Information on the processing of personal data pursuant to art. 13-14 EU Regulation 2016/679
​
Alessia Donà , in her capacity as Data Controller of your personal data, pursuant to and for the purposes of EU Regulation 2016/679, hereinafter "GDPR", hereby informs you that the aforementioned legislation provides for the protection of data subjects with respect to processing of personal data and that such processing will be based on principles of correctness, lawfulness, transparency, proportionality and protection of your privacy and your rights.
Your personal data, subject to your consent, will be processed in accordance with the legislative provisions referred to in the aforementioned legislation and the confidentiality obligations set forth therein.
​
Purpose and legal basis of the processing: execution of the requested service, in implementation of legislative or contractual obligations.
Methods of data processing: your data may be processed by means of electronic computers.
Each treatment takes place in compliance with the procedures set out in Articles. 6 and 32 of the GDPR and by adopting the appropriate security measures provided for therein.
​
Communication: your data will be communicated exclusively to competent and duly appointed persons in charge of the treatment for the performance of the services necessary for a correct management of the relationship, with a guarantee of protection of the rights of the interested party.
Your data will be processed exclusively by persons authorized for this purpose and duly trained by the Data Controller.
​
Dissemination: your personal data will not be disclosed in any way.
​
Retention period: We inform you that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 of the GDPR, the retention period of your data is:
* established for a period of time not exceeding the achievement of the purposes for which they are collected and processed for the execution and fulfillment of the contractual purposes;
* established for a period of time not exceeding the completion of the services provided;
* established for a period of time not exceeding the achievement of the purposes for which they are collected and processed and in compliance with the mandatory time limits prescribed by law.
​
The Data Controller, pursuant to the Law, is Alessia DonÃ
You have the right to obtain from the Data Controller the cancellation (right to be forgotten), limitation, updating, rectification, portability, opposition to the processing of personal data concerning you, as well as in general can exercise all rights provided for by articles 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR.
​
Rights of the interested party:
1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in an intelligible form.
2. The interested party has the right to obtain the following information:
* purpose of the treatment;
* categories of personal data in question;
* recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations;
* when possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
* existence of the right of the interested party to ask the data controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
* right to lodge a complaint with a supervisory authority;
* if the data are not collected from the interested party, all available information on their origin;
* existence of an automated decision-making process, including profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested;
* if personal data are transferred to a third country or to an international organization, the interested party has the right to be informed of the existence of adequate guarantees pursuant to Article 46 relating to the transfer. 3. The data controller provides a copy of the personal data being processed. In case of further copies requested by the interested party, the data controller may charge a reasonable fee based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format. The right to obtain a copy referred to in paragraph 3 must not affect the rights and freedoms of others.
3. The interested party has the right to obtain:
* updating, rectification or, when interested, integration of data;
* the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
* the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment is revealed impossible or involves the use of means that are manifestly disproportionate to the protected right;
* data portability.
4. The interested party has the right to object, in whole or in part:
* for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
* to the processing of personal data concerning him for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication.
For an exhaustive list of the rights of the interested party, please refer in any case to the text of articles 15-22 of the GDPR.