Information on privacy and the processing of personal data pursuant to EU Regulation 2016/679
Lorenzo Giannaccini , based in Pietrasanta (LU), via Crociale n. 154, CF and VAT number 02582280463, e-mail address: email@example.com, pec address: firstname.lastname@example.org, as the "Data Controller" (hereinafter "Owner") of your personal data (of hereinafter, cumulatively, also "Data"), of which you are the "Interested", pursuant to EU Regulation 2016/679 (hereinafter "Regulation"), and of which Lorenzo Giannaccini comes into possession at today's meeting .
I would like to inform you that the EU Regulation 2016/679 ("Information on the processing of personal data") provides for the protection of persons and other subjects regarding the processing of personal data.
According to the indicated legislation, this treatment will be based on principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
Pursuant to EU Regulation 2016/679, therefore, I provide you with the following information:
1) Data source.
The data necessary for the performance of the contractual relationship between the Parties, as well as the data otherwise acquired as part of this activity, are collected by the Agency directly from the interested party and / or through third parties, as well as obtained by consulting some databases public and private external.
2) Availability of the Information.
The Agency provides the possibility to consult this information: a) every time it collects the personal data of the Customers; b) each time an express request is made to the Data Controller.
3) Purpose of data processing.
For its own institutional purposes, connected or instrumental to the activity, the Agency processes your data for the following purposes:
a) purposes connected to the obligations established by laws, regulations and community legislation as well as by provisions issued by Authorities legitimated by the law or by supervisory and / or control bodies;
b) contractual purposes, connected and instrumental to the establishment and management of relationships with customers, such as for example the acquisition of preliminary information for the possible conclusion of a contract;
c) promotion of the Agency's services by sending advertising material and any other form of electronic communication (sending e-mails, sms, mms, publication on social networks);
d) communication and / or transfer of data to third parties for the promotion and / or sale of products and services, using traditional and / or automated methods.
With reference to the purposes referred to in points c), d), I inform you that, at any time, you will be free to revoke the consent expressed in the manner specified in this statement.
4) Nature of the provision of data.
You have the right to know that the provision of data may be mandatory or optional, as well as having consequences in the event of a refusal.
In this regard, I specify that:
the provision of your consent for the purposes referred to in letters a) and b) of point 3 is mandatory as required by law or to follow up on contractual obligations (as indicated in art.6, paragraph 1, letter b and c ) of the Regulation). The refusal of your consent for the purposes indicated in letter b) of point 3) will therefore not allow the Agency to carry out the task you have given it or to reach the conclusion of the contract of which you are a party;
the refusal to process the Data for the purposes referred to in letters c), d) of point 3 is, on the other hand, optional, will not entail any prejudicial consequence and may be revoked by you at any time, limited to the purposes connected '' sending advertising material, carrying out market research or commercial communication, through telephone contacts or any other form of electronic communication (sending e-mails, sms, mms, whatsapp, publication on websites, social networks, etc. ), carried out directly by the Agency.
5) Particular data.
The art. 9 of the Regulation defines particular data suitable for revealing racial and ethnic origin, political opinions, religious or philosophical beliefs or membership in trade unions, as well as genetic and biometric data, data relating to health or sexual life or to the sexual orientation of the person. It is possible that the Agency may be in possession of particular data in relation to the specific operations requested by the interested party. In this case, the interested party has the right to express specific consent to the processing of their sensitive data and the Agency will be able to use them exclusively to the extent necessary to be able to perform the services and operations requested.
6) Data Retention.
The Data will be kept for the time necessary to manage the contractual relationship and fulfill legal obligations, with particular reference also to the anti-money laundering legislation. The Data are always processed in full compliance with the principle of proportionality of the processing (Article 5, paragraph 1, letter c) of the Regulation), on the basis of which all Personal Data and the various methods of their processing must be relevant and not exceeding the purposes pursued, in order to ensure adequate security and confidentiality, also to prevent unauthorized access or use of personal data and equipment used for processing, as well as lawful and correct processing.
7) Data retention times.
By virtue of the provisions of art. 13, paragraph 2, lett. a) of the Regulation, indications are given below regarding the retention times of the Data based on the different purposes of the processing:
• with reference to letters a) and b) of point 3, the Data are kept for the period necessary to manage the contract and fulfill legal obligations;
• with reference to letters c), d), of point 3, the storage times are set at 10 years.
8) Methods of data processing.
In relation to the purposes indicated in point 3, the Personal Data may also be processed by a "Manager", that is the natural person or company, also external to the Agency, to whom specific and defined tasks of management and control of the treatment may be entrusted. of the data, and by one or more "Appointee (s)", who will process or materially use the Data on the basis of the instructions received from the Owner or Manager (subjects who, if not expressly indicated in this information, are to be considered not still designated, and not necessarily to be designated if the processing is occasional, and whose data will be provided in the event of their designation).
Always in relation to the aforementioned purposes, the Data may be processed using manual, IT and / or otherwise automated tools according to logics strictly connected to the purposes of the processing and, in any case, in order to guarantee its security and confidentiality even in the case of processing using tools. remote communication.
9) Transfer of data abroad.
The Data could be transferred to countries of the European Union and to third countries (i.e. non-members of the European Union) exclusively for the purposes referred to in letters a) and b) of point 3. In this case, the intention to transferring personal data must be communicated to you in advance and authorized by you only if a level of data protection adequate to the European one is guaranteed.
10) Communication of Data.
The Data, by reason of the relationship established and in order to facilitate and allow the conclusion of the deal, may be communicated to: i) external collaborators; ii) other business agents in mediation (including companies) identified by the Data Controller in order to collaborate for the performance of the task entrusted by the Data Subject; iii) banks and other entities operating in the banking sector; iv) counterparties and their possible technicians and consultants; v) notaries for the purpose of preparing notarial deeds and / or related activities relating to the assignment given to the Data Controller; vi) companies and / or professionals who perform services for carrying out technical / cadastral / building / urban planning practices; vii) insurance for the purpose of stipulating policies relating to the assignment given to the Holder; viii) websites for real estate advertising purposes; ix) boards of arbitrators and, in general, all those public and private subjects to whom communication is necessary for the correct fulfillment of the purposes indicated in point 3); x) Supervisory / Control Bodies and other Authorities, for purposes related to the obligations established by law (anti-usury law, anti-money laundering legislation) and / or by regulations, as well as by provisions issued by the same Authorities.
All subjects, belonging to the categories to which the Data may be communicated, will use the Data as "owners" pursuant to the law or specific consent, in full autonomy, being unrelated to the original processing carried out at the Agency, or of "external managers". To know at any time the subjects, to whom your data will be communicated, it is sufficient that you request the updated list by writing to the Data Controller at the headquarters of the Agency.
Finally, your data will be known by all employees and collaborators of the Agency, designated managers and / or persons in charge of processing, in relation to the performance of the duties and tasks assigned to each.
The Data processed by the Agency will not be disseminated.
11) Rights of the interested party.
Within the limits and under the conditions set out in Articles 15 - 23 of the Regulations, the Agency guarantees and recognizes the exercise of the following rights:
• the right to access personal data in their paper and / or electronic archives;
• the right to request their rectification, updating and cancellation, if incomplete or incorrect, as well as to oppose their treatment for legitimate and specific reasons;
• the right to obtain the correction of inaccurate personal data without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration;
• the right to obtain the cancellation of personal data concerning him without undue delay if one of the reasons referred to in art. 17, paragraph 1 of the Regulations;
• the right to obtain the limitation of treatment when one of the hypotheses referred to in art. 18, paragraph 1 of the Regulations;
• the right to data portability within the limits and in the manner provided for by art. 20 of the Regulation.
You also have, at any time, the right to withdraw consent to the processing of your data without prejudice in any way to the lawfulness of the processing based on the consent given prior to the revocation, as well as to oppose the processing for marketing purposes at any time ( right to object).
You have the right to receive information relating to the action taken regarding one of the aforementioned requests or the effects arising from the exercise of one of the aforementioned rights, without undue delay and, in any case, at the latest within one month of receipt of the request, extendable, if necessary, by two months; he also has the right to lodge a complaint with a supervisory authority and to lodge a judicial appeal.
Without prejudice to the case in which the processing of the Data violates the general principles dictated by the Regulation, the exercise of these rights must be relevant and motivated and may not imply the revocation of the consent given or the request for cancellation of the Data provided by you for the conclusion and execution of the contract referred to in point 3) letters a) and b), to the extent and as long as the Data are necessary for this purpose.
In exercising your rights, you may confer, in writing, a proxy or proxy to individuals, organizations, associations or organizations; he may also be assisted by a trusted person. The Agency, to ensure the effective exercise of your rights, will take appropriate measures to facilitate access to the Data, to simplify the procedures and to reduce the time required to respond to your request.
Finally, it should be noted that you can lodge a complaint with the supervisory authority or the Guarantor for the Protection of Personal Data through the following means:
registered letter with return receipt addressed to the Guarantor for the protection of personal data, Piazza di Monte Citorio n. 121 00186 Rome;
fax to the number: 06 / 69677.3785.
All the relevant information on the complaints proposed by the interested party is available on the website of the Guarantor at www.garanteprivacy.it