venice-Mestre (VE);
– an e-mail to: firstname.lastname@example.org