Privacy

DEAS S.R.L., a Company with head office in CASTELBOLOGNESE (RA), VIA DELL’INDUSTRIA N.49, in its capacity as Personal Data Controller pursuant to art. 4 of EU Regulation 2016/679, informs you pursuant to art. 13 of said Regulation, that your personal data will be processed manually and/or by automated means for the purposes hereinafter indicated.

Purposes of the data processing, legal basis and any third party recipient of the data.

Your personal data will be processed for purposes related to the management of ordinary business relationships and, specifically, for the compilation of registry lists, customer/supplier bookkeeping, invoicing, communications by paper or automated means.

Your data may be used for internal statistical purposes and market research.

Your data may also be disclosed to third parties, for technical and operational requirements strictly connected to the purposes set out above and particularly to the following categories of subjects:

1. entities, professionals, companies or other structures appointed by us for processing related to the fulfilment of administrative, accounting and management obligations as required by the ordinary performance of our economic activity, also for purposes of debt recovery;
2. public authorities and administrations for the purposes related to the fulfilment of legal obligations;
3. banks, financial institutions or other subjects requiring transfer of the aforementioned data in connection with the performance of our company’s activity and in relation to the fulfilment, on our part, of the contractual obligations towards yourselves;
4. suppliers of installation, assistance and maintenance services for computer and telematic systems and facilities, and of all the services functionally connected and necessary to the performances under the contract.

Any failure to provide us with your personal data will make it impossible, on our part, to fulfil contracts and other related obligations, as well as to properly manage our mutual business relationship.

We point out that we may send commercial and/or promotional communications to you concerning products and services similar to those covered by the existing contractual relationship, unless you deny consent thereto.

Legal basis

Your personal data will be processed for performance of a contract entered into with you or for implementing of pre-contractual measures taken at your request.

Sending of commercial and/or promotional communications related to products and services similar to those covered by the existing contractual relationship is based on the legitimate interest of the Data Controller.

Data retention period

Your personal data will be stored for the time strictly necessary to carry out the above-mentioned purposes and to fulfil the obligations provided for by law.

Rights of the Data Subject

Pursuant to articles 13, paragraph 2, and 15 to 21 of the Regulation, we inform you that in relation to the processing of your personal data you may exercise the following rights:

a) Right to obtain access to personal data and to the following information:

• confirmation as to whether or not your personal data are currently being processed;
• the purposes of the processing;
• the categories of personal data;
• the recipients or categories of recipients to whom the personal data have been or will be disclosed;
• where the data are not collected from the data subject, all information available on their origin;
• the existence of an automated decision-making process, including profiling;
• a copy of the personal data undergoing the processing.

b) Right to rectification and integration of personal data;

c) Right to erasure of data («right to be forgotten») if one of the following grounds exists:

• the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise treated;
• the data subject withdraws consent on which the processing is based and there is no other legal ground for the processing;
• the data subject objects to the processing and there are no overriding legitimate grounds for the processing;
• the personal data have been unlawfully processed;
• the personal data have to be erased for compliance with a legal obligation in the Union or Member State law to which the controller is subject;
  Where the data controller has made the personal data public and is obliged to erase them, said data controller shall inform the other controllers that are processing said personal data about the data subject’s request to erase any links to, or copy or replication of those personal data.

d) Right to restriction of processing when:

• the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
• the processing is unlawful and the data subject objects the erasure of the personal data and requests the restriction of their use instead;
• the controller no longer needs the personal data for the purposes of the processing, but it is required by the data subject for the establishment, exercise or defence of legal claims;
• the data subject has objected to the processing, pending the verification whether the legitimate grounds of the controller override those of the data subject.

e) Right to lodge a complaint with the Data-Protection Supervisor, following the procedures and indications published on the official website of the Authority garanteprivacy.it.

f) Right to the portability of data of the data subject or the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and possibly to transmit said data to another controller, when the processing is based on consent or on a contract and is carried out by automated mean Where technically feasible, the data subject shall have the right to have his/her personal data transmitted directly from one controller to another.

g) Right to object at any time to processing of personal data concerning him or her, including profiling, particularly in the case where:

• processing is based on the legitimate interest of the data subject, after statement of the grounds for such objection;
• personal data are processed for direct marketing purpose

h) The data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, except in cases where the decision: is necessary for entering into or for performance of a contract between the data subject and a data controller, is authorised by the Union or Member State law to which the controller is subject or is based on the data subject’s explicit consent.

i) Right to withdraw consent at any time.
The exercise of rights is not subject to any form constraint and is free.

Procedure for the exercise of rights

The data subject may at any time exercise his/her rights by sending:

• a registered letter with return receipt to DEAS S.R.L. CASTELBOLOGNESE (RA), VIA DELL’INDUSTRIA N.49;
• an email to the address [email protected].

Data Controller

The Data Controller is DEAS S.R.L.. Contact details: SCARDOVI DOMENICO.