INFORMATION NOTE – PROCESSING OF PERSONAL DATA
EU REGULATION 2016/679 (GDPR)
Last update november 14 th 2018
Pursuant to and for the effects of Article 13 of the Regulation (EU) No. 2016/679 for the protection of individuals and personal data, as well as the free circulation of this data (General regulation on the protection of data, henceforth known as the “Regulation” or “GDPR”) that abrogates the Directive 95/46/CE, pursuant to the Legislative Decree No. 101 of 10 August 2018, we wish to inform you that the personal data voluntarily provided by you to Fiscatech S.p.a. with Single Member, will be processed pursuant to the norm for the protection of personal data and, in any case, the principles of privacy that structure the company’s business.
Processing of personal data means any operation (or group of operations) undertaken with or without the use of automated processes and applied to personal data or groups of personal data. By way of example only these include: the collection, the collection, registration, organisation, structuring, storage, adaptation or modification, consultation, use, communication via transmission, diffusion or another other form of provision, the comparison or interconnection, limitation, cancellation or destruction of personal data.
1 Data Processing Owner
The data processing owner is Fiscatech S.p.a. with Single Member, with registered offices in 27029 Vigevano (PV), Via Biffignandi n. 37, operating headquarters in 27029 Vigevano (PV), Via Oroboni n. 41, (Tax Code and VAT No. 00176980183), Telephone: 0381-697311, Fax: 0381-697331, legally represented pro tempore by the lawyer Alessandro Morini (henceforth “Data Processing Owner” or “Fiscatech S.p.a.”), as the Data Processing Owner, that
informs you that pursuant to Art. 13 of the EU Regulation 2016/679 that your personal data will be processed with the means and objectives reported below.
The internal manager for data processing is Mr. Andrea Pignatti, who can be contacted at the following e-mail :
2 Reason for Processing
Any request related to personal data processed by Fiscatech S.p.a. with Single Member can be sent to the legal headquarters of the Company, or by writing to the e-mail address email@example.com
The Owner will process the identifying personal data (by way of example only: name, surname, company name, address, telephone, e-mail. login, password) henceforth known as “personal data” or simply “data” communicated by yourself when signing the contract for the services provided by the Owner that concern requests for service, performance and/or products mentioned in the contract. You are not obliged to provide your personal data for this purpose, however, without consent (correct and updated) we may not be able to stipulate a contract and offer you the services and/or products requested. We are not required to obtain your explicit consent to the processing of personal data for contractual purposes; in fact, this is considered to be implicit in the request for contractual services.
3 Means, site and processing times for collected data
The Owner will process the data belonging to the interested parties in a legal and correct manner and adopt the appropriate safety measures to prevent non-authorised access, disclosure, modification or non-authorised destruction of the data. The processing will be carried out using electronic means, using IT and/or telematic tools, with organisational and logistical processes strictly correlated to the indicated purposes.
The data will be processed at the headquarters of the Company and, if required, at the other companies belonging to the Group by employees who are specifically commissioned for processing. It will also be processed via the website. Apart from the Owner, in certain cases managers and appointees involved in the corporate organisation of the site may also have access to the data (administrative, commercial and legal personnel, system administrators). No data derived from the web service will be communicated or divulged. The personal data provided by users who register requests for the dispatch of information material, is used to provide the desired services or tasks, and are communicated to third parties only if necessary for this purpose.
The data is processed for the time required for the execution of the service requested by the user, who can request its removal from the site servers for legitimate reasons.
As part of the processing executed by our company, your data can be transferred to other countries due to cloud computing for archiving and storage of the data. In this case your data will also be protected via encryption methods.
4 Reason for the processing of collected data
The collected data is processed for the following reasons:
- execution of contracts agreed with you, and connected commitments;
- fulfilment of legal obligations connected with the contractual relationship;
- organisational management of the contract (e.g. relationships with agents and representatives and sub-contractors for the organisation of activities at commissioners’ sites);
- external professional collaborations to fulfil legal obligations;
- protection of contractual rights;
- internal statistical analysis;
- fulfilment of obligations under the law, as per regulations of EU norms.
The provision of the data and the relative processing are obligatory relative to the purposes indicated in point a), b), e), g) for the fulfilment of contractual and legal obligations. The provision of the data and the relative processing are optional in other cases. The data can be communicated to third parties, when this is required under the law.
This site may use technical cookies in order to ensure that the services are as efficient and easy to use as possible. Cookies are informational segments that the web site inserts in the navigation device of the interested party whenever he/she visits a page. These markers may involve the transmission of information between the web site and the user’s device and between this and other sites that operate in conformity with the stipulations of the privacy information note. The interested party can elect to receive a notification whenever a cookie is sent or to disable all the cookies by changing his/her browser settings. The disabling of cookies, however, may mean that some of the site functions will not work correctly.
Below is a brief classification of the cookies used by the site.
Technical cookies These cookies are essential for navigation on the web site and to use certain functions. These types of cookies allow the user to navigate efficiently between the pages of a web site or to use the different options and services proposed. You do not need to offer your consent to the use of technical cookies as they are essential to provide the requested services. You can block or remove technical cookies by changing the configuration of the options on your browser.
Fiscatech S.p.a. with Single Member agrees not to provide your data to third parties.
Nevertheless, by blocking or removing cookies you may not be able to enter certain areas of the web site or use some of the services.
6 Period of storage or criteria
Pursuant to Article 5, paragraph 1 letter e) of the EU Regulation 2016/679 the personal data collected will be stored in a format that permits the identification of the interested parties for a period of time not longer than the aims for which the personal data are processed.
It is understood that the Owner will process the personal data, including with respect to fiscal aspects, for the time required to fulfil the aims listed above. This will be
for no longer than 10 years from the cessation of the relationship for the purpose of the service, and for no longer than 2 years from the collection of the data for marketing purposes.
7 Access to and sharing of personal data
Your data can be provided for the aims listed in paragraph 4 point a) to employees and collaborators of the Owner, as individuals commissioned and/or internal managers for the processing and/or system administrators, in case of emergency.
Without the requirement for express consent (Art. 6 lett. b) and c) of the GDPR, the Owner can communicate your data to vigilance and judicial authorities as well as subjects to whom communication is required under the law for the execution of these aims. These subjects will process the data as autonomous owners of the processing.
Your data will not be generally transmitted.
8 Transference of data abroad
It is understood that the Owner, where necessary, can move servers even outside of the EU. In this case, the Owner will hereby ensure that the transference of data outside the EU will take place in conformity with the dispositions of applicable laws, with the exception of standard contractual stipulations by the European Commission.
9 Nature of provision of data and consequences of refusal to answer
The provision of data for the aims listed under paragraph 4 point a) is obligatory. If this is not provided we cannot guarantee the services listed in paragraph 4 point a). The user is responsible for communicating modifications to the data via the special firstname.lastname@example.org or the form present on the web site.
10 Rights of the interested party
We inform you that at any time you can exercise your rights as stipulated within the limits and subject to the conditions of Art. 7 and 15-22 of the Regulation.
To exercise your rights, as described here, you should contact the Owner at the email address email@example.com
You will receive a reply to this request in the times stipulated by the GDPR.
In particular, the interested party has the right to:
- ask the Owner of the processing for access to personal data (Art. 15 GDPR), request the rectification (Art. 16 GDPR), the cancellation of the same (right to be forgotten – 17 GDPR), or the limitation of the processing (Art. 18 GDPR);
- obtain the portability of the data (Art. 20 GDPR);
- oppose processing (Art. 21 GDPR);
- make a complaint (Art. 77 GDPR) to the Data Protection Authority for the protection of personal data, if he/she believes that rights have been damaged following the procedures and the indications published on the official web site of the Authority garanteprivacy.it;
- to not be subjected to automated decision making processes, including profiling (Art. 22 GDPR);
- to revoke in writing his/her consent to the processing of personal data (Art. 7 GDPR).
We note that the exercise of these rights is not subject to any form of obligation and is free of charge.
11 Means of exercising rights
The interested party can exercise his/her rights at any time by sending:
- a registered letter to Fiscatech S.p.a. con Socio Unico, Via Oroboni n. 41, 27029 Vigevano (PV);
- an e-mail to the address firstname.lastname@example.org
From time to time Fiscatech S.p.a. with Single Member can update this privacy protection declaration, as well as other specific declarations on privacy. When this occurs, the Company will place a new date at the head of the Privacy Protection Declaration.
Consent to processing of personal data EU Regulation
The undersigned declares that he/she has received the information described in Art. 13 of the EU Regulation, in particular concerning the rights acknowledged to the same, and agrees pursuant to and for the effects of Art. 7 and amendments of the Regulation for the Processing of Personal Data, including specific details. with the means and for the aims indicated in the information note itself, and in any case strictly connected and instrumental to the management of the working relationship.