DISCLOSURE FOR THE DATA SUBJECT ON THE PROCESSING OF PERSONAL DATA

provided pursuant to arts. 13-14 of the “General Data Protection Regulation” – REG. (EU) 2016/679 (GDPR)

Pursuant to Regulation (EU) no. 2016/679 (hereinafter “GDPR 2016/679”), which sets forth measures for the protection of physical persons and other subjects with regard to the processing of personal data, we wish to inform you that the personal data you provide will be processed by the company in compliance with the aforementioned regulation and the confidentiality obligations the company is bound by.

The Data Controller and Data Processors

The Data Controller is C.Volo, in the person of its legal representative pro tempore, with registered office in Reggio Emilia, in Via Luigi Sani 13, e-mail info@cvolo.it The list of subjects identified as Data Processors may be requested by sending an e-mail to info@cvolo.it

L’elenco dei soggetti individuati quali Responsabili del Trattamento può essere richiesto inviando una e-mail al seguente indirizzo info@cvolo.it

Purposes of processing

The personal data you provide will be used:

in order to carry out the services requested and in order to comply with the measures, including legal measures, connected therewith for the management of the contractual relationship between the parties. Please note that, taking account of the purposes of processing as illustrated above, it is mandatory to provide your data accurately and in full, and that failure to do so may make it impossible for us to carry out the contractual services. Only with your specific consent, the data you provide many also be used by the company and/or by parent and/or related companies who collaborate with the company on marketing and commercial activities, for the following purposes indicated below: for the organisation and carrying out of events for the sending of information and promotional messages, also of a commercial nature, and specifically for the sending of the newsletters, advertising material and/or for the sending of offers of goods and services by mail, internet or e-mail.

Methods of processing and storage

The data requested from and provided by you will be used in accordance with the principles of fairness, lawfulness and transparency.

The data you provide will be processed automatically and/or manually, in compliance with the provisions of art. 32 of the GDPR 2016/679, by subjects specifically appointed for the purpose, in observance of art. 29 of the GDPR 2016/ 679.

Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimisation, pursuant to art. 5 GDPR 2016/679, the data you provide will be stored for the period of time necessary to achieve the purposes for which they were collected and processed in accordance with the requirements of the pertinent regulations.

Scope of communication and disclosure

The data you provide will not be disclosed to indeterminate subjects; they may be transmitted to private and public subjects, entities and institutions for the fulfilment of the purposes specified above, and in cases provided for by laws or regulations.

For example, listed below are a number of subjects to whom the company may/must transmit your data:

• any qualified subjects that provide the Data Controller with services instrumental to the purposes indicated above, including subjects and companies who take care of and/or play a part in taking care of the maintenance of the programs used;
• qualified subjects, such as, for example, credit institutes, insurance companies and entities; consultants who provide various types of assistance to the company, with particular reference to legal, taxation, social insurance, accounting and organisational aspects, as well as any other subjects to whom data must be transmitted based on a specific legal regulation.

Transfer of personal data

Your data will not be transferred to EU member states or to countries not belonging to the European Union.

Rights of the data subject

Pursuant to articles 15 to 22 of Regulation (EU) no. 2016/679, with regard to the personal data you provided, you have the right, at any time, to request:

• access: you may request confirmation of whether data regarding you are being processed, as well as further clarification regarding the information provided in this disclosure, and you may ask to receive said data, within reason;
• rectification: you may request the rectification or supplementation of the data you provided us with, or which we are in possession of, if they are inaccurate;
• erasure: ou may request the erasure of data acquired or processed, if they are no longer required for our purposes, or – provided there are no disputes or controversies in progress – in the event of withdrawal of consent or opposition to processing, in the event of unlawful treatment, or when there is a legal obligation requiring erasure;
• restriction: you may request restriction of processing, if one of the conditions set forth in art. 18 of the GDPR applies; in such cases, your data will not be processed, except for storage, without your consent, with the exception of the provision set forth in para. 2 of the aforementioned article.
• objection: you may, at any time, object to the processing of your personal data based on a legitimate interest on our part, unless we have legitimate reasons for processing that prevail over yours: for example, in order to exercise our right to defence during a legal trial. Your objection will in all cases prevail over our legitimate interest in processing your data for marketing purposes;
• portability: you may ask to receive your data, or to have them transmitted to another data controller indicated by you, in a structured, commonly used and machine-readable format.

In addition, pursuant to art. 7, para. 3 of the GDPR, please note that you may, at any time, exercise your right to withdraw your consent, without prejudice to the lawfulness of any processing carried out based on consent given previously. Finally, please note that you have the right to file a complaint with the Supervisory Authority, which in Italy is the Italian Data Protection Authority.

To exercise the above rights, report problems or request clarification on the processing of your personal data, you can write to info@cvolo.it You may also send your requests by post, by writing to the Data Controller indicated above and specifying the object of your request.