The CONTROLLER, in this notice, deems it essential to inform the data subjects of the existence of some rights regarding the protection of personal data, listed below.
– Right to be informed (transparency in data processing)
The interested party has the right to be informed about how the CONTROLLER processes personal data, for what purposes, and other information provided for by art. 13 of the GDPR. To this end, the DATA CONTROLLER has set up organizational processes that allow, at the time of acquisition or request of personal data, the issue of an information template created “ad hoc” depending on the category of data subjects to which the data subject belongs (employee, customer, supplier, etc.). This document allows all parties to whom the data refer to be adequately informed on how the data is processed by the CONTROLLER. The information form can be requested by sending a specific application addressed to the CONTROLLER.
– Right to withdraw consent (art. 13)
You have the right to revoke your consent at any time for all processing operations whose legitimacy is based on your consent. Withdrawal of consent shall not affect the lawfulness of previous processing.
– Right of access to data (art. 15)
You may request a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients from third countries or international organisations; d) where possible, the expected retention period of personal data or, if that is not possible, the criteria used to determine that period; e) the existence of the right of the data subject to ask the controller to rectify or delete personal data or to restrict the processing of personal data concerning him or her or to oppose their processing; f) the right to lodge a complaint with a supervisory authority; g) where the data are not collected from the data subject, all available information on their origin; h) the existence of an automated decision-making process, including the profiling referred to in paragraphs 1 and 4 of Article 22, and, at least in such cases, significant information on the logic used and the importance and expected consequences of such processing for the data subject. You have the right to request a copy of the personal data being processed.
– Right of rectification (art. 16)
You have the right to request the rectification of inaccurate personal data concerning you and to obtain the integration of incomplete personal data.
– Right to be forgotten (art. 17)
You have the right to obtain from the controller the erasure of personal data concerning you if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed, if you withdraw your consent, if there is no overriding legitimate reason to proceed with the profiling, if the data have been processed unlawfully, if there is a legal obligation to delete them; if the data are related to web services rendered to minors without their consent.Cancellation may be effected unless the right to freedom of expression and information prevails, is retained for the performance of a legal obligation or for the performance of a task carried out in the public interest or in the exercise of official authority, for reasons of public interest in the field of health, for archiving in the public interest, for scientific or historical research or for statistical purposes or for the establishment, exercise or defence of a right in a court of law.
– Right to restriction of processing (art. 18)
You have the right to obtain from the controller limitation of processing when you have contested the accuracy of personal data (for the period necessary for the controller to verify the accuracy of such personal data) or if the processing is unlawful, But you oppose the deletion of personal data and ask instead that its use be limited or if they are necessary for the assessment, exercise or defense of a right in court, while the CONTROLLER are no longer needed.
– Right to portability (art. 20)
You have the right to receive in a structured, commonly used and machine-readable format the personal data concerning you provided to us and you have the right to transmit them to another if the processing is based on consent, the contract and whether the processing is carried out by automated means, unless the processing is necessary for the performance of a task in the public interest or in connection with the exercise of official authority, and that such transmission does not affect the rights of third parties.
– Right to object (art. 21)
You have the right at any time to object, in whole or in part, to the processing of your personal data if the processing is carried out for the pursuit of a legitimate interest of the CONTROLLER or for direct marketing purposes.
– Right to lodge a complaint to the Italian Personal Data Protection Authority (art. 77).
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of your personal data infringes the Data Protection Regulation, in particular in the Member State where you reside, work, or in the place where the alleged infringement occurred.
