PURSUANT TO REGULATION (EU) 2016/679 (“GDPR”) ARTICLES 13 AND 14 AND SUBSEQUENT NATIONAL ADJUSTMENT RULES
This document (“Information”) intends to provide you with information on the processing of information, as specified below, which will be provided by you or otherwise available at our facility and which will be processed by the same and / or by other subjects identified for purposes indicated below. The information, in particular, is provided pursuant to EU Regulation no. 679/2016 (“GDPR”) and subsequent national adaptation rules (together with the GDPR hereinafter “Applicable Law”).
1. Identity and contact details of the Data Controller
The data controller, pursuant to art. 4 and 24 of EU Reg. 2016/679, is LP Group Srl Via felice Casati 7, Milan – VAT number 11502980961, firstname.lastname@example.org, in the person of the pro-tempore legal representative (hereinafter the “Owner”).
Place of data processing
The treatments connected to the web services of this site take place at the aforementioned headquarters of the writer and are only handled by technical personnel in charge of processing. In case of need, the data connected to some services can be processed by the staff of companies that take care of the maintenance of the technological part of the site (appointed as data processors pursuant to Article 29 of the Code regarding the protection of personal data), at the headquarters of the companies themselves. An updated list of these managers is available at the headquarters of the writer.
2. Contact details of the Data Protection Officer (so-called “RPD-DPO”)
The Data Controller does not carry out activities that require the designation of the person in charge of the protection of personal data.
3. Purpose and legal basis of the processing
The Personal Data collected will be processed for the purposes and under the legal bases set out below:
Purpose point 3, lett. a): for the management of your contractual relationship or to execute pre-contractual measures (such as, for example, the request for information or that of a quote). In this case, you are free to provide your personal data, even particular ones; however, failure to provide it will not allow you to establish the aforementioned relationship and satisfy your request.
Legal basis of the processing the processing is necessary in relation to the execution of a contract to which you are a party
Purpose point 3, lett. b): subject to your specific consent, to send you (i) promotional communications relating to the Data Controller and (ii) communications relating to events organized by the Data Controller (hereinafter “marketing purposes”)
Legal basis of the processing your consent
4. Categories of personal data processed (pursuant to Article 14)
Within the limits of the purposes and methods described in this Notice, information may be processed that can be considered as “Personal Data”, which includes your personal details, your contact details (such as, for example, mobile number, e-mail address , etc.).
5. Recipients and categories of recipients
Personal data will not be disseminated, or will not be disclosed to indeterminate subjects. Instead, they may be communicated to well-defined subjects, in full compliance with the provisions of the law, for purposes strictly related to those previously indicated. Any access to your personal data is limited to the subjects authorized by the Data Controller. The communication to the identified recipients, only if involved and functional, is linked to the achievement of the purposes referred to in point 3 above, therefore the personal data collected and processed may be:
a) used anonymously for statistical purposes;
b) made available to the Data Controller’s collaborators, as managers or persons authorized to process personal data;
c) communicated to third parties, natural or legal, public administrations, professionals, law enforcement agencies, government bodies, regulatory bodies, courts or other public authorities authorized by law;
d) communicated to commercial partners, only in the case of the User’s prior and express consent;
e) if necessary, transferred to another Data Controller in accordance with the provisions of the GDPR, also with regard to the right to data portability.
The information may also be disclosed whenever communication may be necessary to comply with requests from the Judicial or Public Security Authorities. The collected data will in no case be disclosed.
The list of personal data processing managers is available at the headquarters of the Data Controller.
6. Transfer of data abroad
The data will not be transferred outside the European Union.
7. Data retention period (determination criteria)
Below is a table that contains the indications of the retention times (or the criteria for determining) of the Personal Data:
Purpose point 3, lett. a): ontract management – Storage times: For the entire duration of the relationship and subsequently for 10 years (ordinary prescription).
Purpose point 3, lett. b): marketing purposes – Retention times: 2 years from collection, without prejudice to the possibility for the interested party to modify and / or revoke their will at any time
8. Methods of data processing
The processing of Personal Data will be carried out using manual, computerized or telematic tools, suitable for guaranteeing their security and confidentiality and will be carried out by personnel duly trained in compliance with the Applicable Regulations. There is no automated decision making process.
In addition to cases in which it is necessary to contact you for needs related to the management of your position, where you consent to the processing of your data for the purposes referred to in point 3, lett. b), you can be contacted by e-mail, newsletter, sms, or through any equivalent electronic tool or by paper mail or call via operator at all the addresses provided.
9. Rights that are recognized to you
We inform you that you can exercise the rights recognized by the Applicable Law including, by way of example, the right:
a) to access their Personal Data and to know the origin, the purposes and purposes of the processing, the data of the subjects to whom they are communicated, the data retention period or the criteria used to determine it (Article 15);
b) to request its correction (Article 16);
c) cancellation (“oblivion”), if no longer necessary, incomplete, erroneous or collected in violation of the law (Article 17);
d) to request that the processing be limited to a part of the information concerning you (Article 18);
e) to the extent that it is technically possible, to receive in a structured format or to transmit to you or to third parties indicated by you the information concerning you (so-called “portability”) or that which has been voluntarily provided by you (Article 20 );
f) to oppose their treatment based on legitimate interest (Article 21);
g) as well as to withdraw their consent at any time, in the event that this constitutes the basis of the processing (the withdrawal of consent in any case does not affect the lawfulness of the processing based on the consent given before the withdrawal itself).
The aforementioned rights may be exercised by means of a written request addressed without formalities to the Joint Controllers [or to the DPO] to the contacts indicated in points 1 and 2.
The owner must proceed in this sense without delay and, in any case, at the latest within one month of receipt of the request. The deadline can be extended by two months, if necessary, taking into account the complexity and number of requests received by the Data Controller. In such cases, the Data Controller will inform you within one month of receiving your request and will inform you of the reasons for the extension.
Reminds you that, if the response to your requests has not been satisfactory in your opinion, you can contact and lodge a complaint with the Authority for the Protection of Personal Data (http://www.garanteprivacy.it/) in the ways provided for by the Law. Applicable.
Revision March 2021