(ex. art. 13 Regulation EU 2016/679)
Introduction
The company AGE web solutions S.r.l. with registered office in Ferrara at via Cairoli 32, as the Data Controller, pursuant to Articles 4 (no. 7) and 24 of EU Regulation 2016/679 of April 27, 2016, regarding the protection of natural persons with regard to the processing of personal data (hereinafter also referred to as the “EU Regulation”), informs you, pursuant to Article 13 of the EU Regulation, that it is the controller of your personal data and that it will proceed with the related processing for the purposes and in the manner indicated below. Personal data processing means any operation (or set of operations) performed with (or without) the aid of automated processes and applied to personal data (or sets of such data), such as: collection, recording, organization, structuring, storage, adaptation, alteration, extraction, consultation, use, communication by transmission (including electronic), dissemination or any other form of making available, comparison or interconnection, restriction, erasure or destruction. Therefore, we inform you that such data will be processed manually and/or with the support of IT or telematic means for the purposes indicated below.
DATA FOR WHICH THE CONFERRAL IS REQUESTED
The personal data provided by the customer and subject to processing in accordance with EU Regulation 2016/679 on Privacy are merely by way of example:
- First and last name
- Residence
- Phone numbers
- Email addresses
- Password
- Unique identification codes
- I'm sorry, but I need the specific text you would like me to translate. Please provide the Italian text, and I'll be happy to assist you with the translation.
and any other data that AGE web solutions S.r.l. deems useful to process during the entire course of the relationships (both commercial and technical) in place between the parties.
PURPOSE OF PROCESSING
The pursued objective is both the management of the existing commercial relationships between the parties and the management (mainly through cloud services provided directly by AGE web solutions S.r.l. through its own personnel) of worker safety in the workplace, safety management systems, quality and environment, and any other information directly related to the products/services provided by the company to the client. Therefore, by way of example only, the data controller may be called upon to manage on behalf of the client data such as, for example:
- the employee registry of the client
- the risks to the health, safety, and environment of workers
- data related to training, information, and instruction of workers
- data (non-sensitive) related to occupational medicine (excluding the medical record whose database is encrypted)
- I'm sorry, but I need the specific text you would like me to translate. Please provide the Italian text, and I'll be happy to assist you with the translation.
Profiling
The personal data provided by the customer may be used by AGE web solutions S.r.l. to profile the data subject, that is, to analyze or predict aspects concerning, for example: the economic situation, personal preferences, interests, reliability, behavior, location, etc. of said customer (whether a natural or legal person) solely in relation to the existing commercial (or technical) relationships between the parties.
RECIPIENT OR CATEGORIES OF RECIPIENTS TO WHOM THE DATA MAY BE COMMUNICATED
The data may be communicated to any other third party when the communication is mandatory by law or to properly fulfill services provided for by EU Regulation 2016/679 on Privacy or by the conditions related to the application of any promotional/advertising initiatives aimed at the customer itself. With reference to art. 13, paragraph 1, letter (e) of the EU Regulation, we proceed to indicate the subjects (or categories of subjects) who may become aware of the user's personal data as data controllers (or processors) of the processing. Specifically:
- employees of the Data Controller appointed and assigned to the management of the processing itself
- third parties involved by the Data Controller for the organization and management of any products and/or services from time to time, appointed as persons in charge of the processing itself.
However, in any case, the customer's personal data will never be subject to dissemination.
DATA PROCESSING METHODS
The processing of personal data collected is carried out using the following tools (in order to ensure the security and confidentiality of the collected data, as well as full compliance with the provisions of EU Regulation 2016/679 on Privacy):
- paper
- IT specialists
- telematic
The personal data collected may be:
- collected directly from the customer/supplier
- collected from third parties
- collected from public registers, lists, acts, or documents accessible to anyone.
NATURE OF THE ASSIGNMENT
The authorization for the provision of personal data is mandatory for all processing related to legal obligations. Such provision is optional if the data is collected for:
- the conduct of market research
- the sending of advertising material
- the conduct of promotional activities.
It is understood that a refusal to provide the same data is a binding condition for the effective implementation of the contractual obligations undertaken, while any refusal to respond for optional data will result in AGE web solutions S.r.l.'s inability to:
- conduct market research
- send advertising material to the customer
- carry out promotional activities on the customer.
PERSONAL DATA RETENTION PERIOD
The data will be retained for the periods defined by the relevant regulations, which are specified below pursuant to Article 13, paragraph 2, letter (a) of the EU Regulation. Personal data will be retained for the duration of the processing carried out. The five-year or ten-year retention periods for civil, accounting, and tax documents and related data, as provided by current laws, remain unchanged. Finally, with specific reference to personal data subject to processing for the purpose of potential customer profiling, this data will be retained for 12 months or a shorter period, should the specific consent be revoked by the data subject. Pursuant to Article 13, paragraph 1, letter (f) of the EU Regulation, it is informed that all collected data will not be transferred to a third country or to an international organization, neither within nor outside the European Union.
EXERCISE OF RIGHTS BY THE DATA SUBJECT
Pursuant to Articles 13, paragraph 2, letters (b) and (d), 15, 18, 19, and 21 of EU Regulation 2016/679, the data subject is informed that:
- has the right to request from the Data Controller access to personal data, the rectification or deletion of the same, or the limitation of the processing concerning him or to object to their processing, in addition to the right to data portability.
- has the right to file a complaint with the Guarantor for the protection of personal data (following the procedures and guidelines published on the official website of the Authority at www.garanteprivacy.it) if these data are processed by the Data Controller in a manner that is inconsistent with the provisions of EU Regulation 2016/679 on Privacy.
- Any corrections, deletions, or limitations of processing made at the request of the data subject, unless this proves impossible or involves a disproportionate effort, will be communicated by the Data Controller to each of the recipients to whom the personal data have been transmitted. The Data Controller may inform the data subject of such recipients if the data subject requests it.
- the exercise of the aforementioned rights is not subject to any formal constraints and is completely free of charge
- Articles 15, 16, 17, 18, 19, 20, 21, 22, and 23 of the EU Regulation can be consulted at the following link: https://eur-lex.europa.eu/
COMPLAINT POSSIBILITY TO THE CONTROL AUTHORITY
The holder of the personal data processed, in the event of a use of their data that is different from what is stated in this notice, may, at any time, take action to file a complaint with the competent authority in order to stop the processing.
DATA CONTROLLER AND PROCESSING MANAGER
The data controller for personal data for AGE web solutions S.r.l. is identified in the person of its legal representative pro tempore (who can be contacted either via PEC at the address dpo@agews.com or at the addresses listed in the "Where we are" section of this website).