Privacy Policy

INFORMATION NOTICE AND CONSENT REQUEST FOR PERSONAL DATA PROCESSING

under Art. 13 and 14 of EU Regulation 2016/679

REV.01 2019

Under articles 13 and 14 of (EU) Regulation 2016/679, we inform you that the personal data supplied or obtained are processed by Camardo S.p.a. in view of despatching information material or communication connected to the activity of the aforesaid.

DATA PROCESSOR

Camardo S.p.a. (P.I. 00074220708):

The Data Processor guarantees the observance of the rules on data protection.


NATURE OF PROVISION AND TYPES OF DATA COLLECTED

The personal data collected include name, surname, telephone number, email address as well as other contact data.

Thedata subject shall supply the data directly, via paper or multimedia means, to the indicated staff working for the data processor or to staff collaborating within events or shows..


PURPOSES OF DATA PROCESSING AND LEGAL BASIS

The purposes of personal data processing are as follows:

  1. Client billing for the products bought. Legal basis article 6 letter b of EU Regulation 2016/679;

  2. Direct or indirect marketing, carried out directly by the Data Processor or by a Controller, such as sending – including via e-mail, text messages, MMS and Whatsapp – advertising material and information or publicity notifications for goods and services supplied and/or promoted by the Data Processor or business partners including free samples and gifts.

The legal basis legitimizing the above – mentioned processing is the consent freely given by the data subject– Article 4 comma 11 and article 6 letter a) of EU Regulation2016/679.

AUTHORIZED SUBJECTS FOR PROCESSING, CONTROLLERS AND DATA COMMUNICATION

The processing of the collected data is carried out by staff employed by the Data Processor or by third party expressly appointed as Controllers by Camardo S.p.a. chosen within agencies or associations supplying connected and instrumental services in the achievement of the aforesaid purposes. The data supplied will not be communicated to third parties, apart from those considered here and will not be communicated to bodies based in other countries and/or international organisations, without informing the data subject and obtaining his or her explicit consent.

Data is published exclusively anonymously or in aggregate, and only in such a way that the data subject cannot be identified, be it directly or indirectly.

STORAGE PERIOD

Fiscal data collected for billing is stored for the period established by law (at most 10 years); data supplied for marketing after consent from the data subject will be stored for a maximum of two years, unless the consent is withdrawn.


RIGHTS OF THE DATA SUBJECT

As regards the personal data concerned by this information notice, the data subject can exercise the following rights included in the EU Regulation:

  • Right of access by the data subject: article 15 of the EU Regulation establishes the possibility of being informed about the processing of one’s Personal Data and of obtaining a copy of the processed data;

  • Right to rectify one’s personal data [article 16 of the EU Regulation] (the data subject has the right to rectify his or her own personal data, where inaccurate);

  • Right to have one’s Personal data erased without undue delay (“right to be forgotten”) [article 17 of EU Regulation] (the data subject has, and shall have, the right to have his or her data erased, if collected for other purposes than those connected to billing);

  • Right to restriction of processing of one’s own Personal Data in the cases established by article 18 of the EU Regulation, including the case of unlawful processing or if the accuracy of Personal Data is contested by the data subject [article 18 of EU Regulation);

  • Right to data portability [article 20 of EU Regulation];the data subject shall have the right to request his or her own Personal Data in structured format to transmit to another data controller where provided for by the aforesaid article.

  • Right to object to the processing of one’s own Personal Data [article 21 of EU Regulation] (the data subject has, and shall have, the right to object to the processing of his or her own Personal Data).

  • Right not to be subject to automated decision-making processes, [article 22 of EU Regulation] (the data subject has, and shall have, the right not to be subject to a decision based solely on automated processing)

For further information about his or her rights, the data subject can consult www.garanteprivacy.it or ask the Data Processor for a verbatim extract of the abovementioned articles.
The aforesaid rights can be exercised as provided for in the Regulation by sending an email to [email protected]

Camardo S.p.a. in conformity with article 19 of the EU regulation shall inform the recipients of the personal data of the requested corrections, erasures or restrictions of the processing, where possible.

As regards the above-mentioned marketing purposes, the data subject may, at any time, withdraw his or her consent to the processing of identification and personal data by sending an email to [email protected].

Under Article 7 of the EU Regulation, the withdrawal of consent shall not affect the lawfulness of the processing based on consent given before its subsequent withdrawal.

RIGHT TO LODGE A COMPLAINT

Should the data subject believe that his or her rights have been compromised, he or she has the right to lodge a complaint with the Guarantor Authority for the protection of personal data, in the manner specified by said Authority at: www.garanteprivacy.it/web/guest/home/docweb/-/docweb-display/docweb/4535524.

CHANGES AND UPDATES

This information notice shall be valid from the date indicated in the heading. Camardo S.p.a. could also make changes and/or additions to this notice as a consequence of any subsequent normative amendments and/or additions.

30 June 2019