SUBJECT: INFORMATION PURSUANT TO ART. 13 OF THE LEGISLATIVE DECREE NO. 196/2003 AND SUBSEQUENT AMENDMENTS AND ARTICLE 13 OF EU REGULATION NO. 2016/679.
Novaluna S.r.l. with registered office in Via Appia Antica km 13 - Z.I. Jesce - Matera, in the person of the legal representative Cornacchia Francesco domiciled for the office at the Company's registered office (hereinafter, "Data Controller"), as data controller, informs you in accordance with art. 13 Legislative Decree no. 196 of 30.6.2003 as updated by Legislative Decree no. 101 of 10.08.2018 (hereinafter, "Privacy Code") and art. 13 EU Regulation no. 2016/679 (hereinafter, "GDPR") that your data will be processed in the following ways.
1. OBJECT OF PROCESSING
The Owner processes personal, identification data (for example, name, surname, company name, address, telephone, e-mail, bank and payment references) - hereinafter, "personal data" or even "data" communicated by you during the conclusion of contracts for the services of the Owner.
2. PURPOSE
A) without your express consent (art. 24 letter a), b), c) Privacy Code and art. 6 letter b), e) GDPR), for the following Service Purposes: - to conclude contracts for the services of the Owner; - to fulfill pre-contractual, contractual and fiscal obligations arising from existing relations with you; - to fulfill the obligations provided for by law, regulation, EU legislation or an order of the Authority (such as anti-money laundering); - to exercise the rights of the Owner, such as the right of defence in court;
B) Only with your specific and separate consent (Articles 23 and 130 of the Privacy Code and Article 7 GDPR), for the following Marketing Purposes: - to send you by e-mail, mail and/or text messages and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Owner and survey the degree of satisfaction with the quality of services;
3. MODALITIES OF TREATMENT
This information is provided for data: collected directly from the interested party (art. 13, c. 1); collected from third parties (art. 13, c. 4); received from public registers, lists, acts or documents known to anyone (art. 24, c. 1, letter c), within the limits and in the manner established by the rules on their availability.
The processing of your personal data is carried out through the operations indicated in art. 4 Privacy Code and art. 4 n. 2) GDPR and precisely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data are subject to both paper and electronic and/or automated processing.
The Owner will process your personal data for the time necessary to fulfill the above purposes and in any case for no longer than 10 years from the termination of the relationship for the Service Purposes and for no longer than 2 years from the collection of data for the Marketing Purposes.
4. ACCESS AND COMMUNICATION
Your data may be made accessible for the purposes set out in art. 2.A) and 2.B):
- to the employees and collaborators of the owner, that is our network of agents, of the people in charge of the marketing of the goods/services; of the agents, of the sales representatives, other auxiliaries of the commerce; self-employed workers, project workers, occasional workers;
- our service providers; accounting and invoicing staff.
Without prejudice to the communications and disclosures made in execution of legal obligations, Without the need for a
express consent (ex art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Owner may communicate Your data for the purposes referred to in art. 2.A) in Italy and/or abroad to:
- our suppliers of services and products in the terms necessary for the execution of the contract;
- post office or other mail delivery companies; banks and credit institutions; debt collection companies; law firms; insurance companies; IT equipment maintenance/repair companies; professional firms and/or companies and/or associations of companies and entrepreneurs providing certain accounting and/or fiscal services to us, etc;
- companies operating in the transport sector;
These subjects will process the data in their capacity as independent data controllers. Your data will not be disseminated.
5. DATA TRANSFER
Personal data is stored on servers located at your premises within the European Union. In any case, it is understood that the Owner, if necessary, will have the right to move the servers also outside the EU. In this case, the Owner already ensures that the transfer of data outside the EU will take place in accordance with the provisions of the law applicable, subject to the stipulation of standard contractual clauses provided for by the European Commission.
6. NATURE OF THE CONFERMENT
The conferment of data for the purposes referred to in art. 2.A) is mandatory. In their absence, we will not be able to guarantee you the
Services under Article 2.A). The conferment of data for the purposes of art. 2.B) is optional. You may therefore
decide not to provide any data or subsequently deny the possibility of processing data already provided: in that case,
7. RIGHTS OF THE DATA SUBJECT
As interested party, you have the rights as per art. 7 Privacy Code and art. 15 GDPR and precisely the rights of:
obtain confirmation of the existence or not of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
to be informed: a) of the source of the personal data; b) of the purposes and methods of processing; c) of the logic applied to the processing, if the latter is carried out with the help of electronic means; d) of the identification data concerning data controller, data processors and the representative designated as per art. 5, paragraph 2, Privacy Code and art. 3, paragraph 1, GDPR; e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State's territory, data processor(s) or person(s) in charge of the processing;
obtain: a) the updating, rectification or, when interested therein, integration of the data; b) the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;
oppose, in whole or in part: a) for legitimate reasons, the processing of personal data concerning you, even if pertinent to the purpose of collection; b) the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication, through the use of automated calling systems without the intervention of an operator by e-mail and/or through traditional marketing methods by telephone and/or paper mail. It should be noted that the right of opposition of the interested party, set out in point b) above, for the purposes of direct marketing by automated means extends to traditional methods and that in any case the interested party may exercise the right of opposition even only in part. Therefore, the interested party may decide to receive only communications by traditional means or only automated communications or neither of the two types of communications.
Where applicable, he also has the rights under Articles 16-21 GDPR (Right of rectification, right to oblivion, right of limitation of treatment, right to data portability, right of opposition), as well as the right to complain to the Guarantor Authority.
8. MODALITIES OF EXERCISE OF THE RIGHTS
You may exercise your rights at any time by sending:
- a registered letter with return receipt to Novaluna S.r.l. Via Appia Antica km 13 - Z.I. Jesce - 75100 Matera
9. DATA CONTROLLER
The Data Controller is Novaluna S.r.l. with registered office in Via Appia Antica km 13 - Z.I. Jesce - Matera, in the person of the legal representative Mr. Cornacchia Francesco domiciled for the office at the Company's registered office.
