E-mail Newsletter – INFORMATION ON THE PROCESSING OF PERSONAL DATA
This information is provided pursuant to art. 13 of EU Regulation 2016/679 of the European Parliament and of the Council of 27.04.2016 concerning the protection of natural persons with regard to the processing of personal data, as well as the free circulation of such data (so-called “General Regulations on the processing of personal data” or “GDPR”) and of the D. Lgs. 30.06.2003, n. 196, as amended and supplemented by Legislative Decree 10.08.2018, n. 101 (“Code regarding personal data” or “Privacy Code”) from: Veredus s.r.l. – Via delle Industrie 4 – 31010 Oné di Fonte (TV – ITALY) – VAT: IT_03571030265 – info@vredus.com in the capacity of Data Controller (hereinafter “Holder“).
Object of the treatment
The Holder processes the personal data of the user that are provided during registration on the website, on paper and / or telephone collection. In particular, the Holder deals with: i. personal data identifying (by way of example, name, surname, tax code, VAT number, email address, telephone number – hereinafter, “personal data” or even “data”) provided by you directly with registration in the manner described above; ii. data not directly supplied by you – and in any case acquired within the limits of the provisions of art. 14, paragraph 5, GDPR – whose transmission is connected to the use of Internet communication protocols (by way of example, access to the page, amount of data transferred, status message to accesses occurred, session ID numbers, IP addresses, URL addresses, etc.).
Legal basis and purpose of the processing
Your personal data are processed only subject to your specific and unequivocal consent (see articles 6, letter a, 7, GDPR), for the following purposes:
1- send newsletters, commercial communications and / or advertising material on products and / or services offered by the Data Controller (eg invitations to events) through any means of electronic communication (eg email, telephone calls with or without operator, text messages, social networks, etc.) and by traditional methods.
2- Profiling. This activity, which is relevant for privacy purposes if it concerns individuals, aims to better understand customers aiming to align Veredus srl with current and potential demand, measure the results of specific promotions, limit the sending of promotional communications not relevant to the single probable expectations and needs.
Methods of processing
The processing of your personal data is carried out by means of the operations indicated or any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, preservation , adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction. The processing of your data will be based on the principles of correctness, lawfulness and transparency and can also be done through automated methods designed to store, manage and transmit them and will take place through appropriate tools, as far as reason and state of the art, to ensure safety and confidentiality through the use of appropriate procedures that avoid the risk of loss, unauthorized access, illicit use and dissemination. Personal data may be stored both on computer media and on paper, as well as on any other type of support deemed most suitable for processing.
Period of data retention
The Data Controller will process the data for 10 years from the date of data collection or acquisition of consent in the case of marketing purposes;
Access to data
The personal data processed by the Data Controller will not be disclosed, or will not be disclosed to indeterminate subjects, in any possible form, including that of their availability or simple consultation. Instead, they may be made accessible to workers and / or collaborators who work in dependencies and for the Data Controller and / or to some external subjects who have sufficient guarantees that they have adopted appropriate legal, organizational and technical measures in such a way that the treatment satisfies the requirements of the GDPR and guarantee the protection of the rights of the data subject. In particular, your data may be made accessible to: i. employees and collaborators of the Owner, in their capacity as internal managers, delegates, designated and / or authorized to process personal data and / or System Administrators; ii. third-party companies or other subjects, (by way of example, credit institutions, professional firms, consultants, insurance companies, etc.) who carry out outsourcing activities on behalf of the Owner, in their capacity as external managers.
Communication of data
Your data may also be disclosed, to the extent strictly necessary, to parties who for purposes of processing orders or to process other requests relating to the contractual relationship with the Data Controller, must provide goods and / or perform services or services. The Data Controller may also communicate your data to authorized persons to access it under the provisions of the law, regulations, community regulations, the judicial authorities, as well as to all other subjects to whom the communication is mandatory by law.
Data transfer
The management and storage of personal data will be carried out on servers of the Owner and / or third-party companies appointed and duly appointed as data processors, located within the European Union, or in compliance with the provisions of Articles 45 et seq., GDPR. Currently the servers are located in Italy. The data will not be transferred to outside the European Union. In any case, it is understood that, if it becomes necessary to transfer the location of the servers, in Italy and / or the European Union and / or non-EU countries, this movement will always take place in accordance with the Articles. 45 et seq., GDPR. In this case, however, the Joint Data Controllers ensure from now on that the transfer of non-EU data will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements guaranteeing an adequate level of protection and / or adopting the standard contractual clauses. provided by the European Commission.
How to exercise rights
You have the right to ask the Owner:
i. access to data concerning you, their correction or cancellation;
ii. the integration of incomplete data;
iii. the limitation of treatment;
iv. to receive data in a structured format, commonly used and readable by automatic device;
v. to revoke any consent given to the processing of your personal data at any time and to object, in whole or in part, to the use of data; you. to propose a complaint to the Authority, as well as to exercise the other rights recognized by the applicable European and Italian legislation.
You can exercise your rights at any time by contacting the Data Controller:
– by registered letter A / R: VEREDUS SRL – Via delle Industrie 4 – 31010 – Onè di Fonte (TV) – Ital
– by e-mail: info@veredus.com