Information pursuant to art. 13 of the European Union Regulation 2016/679 (GDPR)
HOLDER OF THE TREATMENT
The Data Controller is CLAM SAS, with registered office in Via 1 ° Maggio 10, CAP 20068 PESCHIERA BORROMEO MILANO (Italy), email email@example.com which guarantees compliance with the regulations regarding the protection of personal data by providing the following information about the processing of data communicated or otherwise collected.
PURPOSE AND LEGAL BASIS OF TREATMENT. LEGITIMATE INTERESTS PERSEINED
The data provided by the user through the form are collected, processed and stored for the following purposes:
a) fulfill the legal and tax obligations to which the Data Controller is subject;
b) within the scope of the execution of the contracts to which the Customer is a party or for the adoption of pre-contractual measures adopted at the request of the same;
c) in the eventuality that it is necessary to ascertain, exercise or defend a right in court, for the pursuit of the legitimate interest that the Controller has found to exist on the basis of the balancing of the interest;
d) for sending commercial communications on products and services similar to those already purchased;
e) in the presence of specific consent, for sending commercial communications on products and services, training courses, webinars, special promotions or telephone calls with operator.
f) for the statistical analysis of the use of the website without personal information.
g) in the case of sending curriculum vitae, exclusively for selection purposes.
The processing of the Data for the purpose a) and b) does not require the consent of the Customer as it is necessary to fulfill legal obligations or for the execution of contracts of which the Customer is a party or for the adoption of pre-contractual measures taken on request of the same, pursuant to art. 6, c. 1, lett. b) c) of the GDPR. The processing of data for the purposes sub c) does not require the consent of the customer as it is necessary for the pursuit of the legitimate interest of the owner, pursuant to art. 6, c. 1, lett. f) of the GDPR. The processing of data for the purpose sub d) does not require the consent of the customer, pursuant to art. 130, paragraph 4, of the Code.
For subf) some generic data are collected whose transmission is implicit in the use of Internet protocols. These data (eg domain names, IP addresses, operating system used, type of device, browser used) are not accompanied by any additional personal information and are used to obtain anonymous statistical information on the use of the site or to ascertain responsibility in case of hypothetical computer crimes.
The legal basis that legitimizes the processing of such data is the need to make usable the functionality of the site as a result of user access.
DATA CONFERENCE AND CONSEQUENCES IN CASE OF FAILURE TO PROVIDE
The provision of data for the purposes under a) and b) constitutes, respectively, a legal and contractual obligation. The provision of data for the purposes sub c), however, is optional but necessary for the pursuit of the legitimate interests of the holder indicated above. In all these cases, failure to provide the data will make it impossible for the owner to establish or continue in business with the customer.
The provision of the Data for the purpose sub e) is optional and their failure to provide or the lack of consent to their treatment will make it impossible for the Data Controllers to perform the functional activities to achieve the purpose in question.
ADDRESSEES OR CATEGORIES OF ADDRESSEES
The Data may be made accessible, brought to the attention of or communicated to the following persons, who may be appointed by the Data Controller, depending on the case, as responsible or in charge:
- companies in the group to which the Holder (controlling, controlled, affiliated), employees or collaborators belong to any title of the owner or of companies of the group to which the holder belongs;
- public or private entities, natural or legal persons, for which the Data Controller uses for the performance of the activities instrumental to the pursuit of the aforementioned purpose or to which the Data Controller is required to communicate the Data, pursuant to legal or contractual obligations.
The Data will be kept for a maximum period of time equal to the period of limitation of the rights that can be operated by or towards the Data Controller, as applicable from time to time.
RIGHTS OF ACCESS, CANCELLATION, LIMITATION AND PORTABILITY
The interested parties are granted the rights referred to in art. from 15 to 20 of the GDPR. By way of example, each interested party can therefore:
a) obtain confirmation of the processing of personal data concerning him or her;
b) if a processing is in progress, obtain access to personal data and information relating to the processing and request a copy of personal data;
c) obtain the correction of inaccurate personal data and the integration of incomplete personal data;
d) obtain, if one of the conditions foreseen by the art. 17 of the GDPR, the cancellation of personal data concerning him;
e) obtain, in the cases provided for by art. 18 of the GDPR, the limitation of the treatment;
f) receive personal data concerning him in a structured format, commonly used and readable by automatic device and request their transmission to another holder, if technically feasible.
OPPOSITION RIGHT AND RIGHT OF REVOCATION OF CONSENT
Each interested party has the right to object at any time to the processing of his personal data carried out for the pursuit of a legitimate interest of the Data Controllers. In the event of opposition, your personal data will no longer be processed, provided that there are no legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the interested party or for the assessment, exercise or defense of a right in court. In the event that consent is required for the processing of personal data, each interested party may also revoke at any time the consent already given, without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation. The consent can be revoked by writing an email to firstname.lastname@example.org.
DATA PROTECTION MANAGER
The owner has appointed the person in charge of data protection who can be contacted at the following e-mail address email@example.com or by regular mail sent to the following address: CLAM SAS, with headquarters in Via 1 Maggio 10, CAP 20068 PESCHIERA BORROMEO MILANO (Italy), att.ne Data protection manager.