Informative ex. Art. 13 Reg. EU 679/2016
Dear User, we would like to inform you that the Reg. EU 679/2016 provide Normatives that safeguard physical persons and the respect of the processing of their personal data.
According with these Normatives, we inform you that the use of your data will be based on the principles of fairness, lawfulness, transparency, limitation of intentions, minimization, accuracy, limitation of retention, integrity and empowerment, protecting your privacy and your rights.
In accordance with the mentioned articles 13 Reg. EU 679/2016 we provide you the following information:
A) The processing of the data supplied by you through the use of our chat is pursued to:
- Management of the users’ requests;
- Management of some professional relations with business partners.
In addition, as specified herein, whenever you provide an explicit facultative approval, your personal data could also be eventually:
- Processed by the data controller and used to submit informative/commercial/promotional communications– through “traditional” means (as a non-exhaustive example, paper mail, phone call with an operator) and/or automated ones (as a non-exhaustive example fax, email, sms, mms, etc…);
- Communicated by the data controller, in compliance with the current legislation, to companies, in various ways connected with the data controller, operating in the food trade sector, for the purpose of sending, by the latter, informative / commercial / promotional communications through “traditional” means (as a non-exhaustive example, paper mail and telephone calls with an operator) and / or automated ones (as a non -exhaustive example, fax, email, sms, mms, etc …), using the contact details.
We inform you that in none of the website sections, and for no access to website functionalities, is requested the bestowal of “particular categories of personal data” and/or “personal data about criminal records and crimes”, as defined by the art. 9 and 10 of the Reg. EU 679/2016: whenever spontaneously the User submits to the data controller this kind of information, the data controller will manage this data according to with the current legislation regarding the safeguarding of personal data (Reg. EU 679/2016), respecting the limits of what is strictly necessary in relation with the requests expressed by the concerned user.
We remind you that this informative is effective not only for this website but also for the other websites eventually consulted by the user through links. We remind you, in addition, that the facultative, explicit and voluntary submission of email to the email addresses shown on this website, implies the acquisition of the sender’s address, that is necessary to answer to the information requests, as well as of other personal data inserted in the missive.
B) The bestowal of the data is facultative for the navigation of the company’s website, but is mandatory for the final execution for the purposes mentioned in the letter A) and their eventual missed bestowal will implies the impossibility of the usage of the chat service. The processing is not based on the assumptions mentioned in the art. 6, paragraph 1, let. F), Reg. EU 679/2016, but on the explicitly expressed consent.
C) Your personal data will be processed by subjects in charge of the data processing specifically nominated by the data controller and/or by anyone who acts under its authority and has access to personal data; these subjects will process your data only whenever will be necessary in accordance with the purposes of the bestowal and with the carrying-out of the duties assigned by the data controller holder, committed themselves to process only the data necessary for the carrying out of that tasks and to perform only the operations necessary for the fulfilment of them.
Moreover, your personal data could be communicated for the aims outlined in the paragraph A), to:
- Societies or external experts who carry out specific tasks on behalf of the data controller (for instance, website manager, email service suppliers, management/maintenance/implementation of business informative systems’ suppliers, etc…) only whenever the communication of your personal data results necessary or functional for the pursuing of the aims mentioned in the paragraph A) or to the maintenance of the website or the business’ social pages;
- Businesses managed or linked with the data controller;
The communication of the data previously described could be strictly linked to the normal business operativity and could result strictly necessary for the aims mentioned in the paragraph A); Thus, the missing communication can lead to the impossibility of fulfil the purposes mentioned in the paragraph A).
C1) The data controller will not transfer Your personal data to a third country or an international organization. Whenever the necessity should arise in the future, in this specific case the data controller is committed to carry-out the treatment only in presence of appropriate guarantees.
C2) In compliance with the provision “Misure e accorgimenti prescritti ai titolari dei trattamenti effettuati con strumenti elettronici relativamente alle attribuzioni delle funzioni di amministratore di sistema – 27 novembre 2008” (G.U. n. 300 del 24 dicembre 2008) (Measures and expedients prescribed to the data controllers who process data through electronic devices relative to the allocation of the administrator of the system’s functions – 27th November 2008) (G.U. n. 300, 24th December 2008) and its related integrations and modifications, the data controller has designated specified “System’s Administrator” who, within the limit of the performing of its functions, could access, even indirectly, to the services and the systems that process of allow the process of the personal information.
C3) Your data will not be communicated to other third parties, without your explicit agreement.
Your personal data will be not diffused.
D) The data will be stored for the time necessary to achieve the purposes indicated above, in a form that allows the identification of the interested party for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed , after which, if not expressly confirmed by the interested party, they will be destroyed, except for their transformation into anonymous form.
E) The submitted personal data will not be processed with the purpose of undertaking an automated decision-making process (profiling).
F) In the hypothesis in which the personal data submitted should be treated for purposes different and supplementary to the ones indicated above, the data controller will supply information in regards of the different purpose and all additional relevant information.
The Data Controller, taking into account the state of the art and the implementation costs as well as the nature, the field of application, the context and the purposes of the processing both at the time of determining the means of processing and at the time of processing (risk analysis – accountability), has put in place adequate technical and organizational measures, aimed at effectively implementing the data protection principles and integrating into the processing the necessary guarantees in order to meet the requirements of EU Reg. 679/2016 and protect the rights of the concerned user.
The data will be processed using methods and tools that guarantee security (art. 24, 25 and 32 of the EU Reg. 679/2016) and will be carried-out using computerized means to which all technical and organizational measures will be applied to guarantee a level of security adequate to the risk, in order to ensure on a permanent basis, their confidentiality, integrity, availability and resilience of both the treatment systems and processing services (as a non-exhaustive controls both on the assignment of tasks to the subjects in charge of the processing of data and on the classification of the data itself, procedures, if sustainable, of encryption, disaster recovery mechanisms, etc.).
The data controller is: FELSINEO SpA with registered office in Via C. Masetti, 8-10, Zola Predosa (BO), P.I. 00499291201, Phone number: +39 051 3517101, website www.felsineo.com, E-mail firstname.lastname@example.org, PEC email@example.com (above and below defined as “data controller”).
According to the art. 28 of the Reg. EU 679/2016, the data controller may use third parties that process data on its behalf and formally appointed by them as data processing managers. The complete and updated list of those responsible for the processing of the data designated will be provided to you by the data controller at your request, by submitting a communication to the email indicated above.
According to the art. 29 of the Reg. EU 679/2016, the data controller may use anyone acting under his authority and / or the appointed manager. These subjects will be properly instructed.
The data controller has not currently designated the D.P.O. (art. 37 Reg. EU 679/2016 and WP Guidelines article 29 of 13.12.2016), as a legally non-compulsory figure within the structure, given that the characteristics of the treatments do not fall within the cases referred to in the aforementioned Art.37.
In addition, the data controller informs you that:
G) The data owner has the right to ask to the data controller the access to his personal data and the correction of the cancellation of them or the limitation of the processing that regards him, or oppose to their treatment in addition to the right to data portability (Art. 15, art. 16, art 17, art. 18, art. 20 Reg. EU 679/2016); exercising the right of access, the subject has the right to obtain from the data controller the confirmation that the interested party has the right to obtain from the data controller the confirmation that the processing of personal data concerning him is being processed, while the exercise of the right to portability allows the interested party to obtain from the data controller the personal data in a structured format, for common and legible use or the transfer of said data from the original data processor to another (cfr WP 242 of 13.12.2016). These rights can be exerted though the submission of an email to: firstname.lastname@example.org or sending a traditional mail to the address of the registered office.
H) The data owner has the right, in the case in which the processing is based on art. 6, paragraph 1, letter a) or on art. 9, paragraph 2, letter a), to withdraw the consents in every moment without affecting the lawfulness of the data processing based on the consent had before the withdrawal;
I) The data owner has the right to apply for a complaint to a control authority;
J) The data owner has the right to come to know, from the data controller, who has to take without any justified delay, of a violation of the personal data capable to present an high risk per the right and the freedoms of physical persons (art. 34 Reg. EU 679/2016).
K) For reasons connected with its peculiar situation, the data owner has the right to oppose to the processing of his personal data (art. 21 Reg EU 678/2016).
The full text of the articles of the Reg. EU 679/2016 regarding its rights (art. From 15 to 23 included) is available in any moment following the link of the “Autorità Garante per la Protezione dei Dati Personali” (Authority for the Protection of Personal Data): https://www.garanteprivacy.it/documents/10160/0/Regolamento+UE+2016+679 otherwise, will be supplied from the data controller after your request by sending a communication to the contacts previously indicated.
Date of latest update: 24th June 2019