INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 AND 14 OF REGULATION (EU) 2016/679
In compliance with the requirements of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data, Degiorgi Elena, as owner of the sole proprietorship “Work in Progress Plus di Degiorgi Elena”, has drawn up the following information document with a view to ensuring maximum transparency, intelligibility and conciseness.
The Data Controller is Degiorgi Elena, as owner of the sole proprietorship “Work in Progress Plus di Degiorgi Elena”, Duino 69/C, 34011 Duino – Aurisina (Trieste), Tax Code: DGRLNE66L49L424H, VAT number: 01241610326, Tel.: 0402070109, Fax: 0402071163, e-mail: firstname.lastname@example.org, certified e-mail address: email@example.com, website: www.wiponline.it.
- For what purposes are personal data processed and what are the legal grounds for processing?
The purposes for which personal data are processed are as follows:
- the proposal or execution of contracts or assignments and the associated preliminary or subsequent activities; in this case, the legal grounds for processing the data of the legal representative of the customer/supplier/associate (legal person) or customer/supplier/associate (natural person) derive from the need to perform a contract or pre-contractual measures such as, for example, a request for contact via the contact form on the www.wiponline.it website;
- for the processing of data of employees or consultants of the customer/supplier/associate, the legal grounds are represented by the legitimate interest of the data controller given the involvement of the former in the activities related to the contract;
- for administrative and accounting requirements as well as to fulfil tax and social security obligations and all those provided for by national bodies or European Union law, and in this case, the legal grounds for processing will derive from the need for compliance with a legal obligation to which the data controller is subject;
- protection of the rights of the data controller in extra-judicial or judicial proceedings; the legal grounds for processing derive from the legitimate interest of the data controller in protecting such rights in any forum deemed appropriate;
- the sending of information newsletters, whose legal grounds are the consent of the data subject expressed by filling in and sending the online form or by signing the declaration at the end of this letter;
- the management of online contents personalised through cookies based of the consent of the data subject.
The correct and complete provision of personal data is mandatory for the purposes expressed in points a., b. and c., without which it will be impossible to establish or continue the contractual and pre-contractual relationship.
2. How are personal data processed?
The personal data provided are processed both on paper and with electronic and computer tools and may be processed by employees or associates of the data controller for the purposes set out in point 1.
3. To which parties are personal data transmitted?
The personal data collected may be transmitted to the following categories of recipients in relation to the processing purposes referred to in point 1:
- accountants, consultants or lawyers;
- companies or undertakings for the execution of the contract or assignment as well as to fulfil tax obligations;
- the company that updates and maintains the www.wiponline.it website;
- companies offering postal or forwarding services where necessary;
- banking and insurance institutions;
- legal authorities or public bodies where required by legal or contractual obligations;
- persons legally authorised to access personal data;
- Google Analytics, to obtain anonymous statistical information with opt-out options provided by Google (https://tools.google.com/dlpage/gaoptout) and not to monitor or collect personal identification information. Although Google’s servers are located in a country outside the EU, it complies with the EU-US Privacy Shield regulations, which the European Commission considers to be a certification that offers an adequate level of protection for the personal data transferred.
4. For how long will the personal data collected be stored?
The personal data processed will be kept for as long as is necessary for the execution of the contract or assignment or the achievement of the purposes indicated in point 2 and, subsequently, for the period of time required by tax and anti-money laundering legislation or any other national or European regulations and, in any case, for a period of not less than 10 years.
In the event of a legal dispute, the data will be kept until the judgement handed down by the highest level of court has been enforced.
5. What are the rights of the data subject?
The data subject, i.e. the natural person whose data is processed, enjoys the following rights:
- the right to ask the data controller for access to personal data;
- the right to ask the data controller to correct or erase personal data;
- the right to ask the data controller to restrict or object to the processing;
- the right to data portability;
- the right to withdraw consent to the processing of personal data at any time;
- the right to lodge a complaint with the Data Protection Authority.
Rights a. to e. may be exercised by sending an e-mail to the following address: firstname.lastname@example.org