The company One More S.r.l.in the person of its legal representative, based in Largo Municipio # 40 – 39044 Neumarkt (BZ) (hereinafter, “Holder“), acting as data controller, hereby informs users in accordance to art. 13 of the EU regulation no 2016/679 (hereinafter, “GDPR“) that their data will be processed according the following procedures and purposes.
The data Holder processes personal and identifying information (such as name, surname, full name, telephone, e-mail), hereinafter “data“, communicated by users.
2) Legal basis and purpose of data processing.
Processing of provided personal data is intended with the goal to proceed with the purchase of products offered by our company, to execute a contract and/or establish pre-contractual measures, in addition to make possible to fulfill the following and possible legal responsibilities.
Providing data for such scopes is necessary in order to proceed with the purchase of the products offered by our company. Should it miss, it will not be possible to proceed with the purchase
3) Treatment modality and filing period.
Users’ personal data is carried out by the operations indicated in art. 4 # 2) GDPR namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, use, limitation, communication, cancellation and data destruction. Your personal data are processed both in paper and by electronic/digital ways.
The Holder will treat personal information as long as necessary to fulfill the purposes referred to in paragraph 2) for 10 years at maximum, and except in cases when the Holder needs to file such data for longer periods, connected with the need to establish, exercise or defend a legal claim or in case when the courts exercise their functions.
4) Categories of recipients of the personal data.
Within the limits and for the purposes referred to in previous paragraphs, in order to give specific execution and for functional reasons of the same, in addition to managers and/or sub-responsible for treatment (if appointed), users’ personal data may be communicated as well as to people acting under the authority thereof, or of the Holder (internal employees and contractors duly instructed), to organizations and public Institutions, to the subjects to whom data communication must be made in fulfilment of the obligation imposed by a law, by regulations or by Community legislation or in order to comply with a court order, and to any other third parties, in cases expressly provided for by law, or if case the communication will be necessary for the protection of the holder in court.
In any case, users may request to be informed about data relating to directly o sub-responsible people, possibly appointed, by forwarding a written request to contacts provided in section 6.
5) USER rights.
As a user, you have the rights acknowledged by art. 15, 16, 17, 18, 20 and 21 of GDPR and precisely the rights to:
a) Access : the interested party has the right to obtain from the holder the confirmation whether or not an ongoing processing of personal data relating to him/her and, if so, obtain access to personal data, to information relating to the processing goals, the categories of processed personal data, the recipients or categories of recipients, the filing period (if possible), the right of rectification, of cancellation, limitation, opposition, claim to authority;
b) Correction: the interested party has the right to obtain from the holder of the treatment amendment of inaccurate personal data concerning him/her without undue delay;
c) Cancellation (“right to be forgotten“): the interested party has the right to obtain from the Holder of the treatment the deletion of data concerning it without undue delay in cases provided for in article 17 of GDPR ;
D ) Limitation of treatment: the interested party has the right to obtain from the holder of the treatment the restriction of the processing of personal data where the hypothesis of art. 18 of GDPR;
e) Data portability: the interested party has the right to receive in a structured format, commonly used and readable by an automated devise personal data provided to a Holder and has the right to transmit such information to a different treatment Holder without being prevented by the Holder who provided them in accordance to what is disciplined by art. 20 of GDPR;
F) Opposition: the interested party has the right to object at any time to the processing of personal data concerning it in the cases contemplated in article 21 of GDPR;
G) Revocation: the interested party has the right to withdraw the authorization issued to the holder at any time without affecting the lawfulness of the processing based on consent given prior to the revocation;
H) Put forward a claim to the controlling authority (italian privacy supervisor).
6) How to exercise the rights.
Users have the right to exercise their rights at any time by sending:
– registered mail to One More S.r.l. , Largo Municipio # 40 – – 39044 Neumarkt (BZ);
-an email to: email@example.com