Under and by effect of art. 13 of EU Regulation no. 2016/679 regarding the processing of personal data, the undersigned A.C.R.I. srl, with registered office in Galbiate, Via Bergamo 8, as data controller, informs its customers that the personal data acquired with reference to the business relationships established will be processed in compliance with the above mentioned legislation. According to the above mentioned law, such treatment will be based on the principles of correctness, lawfulness and transparency and protection of confidentiality, as indicated below.
The personal data collected and processed by the writer are:
Your personal data are processed:
without your express consent (art. 6 letter. b), e) EU Regulation no. 2016679), for the following Service Purposes:
In all these cases the provision of data for the performance of these activities is essential for the exact execution of a contract to which the person concerned is a party or the execution of pre-contractual measures taken at the request of the same and therefore the failure to provide prevents the conclusion of the contract for the services of the Owner. The need to provide data for the execution of the contract of which the person concerned is a party or for the execution of pre-contractual measures adopted at the request of the same constitutes the legal basis for the processing of data pursuant to art. 6 paragraph 1 letters b) and c) of EU Regulation no. 2016/679. 6 paragraph 1 letter a) and 7 EU Regulation no. 2016/679.
For the following Marketing Purposes: to send you via email, mail and telephone contacts, newsletters, commercial communications and advertising material on products or services offered by the Owner and detection of the degree of satisfaction with the quality of services;
The provision of data for the purposes referred to in Article. 2. You may therefore decide not to provide any data or subsequently deny the possibility of processing data already provided, by revoking your consent pursuant to art. 7, paragraph 3 of EU Regulation no. 2016/679: in this case, you may not receive newsletters, commercial communications and advertising material relating to the Services offered by the Owner. A)
We inform you that if you are already our customers, we may send you commercial communications relating to services and products of the Owner similar to those from which you have already used, except your right to revoke the consent already given pursuant to art. 7, paragraph 3 of EU Regulation no. 2016/679), specifying in this regard that the revocation of such consent does not affect the lawfulness of the processing based on the consent previously expressed before revocation.
The processing of your personal data is carried out by means of the operations indicated in art. 4 no. 2) EU Regulation no. 2016/679 and specifically: collection, recording, organization, structuring, storage, consultation, processing, adaptation or modification, selection, extraction, comparison, use, consultation, interconnection, blocking, communication by transmission or any other form of provision, limitation, cancellation and destruction of data. The acquired data will be processed with electronic, computer and telematic instruments and with paper supports with logic strictly related to the purposes indicated above by internal collaborators and employees specifically appointed for the processing or by external data processors. The data are stored on paper and computer in compliance with the minimum security measures required by law, both technical and organizational, adequate to ensure the confidentiality and confidentiality of personal data, adopting security measures to prevent alteration, loss, processing or unauthorized access and to ensure the integrity and security of personal data. In accordance with the principle of minimisation, the data that the Data Controller may process shall be adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed and in any event in compliance with the wishes of the data subject.
Pursuant to Article 13(2)(a) of Regulation (EC) No 1049/2001. 2016/679, the Data Controller specifies that he will process personal data for the time necessary to fulfill the above purposes and in any case for no more than 10 years from the termination of the relationship for the Service Purposes (also taking into account the ordinary limitation period for contractual relationships) and for no more than 2 years from the collection of data for the Marketing Purposes.
Pursuant to art. 13 letter e) of EU Regulation no. 2016/679 it is specified that personal, accounting and tax data will not be communicated, sold or exchanged with third parties, except to consultants and technicians, in their capacity as data processors or external data controllers, for the performance of activities functional to the company, such as administrative, operational, accounting, tax and legal. In this case, the use by third parties must be in full compliance with the principle of correctness, lawfulness and transparency and with the current legal provisions and in particular the provisions of art. 28 of EU Regulation no. 2016/679.
The updated list of external managers and processors is kept at the registered office of the Data Controller.
Without the need for express consent (art. 6, paragraph 1, letters b) and c) of EU Regulation no. 2016/679), the Data Controller may communicate your data for the purposes referred to in art. 2.A) to judicial and administrative authorities as well as to all those subjects to whom communication is required by law for the performance of the aforementioned purposes. These subjects will process the data in their capacity as independent data controllers.
In your capacity as data subject, pursuant to Article 13(2)(b) of EU Regulation No 2016/679 , you have the right to request from the data controller access to your personal data (Article 15 of EU Regulation No 2016/679), the rectification of such data (Article 16 of EU Regulation No 2016/679), the erasure of such data (Article 17 of EU Regulation No 2016/679), the restriction of the processing of such data (Article 17 of EU Regulation No 2016/679), and the restriction of the processing of such data (Article 13(2)(b) of EU Regulation No 2016/679). 18 EU Regulation no. 2016/679), to oppose their processing (art. 21 and 22 EU Regulation no. 2016/679) and has the right to data portability (art. 20 EU Regulation no. 2016/679).
As a data subject, you may exercise your rights by contacting A.C.R.I. srl, with registered office in Galbiate, Via Bergamo 8, data controller, using the contact data indicated below. You also have the right to lodge a complaint with a supervisory authority in accordance with the provisions of EU Regulation no. 2016/679 and in particular, on the basis of art. 77 of the same Regulation, to the supervisory authority of the Member State in which you habitually reside or work, or the place where the alleged violation occurred, always without prejudice to the right to apply in any case to the competent ordinary judicial authority.
A.C.R.I. srl, with registered office in Galbiate, Via Bergamo 8, Italy.