INFORMATIVE TREATMENT OF PERSONAL DATA MADE BY MEANS OF COMPILING FORM OF CONTACT ON THE WEBSITE OF THE OWNER OF THE EXTENDED ARTT 13 AND 14 REG UE 679/16.I
Dear User, I.F.E. SRL, with registered and operative office in Via Emmanueli No. 7 – 29121 Piacenza Italy, VAT number 01346570334, pec: firstname.lastname@example.org , mail email@example.com, Tel. 0523 517 025, Fax 0523 517 793 as data controller, provides you with the following information regarding the processing of your personal data:
PURPOSE OF TREATMENT:
Your data will be processed exclusively for the purpose of providing you with the requested information. For this purpose, the request for information will be sent to the competent office and will be taken over by the personnel in charge and duly trained in the processing of your data in compliance with the provisions of Reg EU 679/16.
PROCESSING METHODS: The personal data requested by the Data Controller will be processed in compliance with the current regulations concerning the protection of personal data and exclusively by formally authorized personnel who are adequately trained to perform processing operations in full compliance with their confidentiality.
The treatment will be exclusively computerized. Appropriate security measures will be adopted to preserve the integrity, confidentiality and security of your data as part of the treatment process in accordance with the provisions of Article 32 of the EU Reg. 679/16
Connections with SSL certificates for encrypting data passed through data access via WEB
IPS (Intrusion Prevention System) tools managed through “Fortinet” devices (firewall systems and for the control of the latest generation network) constantly updated.
WAF systems (Web Application Firewall) managed through constantly updated “Fortinet” devices
Antivirus managed through “Fortinet” and “ClamAV” devices on the constantly updated Mail servers
“GreyLog” advanced logging systems (Advanced automated log control system that activates alerts from common threats or automatically initiates a post-incident investigation in response to an alarm).
Real-time Alert systems with email and SMS alerts (all services are constantly checked and immediate communication is sent to the system administrators in case of problems detected on each individual service)
Periodic and continuous back-up services of data stored on site and also at dislocated data centers, which are managed by Synology GmbH Grafenberger Allee 125 40237 Düsseldorf Germany Tel: +49 211 9666 9666.
The data object of the conferment will not be diffused, sold, exchanged with third parties, except for the fulfillment of obligations imposed by contract or by national or EU laws and / or regulatory provisions in force or in case of integration of offenses.
Your data will not be processed automatically, including profiling and will not be transferred to third parties and will not be transferred to non-EU countries or international organizations.
Upon receipt of your personal data will be processed exclusively by appropriately trained and formally authorized employees to the processing of your personal data according to the instructions given by the Owner.
STORAGE TIME: Your request for information and the personal data contained therein will be kept for a period strictly necessary for the processing of an answer and in any case for a period not exceeding 7 days from the date of receipt of the request.
LEGAL BASIS OF TREATMENT: The Data Controller will process the data relating to navigation in the manner and for the purposes indicated only on condition that you give your consent.
The provision of consent is free. The lack of consent will prevent the data subject from using the Data Controller’s service and will not entail any further consequences.
The consent given by you will be revocable at any time by sending mail to the following addresses: pec: firstname.lastname@example.org, mail: email@example.com, tel: 0523 517 025, fax: 0523 517 793
RIGHTS OF THE INTERESTED PARTY: You may, at any time, exercise the rights recognized by Reg. 679/16. The exercise of your rights may be done by sending a request by email to firstname.lastname@example.org, or by contacting the data protection officer personal to the following email address email@example.com
Right to access personal data. Pursuant to and for the purposes of Article 15 of Reg EU 679/16, he will have the right to obtain from the Data Controller confirmation that he is or is not processing personal data concerning him and in this case obtaining access personal data and the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations; (d) where possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period; e) the existence of the right of the interested party to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment; 96 GUARANTOR FOR THE PROTECTION OF PERSONAL DATA Art. 15 CHAPTER III – Rights of the interested party f) the right to lodge a complaint with a supervisory authority; g) if the data are not collected from the data subject, all information available on their origin; (h) the existence of an automated decision-making process, including the profiling referred to in Article 22 (1) and (4) and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party. 2. Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the existence of adequate safeguards pursuant to Article 46 relating to the transfer. The data controller will provide a copy of the personal data being processed, unless the release of the copy is detrimental to the rights and freedoms of the data subject. In the event of further copies requested by the data subject, the data controller may charge a reasonable fee contribution based on administrative costs. the rights and freedoms of others.
Right to rectification ex art 16 Reg Ue 679/16 The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of the processing, you will also have the right to obtain the integration of incomplete personal data, also by providing an additional declaration
Right to cancel. Pursuant to article 17 par I Reg Ue 679/16, the interested party has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller is obliged to cancel without unjustified personal data delay, if one of the following reasons exists: a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; (b) the data subject revokes the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) (a) and whether there is no other legal basis for the processing ; (c) the data subject opposes the processing pursuant to Article 21 (1) and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21 (2); d) personal data have been processed unlawfully; e) personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the controller is subject;
Right of limitation of treatment. Pursuant to and for the purposes of Article 18 of Reg EU 679/16 The data subject has the right to obtain from the data controller the processing limitation when one of the following hypotheses occurs: a) the interested party disputes the accuracy of personal data , for the period necessary for the data controller to verify the accuracy of such personal data; b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited; c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court; d) the interested party has opposed the treatment pursuant to Article 21 (1), pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party. 2. If the processing is restricted pursuant to paragraph 1, such personal data shall only be processed, except for storage, with the consent of the data subject or for the establishment, exercise or defense of a right in court. or to protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State
Right to oppose treatment. According to and for the affections referred to in art. 21 Reg Ue 679/16 the interested party has the right to oppose at any time, for reasons connected with his particular situation, to the processing of his personal data pursuant to Article 6 (1), letters e) of), including profiling on the basis of these provisions. The data controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or the defense of a right in court.
Right to data portability;
Right of withdrawal of consent pursuant to and by effect of Article 7 par 3 Reg Ue 679/16, the interested party has the right to withdraw his consent at any time, by contacting the owner at firstname.lastname@example.org . The withdrawal of consent does not affect the lawfulness of the treatment based on the consent given before the revocation of proposing a complaint to the Guarantor for the protection of personal data.