PRIVACY POLICY
For the purposes set out in the EU General Data Protection Regulation no. 2016/679 (GDPR) and in compliance with current Italian regulations on that matter, we wish to provide you with some information about the purposes of and the processing methods we use for the personal data in our possession. All these data are processed in compliance with current privacy regulations and the confidentiality obligations we have always adhered to.
THE DATA CONTROLLER
The data controller is:
M.WEB di Monica Burba
Loc. Zuel di Sotto, 105/d – 32043 Cortina d’Ampezzo (BL) Italy
in the person of its legal representative.
E-mail info@cortinaup.it
DATA CATEGORIES
We process data relating to your personal and fiscal details and your addresses, in addition to any economic and organisational data necessary to proceed with current or future contractual relationships.
In relation to specific services, the company acquires some data that the regulations in question define as “sensitive”, because such data make it possible, for example, to deduce information on data subjects’ state of health or legal issues relating to them. In order to process such data, specific consent mush be shown to have been given.
Purpose of and legal basis for the processing
Personal data are collected for one or more of the following purposes: to provide requested services, for the purchase of goods and services, to compile lists and fill in forms required to provide services, to provide back-up services for the original ones requested, to fulfil legal obligations and, subject to your consent, for pictures taken or videos shot during business activities to be published or disclosed in promotional material and on the company’s website or social media or in printed form for institutional, informative or promotional purposes.
PROCESSING METHODS
The personal data are processed using manual and IT equipment in such a way as to guarantee their security and confidentiality in compliance with current legislation, in line with the principles of accuracy and legitimacy of the processing.
NATURE OF DATA PROVISION
The provision of personal data is optional by nature. However, failure to provide the data in question will make it impossible to perform any activities on your behalf.
Provision of data relating to photographs and videos is optional. Failure to give consent to this will prevent images and/or audio-visual material of the data subject in question from being used for the aforesaid purposes.
RECIPIENTS OF THE PERSONAL DATA
Your data may be communicated to company personnel acting as processors and other appointed processors to the following recipients.
– Recipients for whom access to the data is necessary for purposes associated with the business relationship in existence between you and our company, within the limits strictly necessary to perform the associated tasks.
– To recipients who are our consultants, within the limits necessary for them to perform their appointed role within our organisation.
– To recipients able to access the data as a result of legal provisions, Italian or EU regulations, within the limits prescribed by such regulations.
Personal data may only be transferred to third-party countries outside the EU if such a transfer is necessary to execute a contract entered into by the data subject with the data controller or in order to execute pre-contractual measures taken at the request of the data subject, or if such a transfer is necessary to enter into or execute a contract entered into by the data controller and another natural or legal person on behalf of the data subject.
The personal data are stored by the data controller using servers located on EU territory. In all circumstances it is understood that, if necessary, the data controller is empowered to relocate the servers in question to non-EU territory. In this situation, the data controller hereby states that the transfer of data outside EU territory will be performed in compliance with the applicable legal provisions.
DATA SUBJECTS’ RIGHTS AND WAYS OF EXERCISING THEM
Data subjects are empowered to exercise the rights due to them under current legislation and these are as follows.
– To have access to any personal data concerning them.
– To obtain rectification, additions to or erasure of the data in question or to restrict their processing.
– To object to the processing.
– To withdraw consent when this is provided for. Withdrawal of consent will not prejudice the legitimacy of the processing of the data based on the consent given before its withdrawal.
– To lodge a complaint with the Supervisory Authority (the privacy guarantor).
In order to exercise the above rights, data subjects may write to the data controller by mail to our premises or by e-mail to info@cortinaup.it
DATA STORAGE PERIOD
The personal data collected will be stored for the time period necessary to achieve the above-listed purposes and subsequently for a period of 10 years to run from termination of the contractual relationship. The personal data may also be processed for a longer period to meet legal requirements.
Data in the form of photographs and videos will be stored in the company’s computer files in order to keep a history of the events and activities performed. Periodic checks will be made to ascertain if data collected and stored for the stated purposes have become obsolete.
Cortina d’Ampezzo, 25 May 2018
