INFORMATION ABOUT PERSONAL DATA PROCESSING
The company One More S.r.l.in the person of its legal representative, based in Largo Municipio, 40 – 39044 Egna (BZ) (hereinafter, “Holder“), acting as data controller, hereby informs users in accordance to art. 13 of the EU regulation no 2016/679 (hereinafter, “GDPR“) that their data will be processed according the following procedures and purposes.
1) Object of processing.
The Holder treats personal data and identifying information (such as name, social security number, date and place of birth, address, telephone, e-mail, bank details and payment), hereinafter referred to as “data“, potentially communicated by the users in virtue of a commercial relationship or to register for specific services (including subscription to newsletter or contact form or call-back filled in); navigation data: this information is not collected to be associated with identified individuals. These data are used only to obtain anonymous statistical information on site usage and to check its correct functioning. Because of total anonymity of browsing data processed by the Holder, these data are not subject to the discipline referred to GDPR (EU regulation # 679/2016).
2) Legal basis and purpose of data processing.
The processing of provided personal data will be:
1. to enforce any contract obligations and to fulfill any legal obligation to which the Holder is subject. Such treatment is necessary to fulfil the obligations that rely on the Holder and under possible contract between users and One More S.r.l , as well as to fulfil the consequent legal obligations.
2. to give feedback to specific requests, received through unsolicited email specifications.
3. for advertising purposes : when requested through specific format, it contemplates sending by e-mail newsletters having informative and communicative value, containing commercial messages and/or marketing material about products or services offered by the site owner.
The provision of data for the purposes set forth in paragraphs 1. and 2 is mandatory. In case data are not provided, it will not be possible to execute the contract or provide the requested information.
Instead, the provision of data and its consent for the purposes of paragraph 3, requiring users’ consent, is to be taken as optional and therefore may always be revoked. However, in case of no expression of users’ consent or of subsequent cancellation, it will not be able to implement contemplated service.
3) Treatment modality and filing period.
Users’ personal data is carried out by means of the operations indicated in art. 4 # 2) GDPR namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, use, limitation, communication, cancellation and destruction of data. Users’ personal data are subjec to both paper and electronic/digital processing.
The Holder will process personal information:
(i) in force of the points 1. and 2. of the previous paragraph for as long as necessary to fulfil the above mentioned purposes, except for cases when the Holder needs keeping data for longer periods that may be related to the necessity to establish, exercise or defend a legal claim or, whenever the courts exercise their functions.
(ii) in the case of information for advertising purposes (under point 3), until the users inform about the opt-out option.
4) Categories of recipients of the personal data.
Within the limits and for the purposes referred to in paragraph 2), in order to give specific execution and for functional reasons of the same, in addition to managers and/or sub-responsible for treatment (if appointed), users’ personal data may be communicated as well as to people acting under the authority thereof, or of the holder (internal employees and contractors duly instructed), to organizations and public Institutions, to the subjects to whom data communication must be made in fulfilment of the obligation imposed by a law, by regulations or by Community legislation or in order to comply with a court order, and to any other third parties, in cases expressly provided for by law, or if case the communication will be necessary for the protection of the holder in court.
In any case, users may request to be informed about data relating to directly o sub-responsible people, possibly appointed, by forwarding a written request to contacts provided in section 7.
Like many other web sites, the web site One More S.r.l. (www.one-more.info) also uses third-party cookies – even third party’s one whenever appropriate – and similar technologies.
6) User rights.
As a user, you have the rights acknowledged by art. 15, 16, 17, 18, 20 and 21 of GDPR and precisely the rights to:
a) access : the interested party has the right to obtain from the holder the confirmation whether or not an ongoing processing of personal data relating to him/her and, if so, obtain access to personal data, to information relating to the processing goals, the categories of processed personal data, the recipients or categories of recipients, the filing period (if possible), the right of rectification, of cancellation, limitation, opposition, claim to authority;
b) correction: the interested party has the right to obtain from the holder of the treatment amendment of inaccurate personal data concerning him/her without undue delay;
c) cancellation (“right to be forgotten“): the interested party has the right to obtain from the Holder of the treatment the deletion of data concerning it without undue delay in cases provided for in article 17 of GDPR ;
d) limitation of treatment: the interested party has the right to obtain from the holder of the treatment the restriction of the processing of personal data where the hypothesis of art. 18 of GDPR;
e) data portability: the interested party has the right to receive in a structured format, commonly used and readable by an automated devise personal data provided to a Holder and has the right to transmit such information to a different treatment Holder without being prevented by the Holder who provided them in accordance to what is disciplined by art. 20 of GDPR;
f) opposition: the interested party has the right to object at any time to the processing of personal data concerning it in the cases contemplated in article 21 of GDPR;
g) revocation: the interested party has the right to withdraw the authorization issued to the holder at any time without affecting the lawfulness of the processing based on consent given prior to the revocation;
h) put forward a claim to the controlling authority (italian privacy supervisor).
7) How to exercise the rights.
Users have the right to exercise their rights at any time by sending:
– registered mail to One More S.r.l. , Largo Municipio # 40 – – 39044 Egna (BZ);
-an email to: firstname.lastname@example.org