with reference of article 13 of UE Legislative Decree No. 2016/679 ("GDPR” or "Legislative Decree”), C.R.I.VER. S.r.l. Soc. Unipersonale (Data Controller/Company), in the person of its legal representative Andrea Tommasini, wishes to inform you as data subject of the following:
A) Data processing – Purpose and methods
The aim in processing personal data is to establish and give course to a contractual agreement between the Company and the Customer. More specifically, the data will be used and processed to allow the Company to file all necessary contractual, administrative, accounting, fiscal, payment-related, financial-banking, insurance, logistics, data-basing and marketing paperwork, and possibly also to conduct market research, whether directly or by communicating the data to third parties.
The personal data are processed (including by third-party Data Processors) in accordance with the provisions of Legislative Decree with and without the aid of electronic means, in all cases applying due diligence and ensuring confidentiality and transparency when processing such data.
B) Compulsory or optional nature of provision of data
The provision of your personal data is compulsory as it is necessary for the Company to achieve the objectives set out in the preceding paragraph.
C) Consequences of a refusal to provide your personal data
Failure or negative reply to the request for the provision referred to under section B) will not allow the Company to establish a contractual agreement or to normally give course to previously signed agreements.
D) Communication and dissemination of data
Your personal data may be communicated and disseminated to certain subjects with whom the Data Controller entertains regular or occasional relationships, such as: employees assigned to data processing, banks, post offices, companies and consulting firms, professionals, or third parties that perform specific tasks on behalf of the Company (transportation companies, porterage companies, couriers, organisations, trade associations, etc.).
E) Rights of the data subject
If you wish to exercise your rights or obtain a copy of the above articles, simply contact the Data Controller. It is the data subject’s responsibility to promptly notify the Data Controller of any changes to his personal data.
F) Identity of the Data Controller
The Data Controller for your personal data is C.R.I.VER. S.r.l. Soc. Unipersonale, in the person of its Managing Director, Andrea Tommasini.
Right to access personal data and other rights:
1. The data subject has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form.
2. The data subject has the right to be informed:
a) of the origin of the personal data;
b) of the purposes and methods of data processing;
c) of the logic applied in case of data processed with electronic means;
d) of the identity of the Data Controller, Data Processors and the representative appointed under article 37 of the Legislative Decree;
e) of the subjects or categories of subjects to whom the personal data may be communicated or who may come to knowledge of it as designated representative in the territory of the State, as Data Controllers or Data Processors.
3. The data subject has the right to obtain:
a) the updating, rectification or, where interested therein, integration of the data;
b) cancellation, anonymization or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
c) confirmation that the operations under sections a) and b) have been notified, as also related to their contents, to those to whom the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate use of resources compared to the protected right.
4. The data subject has the right to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose for collecting the data;
b) to the processing of personal data concerning him collected for the purpose of sending advertising material or for direct selling or to conduct market research or send out commercial communications.