Information document article 13 Reg. EU 2016 / 679- GDPR
Information on the processing of personal data collected from the interested party
In compliance with the provisions of Reg. EU 2016/679 (European Regulation for the protection of personal data) We provide you with the necessary information regarding the processing of personal data provided by interacting with the web services made available by the Data Controller. The information is not to be considered valid for other websites that may be consulted through links on the websites of the owner, who is not to be considered in any way responsible for the websites of third parties.
This is an information that is provided pursuant to art. 13 of the Reg. 2016/679 (European Regulation for the protection of personal data) and is inspired by the provisions of Directive 2002/58 / EC, as updated by Directive 2009/136 / EC, on the subject of Cookies as well as the provisions indicated in the Provision of Guarantor Authority for the protection of personal data of 08.05.2014 regarding cookies.
- SUBJECTS OF THE TREATMENT
HOLDER OF THE TREATMENT , pursuant to art. 4 and 24 of the Reg. EU 2016/679 is A&D SPA – Food and Dietetic Group – Strada 2, Palazzo C1, Assago Milanofiori (MI), phone number +39 02 5770791, email address firstname.lastname@example.org
- TYPES OF DATA PROCESSED
The computer systems and software procedures used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This is information that is not collected to be associated with identified interested parties, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes the IP addresses or domain names of the computers used by users who connect to the site, the addresses in the Uniform Resource Identifier (URI) notation of the requested resources, the time of the request, the method used to submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
These data are used only to obtain anonymous statistical information on the use of the site and to check its correct functioning and are deleted immediately after processing.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data included in the message.
Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request.
Cookies See COOKIES POLICY inserted in the homepage of the site.
3. PURPOSE AND LAWFULNESS OF TREATMENT
The personal data provided will be processed in compliance with the conditions of lawfulness pursuant to art. 6 Reg. EU 2016/679 for the following purposes:
Management of inherent data processing (legal basis of the processing: art.6 lett.b) and f)):
– navigation on this website and access to the dedicated sections;
– any request for contact, by sending the requested information, to the addresses on the site;
– fulfillment of contractual and legal obligations and administrative-accounting purposes. The treatments carried out for administrative-accounting purposes are those connected to the performance of organizational, administrative, financial and accounting activities, regardless of the nature of the data processed. In particular, internal organizational activities, those functional to the fulfillment of contractual and pre-contractual obligations, information activities, pursue these purposes.
Data processing is also based on what is indicated by article 6, paragraph 1, letter f) of Regulation (EU) 2016/679 (recital 47) – Legitimate Interest, taking into account the reasonable expectations of the interested party at the time and in the context of the collection of personal data, as he can reasonably expect that a processing for this purpose will take place.
4. RECIPIENTS OR CATEGORIES OF DATA RECIPIENTS
The personal data provided may be disclosed to recipients, appointed pursuant to art. 28 of Reg. 2016/679, which will process the data as managers and / or as natural persons acting under the authority of the Data Controller and the Manager or operate in total autonomy as separate Data Controllers, in order to comply with contracts or related purposes. Among others, the data may be disclosed to recipients belonging to the following categories:
– Subjects that provide services for the management of the information system and communication networks of A&D SPA – Food and Dietetic Group (including e-mail);
– Studies or companies in the context of assistance and consultancy relationships;
– Competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, upon request;
In the case of administrative accounting purposes, the data may possibly be transmitted to commercial information companies for the assessment of solvency and payment habits and / or to subjects for credit recovery purposes. The complete list of designated external data processors is constantly updated and available at the headquarters of A&D SPA – Food and Dietetic Group or by writing to email@example.com
- TRANSFER OF DATA TO A THIRD COUNTRY AND / OR AN INTERNATIONAL ORGANIZATION
The personal data provided will not be transferred abroad.
In the event that they were to be transferred abroad, inside or outside the European Union, this dislocation of your data would take place within the limits and under the conditions set out in Articles. 44 and ss. of EU Regulation 2016/679, in order to comply with the purposes related to the treatments. In this case, the interested party can obtain a copy of the conditions underlying the possible transfer by writing an email to the address firstname.lastname@example.org
6. STORAGE PERIOD OR CRITERIA
The processing will be carried out in an automated and / or manual form, with methods and tools aimed at guaranteeing maximum security and confidentiality, by persons specifically appointed.
In compliance with the provisions of art. 5 paragraph 1 letter. e) of Reg. EU 2016/679 the personal data collected will be stored in a form that allows the identification of the data subjects for a period of time not exceeding the achievement of the purposes for which the personal data are processed.
- for the purposes indicated in point 3 of this information document, your data will be kept for the time necessary to carry out the specified activities and the services requested or to reply to the requests made, except for any investigations of computer crimes against the site.
Any further details on the retention of data regarding the single service or request made, as well as the criteria based on the retention of your data can be requested from the Data Controller by writing an email to the address email@example.com
- NATURE OF THE CONFERENCE AND REFUSAL
Apart from that specified for navigation data, the user is free to provide their personal data.
The provision of personal data for the purposes indicated in point 3. of this information document is optional but necessary to complete the sending of information requests and to be contacted by the Data Controller and / or to receive services from the Data Controller. Failure to provide personal data may make it impossible to obtain feedback from the Data Controller and to use the services requested.
- RIGHTS OF THE INTERESTED PARTIES
You will be able to assert your rights as expressed by the articles. 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulation 2016/679, by contacting the Data Controller, or the designated Data Processor, by writing to the address firstname.lastname@example.org
You have the right, at any time, to ask the Data Controller to access your personal data, to correct them, to cancel them, to limit their processing. Furthermore, you have the right to object, at any time, to the processing of your data (including automated processing, eg profiling) as well as to the portability of your data. Without prejudice to any other administrative and judicial appeal, if you believe that the processing of data concerning you violates the provisions of EU Reg. EU 2016/679, pursuant to art. 15 letter f) of the aforementioned Reg. 2016/679, you have the right to lodge a complaint with the Guarantor for the protection of personal data and, with reference to art. 6 paragraph 1, letter a) and art. 9, paragraph 2, letter a), you have the right to revoke the consent given at any time.
In the event of a request for data portability, the Data Controller will provide you with the personal data concerning you in a structured format, commonly used and readable by an automatic device, without prejudice to paragraphs 3 and 4 of art. 20 of Reg. EU 2016/679.
Update date: 28.05.2018