Privacy Policy
GUARANTEE OF DATA PROTECTION AND CONFIDENTIALITY
Personal Data Protection Notice pursuant to Art. 12 et seq. of EU Regulation 679/2016
Under the new Regulation 679/2016, in accordance with the principle of accountability, any processing of personal data must be lawful, fair and transparent. These principles imply that the data subject is informed of the existence of the same, its purposes and the rights he/she can exercise.
With this in mind, the data controller provides the data subject with the necessary information to ensure correct use in accordance with the principle of accountability. With this in mind, we ask you to read the following information.
Bindella srl soc. agr. with registered office in Via delle Tre Berte, 10° - 53045 Montepulciano (SI) - Italy, in its capacity as Data Controller, in the person of its pro-tempore legal representative, pursuant to and for the purposes of EU Regulation 2016/679, hereby informs the interested party that the personal data assumed to concern him/her, acquired by the Data Controller or which will be requested subsequently and/or communicated by third parties, are necessary and will be used for the purposes indicated below. The personal data processed will be, generically, personal data or company names or email addresses or telephone numbers.
PURPOSE OF PROCESSING
The personal data collected will be used for purposes related to pre-contractual, contractual, legal, fiscal and accounting obligations, for service communications, for handling complaints and to inform you about our events, fairs, exhibitions and in general about our initiatives.
The personal data processed do not require your consent. In fact, the processing of the personal data collected is related to pre-contractual and contractual aspects and to inform you about services identical or similar to those requested. The provision of personal data is necessary for pre-contractual and contractual purposes.
You are free to unsubscribe from our mailing list at any time by writing to info@bindella.it.
METHODS OF PROCESSING AND OBLIGATION OF CONFIDENTIALITY
Data processing is carried out using computer tools and/or paper supports, by persons committed to confidentiality, with logic related to the purposes and in any case in such a way as to guarantee the security and confidentiality of the data. The data collected will not be disclosed or disseminated to third parties in accordance with the law.
COMMUNICATION TO THIRD PARTIES
Your personal data may be communicated to third parties known to us solely and exclusively for the above-mentioned purposes and in particular to the following categories of parties: - External companies and professionals who perform services on our behalf (in their capacity as duly appointed external managers); - Bodies and public administrations for compliance with the law;
STORAGE TIMES
The personal data of the interested parties will be kept for the time necessary to carry out the existing relationship between the parties and to fulfil the related obligations, subject to their storage in accordance with the law in force, after which they will be deleted.
RIGHTS OF THE DATA SUBJECT
Pursuant to the legislation in force, the data subject may assert their rights towards the Data Controller, as expressed in Regulation 679/2016, namely:
- Right of access (Art. 15);
- Right to rectification (Art. 16);
- Right to erasure (Art. 17);
- Right to restrict processing (Art. 18);
- Right to data portability (Art. 20);
- Right to object to processing (21);
- Right to withdraw consent;
- Right to lodge a complaint with the Supervisory Authority.
The individual rights of the data subject are set out in detail below:
RIGHT OF ACCESS - Article 15
The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data relating to him are being processed and, if so, to obtain access to the personal data and the following information:
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if they are recipients in third countries or international organisations;
(d) where possible, the period for which the personal data are to be stored or, if that is not possible, the criteria used to determine that period;
(e) the existence of the right of the data subject to request from the controller the rectification or erasure of personal data or the restriction of the processing of personal data concerning him or her or to object to the processing of personal data concerning him or her
(f) the right to lodge a complaint with a supervisory authority;
(g) where the data are not collected from the data subject, all available information on their source;
(h) the existence of automated decision making, including profiling as referred to in Article 22(1) and (4), and, at least in such cases, meaningful information on the logic used, as well as the importance and the envisaged consequences of such processing for the data subject.
1. Where personal data are transferred to a third country or an international organisation, the data subject shall have the right to be informed about the existence of appropriate safeguards pursuant to Article 46 relating to the transfer.
2. The controller shall provide a copy of the personal data being processed. In case of further copies requested by the data subject, the controller may charge a reasonable fee based on administrative costs. Where the data subject makes the request by electronic means, and unless otherwise specified by the data subject, the information shall be provided in an electronic format in common use.
The right to obtain a copy must not infringe the rights and freedoms of others.
RIGHT OF RECTIFICATION - Article 16
The data subject shall have the right to obtain from the controller the rectification of inaccurate personal data concerning him/her without undue delay. In view of the purposes of the processing, the data subject shall have the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.
RIGHT TO CANCEL - Article 17
1. The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay, and the controller shall be obliged to erase the personal data without undue delay, if one of the following grounds applies:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject withdraws the consent on which the processing is based in accordance with point (a) of Article 6(1) or point (a) of Article 9(2) and if there is no other legal basis for the processing;
c) the data subject objects to the processing pursuant to Article 21(1) and there is no overriding legitimate ground for processing, or objects to the processing pursuant to Article 21(2);
(d) the personal data have been unlawfully processed;
(e) the personal data must be erased in order to comply with a legal obligation imposed by Union or Member State law to which the controller is subject;
(f) the personal data have been collected in connection with the provision of information society services referred to in Article 8(1).
2. Where the controller has made personal data public and is obliged under paragraph 1 to erase them, the controller shall, taking into account available technology and the costs of implementation, take reasonable steps, including technical measures, to inform the controllers who are processing the personal data of the data subject's request to erase any link, copy or reproduction of his or her personal data.
3. Paragraphs 1 and 2 shall not apply to the extent that the processing is necessary:
(a) for the exercise of the right to freedom of expression and information;
(b) for compliance with a legal obligation to which the processing is subject under Union or Member State law or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
(c) for reasons of public interest in the area of public health in accordance with Article 9(2)(h) and (i) and Article 9(3);
(d) for archiving purposes in the public interest, scientific or historical research or statistical purposes in accordance with Article 89(1), insofar as the right referred to in paragraph 1 is likely to make it impossible or seriously impair the achievement of the purposes of such processing; or
(e) for the establishment, exercise or defence of legal claims.
RIGHT TO LIMIT TREATMENT - Article 18
1. The data subject shall have the right to obtain from the controller the restriction of processing when one of the following cases applies:
a) the data subject disputes the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of those personal data;
b) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead that their use be restricted;
c) although the controller no longer needs the personal data for the purposes of the processing, the personal data are necessary for the establishment, exercise or defence of legal claims;
d) the data subject has objected to the processing pursuant to Article 21(1), pending the verification as to whether the legitimate grounds of the controller prevail over those of the data subject.
2. Where processing is restricted pursuant to paragraph 1, such personal data shall, except for storage, only be processed with the consent of the data subject or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of substantial public interest of the Union or a Member State.
3. A data subject who has obtained a restriction of processing pursuant to paragraph 1 shall be informed by the controller before the restriction is lifted.
RIGHT TO PORTABILITY OF DATA - Article 20
1. The data subject shall have the right to receive in a structured, commonly used and machine-readable format personal data concerning him or her that have been provided to a data controller and shall have the right to transmit such data to another data controller without hindrance by the data controller to whom he or she has provided them where:
a) the processing is based on consent pursuant to Article 6(1)(a) or Article 9(2)(a) or on a contract pursuant to Article 6(1)(b); and
b) the processing is carried out by automated means.
2. When exercising his or her rights in relation to data portability pursuant to paragraph 1, the data subject shall have the right to obtain the direct transmission of personal data from one controller to another, if technically feasible.
3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.
4. The right referred to in paragraph 1 shall not affect the rights and freedoms of others.
RIGHT TO OPPOSE TO TREATMENT - Article 21
1. The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data relating to him or her pursuant to points (e) or (f) of Article 6(1), including profiling on the basis of those provisions. The controller shall refrain from further processing the personal data unless the controller demonstrates compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of legal claims.
2. Where the personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her carried out for such purposes, including profiling insofar as it is related to such direct marketing.
3. If the data subject objects to the processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the data subject and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the data subject.
5. In the context of the use of information society services and without prejudice to Directive 2002/58/EC, the data subject may exercise their right to object by automated means using specific techniques.
6. Where personal data are processed for scientific or historical research or statistical purposes pursuant to Article 89(1), the data subject shall have the right to object, on grounds relating to his/her particular situation, to the processing of personal data relating to him/her, except where the processing is necessary for the performance of a task carried out in the public interest.
In addition to the above-mentioned rights, the data subject is entitled to lodge a complaint with the supervisory authority in accordance with the law.
HOLDER AND PRIVACY NOTICES
The owner is Bindella srl soc. agr. with head office in Via delle Tre Berte, 10A - 53045 Montepulciano (SI) - Italy.
For any communication pursuant to the above-mentioned articles of EU Regulation 2016/679, the Data Controller provides the address: info@bindella.it.