PRIVACY POLICY
INFORMATION ON THE PROCESSING OF PERSONAL DATA
(Articles 13 and 14 of EU Regulation 2016/679)
Pursuant to Articles 13 and 14 of EU Regulation 2016/679 (hereinafter referred to as GDPR) on the protection of personal data, we inform you that the personal data collected, with reference to the contractual relationships established or to simple requests for information, will be processed in compliance with the above mentioned regulation and we provide you with the following information:
PERSONAL DATA COLLECTED
The personal data collected, upon your free and express consent, are related exclusively to
– identification data (for example: name, surname, address, telephone, e-mail, etc…)
– fiscal data (if required by law – for example tax code, VAT number, etc. …)
OWNER AND RESPONSIBLE FOR THE TREATMENT OF PERSONAL DATA (13.1 a, b)
The owner of the treatment of personal data is PANETTONI GIOVANNI COVA & C. Srl – Via Cusani, 10 – 20121 Milano (MI). The Privacy Contact Person, appointed by the Data Controller, can be contacted by e-mail at the following address: info@giovannicovaec.it or by calling 800 013346 to exercise the rights referred to in Article 13.2 letters b, c, d of the GDPR. The updated list of external data processors appointed by the Data Controller pursuant to Article 28 of the GDPR and of persons authorized to process data may be consulted by making a request to the Data Controller.
PURPOSES AND METHODS OF PERSONAL DATA PROCESSING (13.1 c)
Personal data collected through registration on this site are processed in order to allow access to services provided by the portal and reserved for users who have communicated their data and consented to their treatment. If the user has expressed consent at the time of activation of the service, or expresses it subsequently and until the revocation of the same, his personal data may be processed by the Owner to
allow access to the services provided by the portals and reserved for registered users;
to send, in the event that users have expressed their consent at the time of activation of the service, or express it subsequently, and until the revocation of the same, commercial communications on products and services, including by automated means, to send market research and to verify the degree of user satisfaction;
to send, in the case in which the same have expressed the consent at the moment of the activation of the service, or they express it subsequently, and until the revocation of the same one, statistics on products and own services, also with automated modalities, for finality of sale;
carry out, in the event that users have given their consent at the time of activation of the service, or express it subsequently, and until the revocation of the same, even by electronic means, activities of analysis of specific behaviors and consumption habits, in order to improve the services provided and address the business proposals of interest to the user, offering also to third parties the aggregate data summary of openings and clicks obtained through a tracking system using “cookies” (profiling);
The Owner will also use personal data for administrative and accounting purposes and for the execution of contractual obligations towards users who are part of its clientele.
Personal data sent through the registration procedure may be processed by the Owner with automated tools. It remains the possibility for the owner to process the above data in aggregate form, in compliance with the measures prescribed by the Guarantor and by virtue of the specific exemption from consent provided by the same, for analysis and electronic processing (eg, classification of the entire customer base in homogeneous categories for levels of services, consumption, spending, etc..) aimed at periodically monitoring the development and economic performance of the activities of the owner, to guide the related industrial and commercial processes, to improve services, as well as to design and implement commercial communication campaigns.
Specific security measures are observed by the Owner to prevent data loss, illegal or incorrect use and unauthorized access.
PERSONAL DATA RECIPIENTS (13.1 e, f)
Personal data are recorded and stored on electronic databases located in Italy, in countries belonging to the European Economic Area (EEA) and in third countries that provide an adequate level of data protection. The processing of personal data provided by users may also be carried out by companies, entities or consortia, appointed as data processors pursuant to art. 28 of the above-mentioned EU Regulation, which, on behalf of the Data Controller, provide specific processing services, or related, instrumental or support activities.
Among these data processors is the provider of the hosting service of the Owner’s website.
Personal data provided by users may also be communicated:
to studies of recognized accountants related to the profession of assistance to companies when the communication is due by law, or is in the interest of the subject;
to studies of lawyers recognized relative to the profession of assistance to the companies when the communication is due for law, regularly in charge to such form of treatment in the full respect of the enforced measures, or when the communication is in the interest of the subject;
to subjects necessary for the conclusion of the relationship of sale (for example couriers, suppliers of logistic supports and similar)
to participated or associated companies in the interest of the subject;
to subjects to whom the faculty of access to personal data is recognized by provisions of law, regulations or community norms;
to subjects towards whom communication is foreseen by laws or regulations, or by public subjects for the performance of their institutional functions.
PERIOD OF STORAGE OF PERSONAL DATA (13.2 a)
The period of retention of personal data referred to above is:
24 months for the purposes referred to in points 2) and 3);
12 months for the purpose of point 4);
10 years from the date of termination of the contractual relationship for the purposes referred to in point 5).
At the end of the performance, provision of the service or response, personal data will be stored exclusively for historical or statistical purposes, in accordance with the law, regulations, EU legislation and codes of ethics and good conduct signed in accordance with Article 40 of the GDPR. Beyond the above period, personal data will be kept anonymous, or will be destroyed.
RIGHTS OF INTERESTED PARTIES (13.2 b)
In relation to the aforementioned processing, the data subject has the right to request access to his or her personal data and the rectification or erasure thereof or the restriction of the processing that concerns him or her or to object to its processing, in addition to having the right to data portability.
RIGHT TO WITHDRAW CONSENT (13.2 c)
If the processing is based on consent, the Controller shall inform the data subject that he/she has the right to revoke it at any time without affecting the lawfulness of the processing based on the consent given before revocation.
RIGHT TO PROPOSE COMPLAINT (13.2 d)
The Data Controller informs the data subject of his/her right to lodge a complaint with a supervisory authority, in which case he/she should request information from him/her using one of the systems indicated above to contact him/her.
OBLIGATORY OR OPTIONAL NATURE OF THE PROVISION OF DATA (13.2 e)
The conferment of the data and the relative treatment are obligatory in relation to the finalities relative to the use of the site and to the fulfilments of fiscal nature (finalities 1 and 5); it follows that the eventual refusal to furnish the data for such finalities could determine the impossibility of the Holder of the treatment to give course to the same professional relationships and to the obligations of law. The conferment of the data and the relative treatment is to be considered optional in the other cases, without any consequence.
EVENTUAL EXISTENCE OF AN AUTOMATED DECISION-MAKING PROCESS (13.2 f)
The Owner informs the interested party that in this site there is an automated decision-making process, therefore in particular there is a profiling system described on the page: https://giovannicovaec.it/cookie/
DATI SOCIETARI
| ragione sociale | PANETTONI GIOVANNI COVA & C. Srl |
| sede legale | Via Cusani, 10 – 20121 Milano (MI) |
| partita iva | 06739390968 |
| iscrizione ufficio del registro delle imprese | n.06739390968 |
| n. repertorio economico amministrativo (REA) |
MI – 1912349 |
| capitale in bilancio |
50.000,00 |
| posta elettronica certificata (PEC) |
PANETTONIGIOVANNICOVAECSRL@PEC.IT |
| eventuale liquidazione in seguito a scioglimento | La società non è in stato di liquidazione. |
| eventuale stato di società con unico socio | La società non è a socio unico. |
| Art. 2497-bis C.C. – direzione e coordinamento | La società non è soggetta al coordinamento da parte di altri enti o società. |