NOTICE PURSUANT TO ART. 13 GDPR 679/2016
personal data collected from the data subject
(last update 25 MAY 2018)
We wish to inform you that the European Regulation no. 679/2016 (General Data Protection Regulation) establishes rules concerning the protection of personal data processing of individuals as well as rules concerning the free movement of such data.
Therefore, in compliance with the provisions of art. 12 and art. 13 of the Regulation, we specify the information you are entitled to for the processing the data supplied by you.
1. Data controller.
Artissima s.r.l. sole proprietorship with registered office on via Magenta 31, 10128 Torino, Italy is the data controller responsible for your Personal Data Processing.
If you wish to contact the company you may do so at the following addresses: Corso Vittorio Emanuele II 12, -Turin, Italy / firstname.lastname@example.org / + 39 011 19744106
2. Existence or non-existence of a Data Protection Officer.
The company declares that they avail themselves of a Data Protection Officer and provide the following contact details below: Cristina Mossino / email@example.com / + 39 011 19744106
3. Purposes of the processing and lawful legal basis.
The data you provide will be processed for the following purposes:
A) Administrative, accounting, and pertaining to anti-money laundering legislation.
The legal basis of the processing, i.e. the one that makes the processing lawful, is that provided for by art. 6 letter b) of the GDPR which states “processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”.
B) For the sending of the company’s newsletters, invitations to events, information and/or reports related to cultural events organized or participated in by us and other promotional information related to our business.
The legal basis of the processing, i.e. the one that makes the processing lawful, is that provided for by art. 6 letter a) of the GDPR which states that “the data subject has given consent to the processing of his or her personal data for one or more specific purposes”.
4. Possible recipients of processed personal data.
Your personal data may be communicated to the External Processing Managers we have appointed, such as: Labor Consultants, Tax Advisors, Data Processing Centers, Associated Companies, Subsidiaries or Parent companies, Retailers, Banks and Credit Institutions, Financial Companies and Credit Insurance Companies.
They may also be disclosed to public and private agencies (social security, welfare and insurance institutions), Chambers of Commerce, Armed Forces and Police, customs and tax offices at the national level pursuant to the law.
5. Geographical scope of the processing.
Your personal data will be processed only at the national or European level.
6. Retention period.
Your personal data will be stored:
– for the administrative purposes expressed in point 4) letter A), according to current legislation (Italian Civil Code), 10 years.
– for Commercial and Marketing purposes, 24 months.
8. Your rights.
You may ask the Data Controller to access your personal data and to rectify or cancel them or limit the processing of your data or to oppose their processing, in addition to the right to data portability.
9. Right of withdrawal of given consent.
Since for the purposes specified in point 3) letter B), commercial and marketing purposes, require the express consent as a legal basis for the lawfulness of the processing, we specify your right to revoke such consent at any time without affecting the lawfulness of the processing based on the consent given before the revocation.
10. Right to object.
If you deem it necessary, you may lodge a complaint with a current supervisory authority.
11. Legal or contractual obligation relating to the communication of data.
The conferment of data is mandatory as required by legal and contractual obligations (point A of the purpose), therefore, a refusal would make it impossible for our Company to establish and/or continue the relationship.
The conferment of other data not connected to legal and contractual obligations but referable to commercial, marketing, advertising and promotional activities, for the detection of the degree of customer satisfaction and similar purposes (point B of the purposes), is instead optional because data are collected to optimize the relationship with the customer within our business. The refusal to provide data for these purposes, while not jeopardizing the contractual relationship, will make it impossible to propose commercial and promotional initiatives offered by our company.
13. Automated decision-making processes.
Within our business there is no automated decision making process, including profiling, as per art. 22 paragraphs 1 and 4.