Information document pursuant to and for the purposes of Article 13 of Regulation (EU) 2016/679 (GDPR) the interested party / user – and Article 130 – Unwanted communications Legislative Decree 196/2003 – contractor
WHY THIS INFORMATION
Pursuant to Regulation (EU) 2016/679 (hereinafter “GDPR”), this page describes the methods for processing personal data. This is an information that is provided pursuant to art. 13 GDPR. The information is not to be considered valid for other third party websites, which may be consulted through links on this website, for which no responsibility is assumed.
- WHO IS THE OWNER OF THE DATA PROCESSING? HOW TO CONTACT HIM?
The Data Controller is A&D SpA Food and Dietetic Group. Strada 2, Palazzo C1, Assago Milanofiori (MI), phone number +39 02 5770791, email address firstname.lastname@example.org .
- Processable personal data
Personal data: any information concerning an identified or identifiable natural person (” interested»); the natural person is considered identifiable who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social (C26, C27, C30 GDPR).
Data of contractors / users.
The computer systems and software procedures used to operate this site acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This category of data includes IP addresses or domain names of computers and terminals used by users, URI / URL (Uniform Resource Identifier / Locator) addresses of the requested resources, the time of the request, the method used in submit the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters relating to the operating system and the user’s IT environment.
Data disclosed voluntarily
The optional, explicit and voluntary sending of messages to the contact addresses indicated on this site entails the subsequent acquisition of the sender’s address, necessary to respond to requests, as well as any other personal data entered.
Information about the processing of personal data carried out through Social Media platforms
Regarding the processing of personal data carried out by the managers of the Social Media platforms used by the Data Controller, please refer to the information provided by them through their respective privacy policies. The Data Controller processes the personal data provided by users through the pages of the dedicated Social Media platforms, to manage interactions with users (comments, public posts, etc.) and in compliance with current legislation.
Cookies and other tracking systems. What are? What are they for?
- PURPOSE OF THE PROCESSING, LEGAL BASIS, DATA RETENTION PERIOD AND NATURE OF THE CONFERENCE
|PURPOSE OF THE||LEGAL BASISPROCESSING||PERIOD OF CONSERVATION||NATURE OF THE PROVISION|
Navigation on this website.
The data necessary for the use of web services are also processed for the purpose of:
• obtain statistical information on the use of services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.);
• check the correct functioning of the services offered.
The data will be used to ascertain responsibility in case of hypothetical computer crimes against the site.
The processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject who require the protection of personal data do not prevail, taking into account the reasonable expectations of the interested party and the activities strictly necessary for the functioning of the site and navigation itself
(Art. 6, par. 1 letter f and C47 of the GDPR)
The storage of the navigation data will be up to the duration of the browsing session and in any case they will not persist for more than seven days (except for any need to ascertain crimes by the judicial authority).
The provision of data is necessary for browsing the website.
For the necessary non-technical cookies and comparable technologies, the processing is based on the consent to the processing of personal data (Article 6 paragraph 1 letter a and C42, C43 of the GDPR).
In addition to navigation, personal data will be processed for:
|PURPOSE OF THE||LEGAL BASISPROCESSING||PERIOD OF CONSERVATION||NATURE OF THE PROVISION|
A) CONTACTS , sending requests for contact, information, assistance
the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same; (C44)
art. 6 par. 1 letter b) of the GDPR
|Maximum 12 months|
The conferment is necessary.
Failure to provide the necessary data will make it impossible to be contacted and receive information
|B) MANAGEMENT OF YOUR REQUESTS and requests from other interested parties, pursuant to art. 15 and following of the GDPR (rights of the interested party)|
The processing is necessary to fulfill a legal obligation to which the data controller is subject (C45)
Art. 6 par. 1 letter c) of the GDPR
5 years from the closing of the request, except for disputes
The provision of personal data is mandatory, as it is essential to be able to execute legal obligations.
- WHO WILL THE PERSONAL DATA BE COMMUNICATED TO? RECIPIENTS OF THE DATA
Personal data will be communicated, also based on the purposes envisaged in specific areas, to subjects who will process the data as independent data controllers, or data processors (Article 28 of the GDPR) and processed by natural persons (Article 29 of the GDPR) ) that act under the authority of the Data Controller and of the Managers on the basis of specific instructions provided regarding the purposes and methods of the processing, for specific purposes based on the reference area. The data will be disclosed to recipients belonging to the following categories:
- Subjects based in Italy and in the EEA countries, which provide services for the website and communication networks, including e-mail, hosting and website management;
- Studies or companies in the field of assistance and consultancy relationships (including the Parent Company and the Group);
- Competent authorities for the fulfillment of legal obligations and / or provisions of public bodies, upon request
The list of data processors is available by writing to email@example.com or to the other addresses indicated above.
- WILL THE DATA BE TRANSFERRED TO NON-EEA COUNTRIES?
Personal data will not be transferred to non-EEA countries
- IS THERE AN AUTOMATED PROCESS?
Personal data will be subjected to traditional manual, electronic and automated processing. It is specified that fully automated decision-making processes are not carried out.
- WHAT ARE YOUR RIGHTS? HOW CAN YOU EXERCISE THEM?
You will be able to assert the rights as expressed by the articles. 15 and ss GDPR, by contacting the Data Controller at the e-mail address firstname.lastname@example.org , or at the contacts indicated above or. You have the right, at any time, to request access to your personal data (Article 15), the correction (Article 16), the cancellation of the same (Article 17), the limitation of processing (Article 18) ). The data controller communicates (art. 19) to each of the recipients to whom the personal data have been transmitted, any corrections or cancellations or limitations of the processing carried out. The data controller informs the data subject of these recipients if the data subject requests it. In the cases provided for, you have the right to the portability of your data (Article 20) and in this case they will be provided to you in a structured format, commonly used and readable, by an automatic device. You have the right to object in the cases provided for (Article 21), at any time, to the processing of data based on legitimate interest.
In the event that he believes that the processing of personal data carried out by the Data Controller is in violation of the provisions of Regulation (EU) 2016/679, the interested party has the right to lodge a complaint with the Supervisory Authority, in particular in the Member State in where he habitually resides or works or in the place where the alleged violation of the regulation has occurred (Privacy Guarantor https://www.garanteprivacy.it/), or to take the appropriate judicial offices.
- CHANGES TO THE INFORMATION
The Owner reserves the right to modify, update, add or remove parts of this information. In order to facilitate the verification and modification of the text, the information will contain the update date.
Updated: March 31, 2022