We wish to inform you that EU Regulation 2016/679 (“European Regulation on the Protection of Personal Data”) provides for the protection of persons and other subjects and compliance with the processing of personal data.
Pursuant to articles 13 and 14, we therefore provide you with the following information.
Contact information for the Data Controller and Data Processor
Owner and Responsible for the protection of Personal Data: DAT immobiliare srl, Via Mestre 12, 21050 Cairate (VA), email@example.com.
Purpose, legal basis of the processing for which the data is intended
Your Personal Data is used for the purpose of carrying out the service or provision requested and is communicated to third parties only if this is necessary for this purpose. The User's Data will be processed with IT/telematic tools to provide the following services:
– sending newsletters, as well as to carry out statistical and market studies and research;
– submission of editorial content, e-books, white-papers, guides and monographs;
– participation in events and conferences;
– sending news or commercial initiatives;
– sending offers and commercial proposals;
– sending of commercial quotations;
– fulfilment of requests for products and services;
– fulfilment of legal and tax obligations.
Source from which the personal data comes, nature and purpose
The Data Controller processes your Personal Data by adopting appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of Personal Data. The Processing is carried out using IT and/or telematic tools, with organizational methods and logic strictly related to the purposes indicated.
Scope of communication and dissemination of data
In addition to the Data Controller, in some cases, categories of persons involved in the organization (administrative, commercial, marketing, legal, system administrators) or external parties (such as third-party technical service providers, postal couriers, hosting) may have access to the Personal Data. providers, IT companies, communication agencies) also appointed, if necessary, as data controllers by the Data Controller. The updated list of Managers can always be requested from the Data Controller.
Your data will be stored as long as you are our Customer and for any subsequent periods to comply with legislative or tax obligations. You can always request the interruption of the Processing or the deletion of the Data by contacting the Owner.
Rights of the interested party (EU Reg. 2016/679)
Art. 15 (right of access), 16 (right of rectification)
The interested party has the right to obtain confirmation from the Data Controller as to whether or not Personal Data concerning him or her is being processed and, in this case, to obtain access to the personal data and the following information:
a) the purposes of the Processing;
b) the categories of Personal Data in question;
c) the recipients or categories of recipients to whom the Personal Data have been or will be communicated, in particular if recipients are from third countries or international organizations;
d) the expected retention period of the Personal Data or, if this is not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the Data Controller to rectify or delete Personal Data or to limit the processing of personal data concerning him or to oppose their Processing;
f) the right to lodge a complaint with a supervisory authority;
g) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such Processing for the interested party.
Right referred to in art. 17 (right to cancellation)
The interested party has the right to obtain from the Data Controller the deletion of personal data concerning him without unjustified delay and the Data Controller has the obligation to delete the Personal Data without unjustified delay, if one of the following reasons exists:
a) the Personal Data is no longer necessary with respect to the purposes for which it was collected or otherwise processed;
b) the interested party withdraws the consent on which the Processing is based in accordance with Article 6, paragraph 1, letter a), or Article 9, paragraph 2, letter a), and if there is no other legal basis for the Processing ;
c) the interested party opposes the Processing pursuant to Article 21, paragraph 1, and there is no overriding legitimate reason to proceed with the Processing, or opposes the Processing pursuant to Article 21, paragraph 2;
d) the Personal Data has been processed unlawfully;
e) the Personal Data must be deleted to comply with a legal obligation established by Union or Member State law to which the data controller is subject;
f) the Personal Data was collected in relation to the offer of information society services referred to in Article 8, paragraph 1 of EU Reg. 2016/679.
Right referred to in art. 18 (right to limit processing)
The interested party has the right to obtain from the Data Controller the limitation of the Processing when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of the Personal Data, for the period necessary for the Data Controller to verify the accuracy of such Personal Data;
b) the Processing is unlawful and the interested party opposes the deletion of the Personal Data and instead requests that its use be limited;
c) although the Data Controller no longer needs them for the purposes of the Processing, the Personal Data is necessary for the interested party to ascertain, exercise or defend a right in court;
d) the interested party has objected to the Processing pursuant to Article 21, paragraph 1, EU Regulation 2016/679 pending verification regarding the possible prevalence of the legitimate reasons of the Data Controller with respect to those of the interested party.
Right referred to in art.20 (right to data portability)
The interested party has the right to receive the Personal Data concerning him/her provided to a Data Controller in a structured, commonly used and machine-readable format and has the right to transmit such Data to another Data Controller without impediments from part of the Data Controller.
Revocation of consent to processing
The interested party has the right to revoke consent to the Processing of his Personal Data by contacting the Data Controller.