PRIVACY POLICY GDPR

Information on the processing of personal data (pursuant to art. 13 EU Regulation 2016/679) The current legislation on the processing of personal data defined in accordance with the provisions contained in the EU Regulation 2016/679 of 27 April 2016 concerning the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data (General Data Protection Regulation, hereinafter the "EU Privacy Regulation") contains provisions aimed at ensuring that the processing of personal data is carried out in compliance with the rights and fundamental freedoms of individuals, with particular regard to the right to protection of personal data.

 

1. Purpose of the Treatment and legal basis

The processing of personal data is aimed at: 1) requesting and sending journalistic communications; 2) request and send promotional communications; 3) sending invitations to participate in press conferences and / or presentations; 4) billing service; 5) management of administrative writings; 6) receive newsletters; 7) marketing activities; 8) conciliation management; 9) sending information request online; 10) management of assistance for the services offered; 11) execution of the contracts stipulated with you; 12) ordinary management of commercial relations; 13) protection of contractual rights. Processing of personal data for promotional / commercial purposes: personal data may also be used for purposes of customer profiling, information and commercial promotion of products and services, as well as surveys on the satisfaction with the quality of those you have already received and market research. In such cases, the processing of personal data will be based solely on your free and specific consent. Your consent may be revoked at any time without affecting the lawfulness of the processing carried out before the revocation. All the data referred to in point 2 below will be kept for: 10 years for data (common and sensitive) collected for the purpose of: requesting and sending journalistic communications; request and sending of promotional communications; conciliation management; sending information request online; assistance management for the services offered. 5 years for data (common and sensitive) collected for the purposes of: online billing service; billing service; claims management; receive newsletters; marketing activities; sending information request online; management of assistance practices (via email or telephone contact); lost property management; Any processing of sensitive data by the Owner is based on the assumptions set forth in art. 9.2 lett. a) of the GDPR.

 

2. Types of personal data processed

Within the limits of the aforementioned purposes, the Data Controller will process the following categories of personal data: common personal data concerning personal data; personal data belonging to the particular categories referred to in art. 9 of the GDPR (sensitive data) and consisting of photographs and judicial data.

 

3. Data processing

For the purposes of transparency and in compliance with the principles set forth in art. 12 of the GDPR, we remind you that "processing of personal data" means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration , the organization, the structuring, the conservation, the adaptation or the modification, the extraction, the consultation, the use, the communication through transmission, diffusion or any other form of making available, the comparison or the interconnection , limitation, cancellation or destruction. The processing of personal data may be carried out with or without the use of electronic or automated means and will include, in compliance with the limits and conditions set by the GDPR, also the communication towards the subjects referred to in point 6 below.

 

4. Data processing methods

The personal data subject to processing are: processed in a lawful and correct manner by subjects authorized to carry out these tasks, constantly identified subjects, appropriately instructed and made aware of the constraints imposed by the GDPR; collected and recorded for specific, explicit and legitimate purposes, and used in other processing operations in terms compatible with those purposes; exact and, if necessary, updated; relevant, complete and not excessive in relation to the purposes for which they were collected or subsequently processed; kept in a form that allows the identification of the interested party for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed; processed with the support of paper, computer or electronic means and with the use of security measures designed to guarantee the privacy of the interested party to which the data relate and to avoid undue access to third parties or unauthorized personnel.

 

5. Nature of conferment

The provision of some personal data is necessary. In case of failure to provide the personal data requested or in the event of opposition to the processing of the personal data provided, it may not be possible to proceed with the request and / or management of the requested service and / or the management of the related contract. Subject to your express consent, the personal data you provide may be used to carry out marketing activities, or to carry out automated activities aimed at profiling and analyzing consumption habits and choices such as - by way of example - frequency, reason , how to use it; failure to consent to the processing of data and contact details for the purposes indicated does not prevent the execution of the contractual relationship. As provided by the Guarantor for the protection of personal data, the consent given for the performance of marketing activities with automated contact methods (for example text messages, mms, faxes, fonie, e-mail, web applications) also extends to the modalities traditional contact details (paper mail or telephone call with operator). Similarly, opposition to the development of marketing activities with automated contact methods also extends to traditional contact methods. Your right to provide consent or exercise the right to object in relation to only one of the two methods of performing marketing activities remains unaffected.

 

6. Data communication and Data Transfer Abroad

The personal data collected are processed by the appointed personnel who need to be aware of them when carrying out their activities and by external subjects who may act as co-owners or data processors, depending on the case. The Data Controller also reserves the right to transfer personal data to a third country on the basis of the adequacy decisions of the European Commission or on the basis of the adequate guarantees provided for by current legislation. The data will not be disclosed.

 

7. Rights of the interested party

Pursuant to Articles 15-20 of the GDPR, you may exercise specific rights, including the right to obtain access to personal data in an intelligible form, to rectify, update or delete them. You will also have the right to obtain the treatment limitation from the Company, you may also object to the processing of your data for legitimate reasons. In the event that it considers that the treatments concerning you violate the rules of the GDPR, you have the right to lodge a complaint with the Authority for the Protection of Personal Data pursuant to art. 77 of the GDPR.

 

8. Data Controller and Data Protection Officer (DPO)

Data controller, pursuant to art. 4.1.7 of the GDPR is an independent production organization, ACT PRODUCTION, with registered office in Via G. Almirante, 34 - 84096, Montecorvino Rovella (SA). Responsible for the protection of personal data (also "DPO") is Dr. Antonio Palo, legal representative of the institution. To exercise the rights pursuant to the GDPR referred to in point 6 of this statement, you can contact the DPO. All requests for information must be made to the same concerning the identification of the Data Processors acting on behalf of the Data Controller. The DPO may be contacted with a communication to be sent by post to the above mentioned ACT PRODUCTION registered office or by email to the following email address: actproduction@pec.psff.it. The complete list of Managers and the categories of data processors are available upon request.