Disclosure in accordance with Article 13-14 of Regulation (EEC) No 2016/679 and for the purpose of its application
(European Regulation on Personal Data Protection)
Please note that EU Regulation 2016/679 (“European Regulation on the Protection of Personal Data”) provides for the protection of individuals and other entities and the respect of the processing of personal data.
In accordance with Articles 13 and 14, we therefore provide you with the following information:
1. Purpose and legal basis of the processing for which the data are intended
The treatment we intend to carry out, with your express consent when necessary, has the following purposes;
a. To allow the provision of the Services requested by you for the purposes of establishing and subsequently managing the operational, technical and administrative relationship related to the provision of the Services and the execution of the communications related to the execution of the established relationship;
b. to allow the navigation and consultation of Edirama’s websites;
c. respond to requests for assistance or information, which we will receive by e-mail, telephone or chat through the “Contact Us” page of our Site, or through the “Support” form accessible from the “Support” page of the Site.
d. comply with legal, accounting and tax obligations;
e. carry out direct marketing via e-mail for services and products similar to those purchased by you, unless you have objected to such treatment initially or on the occasion of subsequent communications, in order to pursue Edirama di M. Rapparini’s legitimate interest in promoting products or services in which you may reasonably be interested.
The legal basis for the processing of personal data for the purposes mentioned in section a-b-c is Article 6(1)(b) of the Regulation, as the processing is necessary for the provision of contractual services. The provision of Personal Data for these purposes is optional, but failure to provide them would make it impossible to activate the requested Services.
The purpose referred to in section d) represents a legitimate processing of personal data in accordance with Article 6(1)(c) of the Regulation. Once the Personal Data have been transferred, the processing may be actually necessary to fulfil the legal obligations to which Edirama di M. Rapparini is subject.
The processing referred to in paragraph “and”, carried out for e-mail marketing purposes on products or services similar to those you have purchased, is instead based on its legal basis, pursuant to art. 6.1.f of the Regulation, on the legitimate interest of Edirama di M. Rapparini to promote its products or services in a context in which the data subject can reasonably expect this type of processing, to which he can also object at any time. In fact, if you wish to oppose the processing of your data for marketing purposes, referred to in section “and”, you may do so at any time through your control panel, or by sending a request to email@example.com or through the mechanism proposed in the footer of commercial emails.
2. Processing methods
For the purposes indicated, your data are processed by computer and on paper. Processing operations are carried out in such a way as to guarantee the logical and physical security and confidentiality of your personal data.
3. Nature of personal data
Your personal data, relating to the provision of the requested service, will be processed.
4. Compulsory or optional nature of the concession
The provision of your personal and sensitive data is not mandatory, but any refusal may make it impossible or extremely difficult to provide the requested services.
5. Scope of communication and dissemination of data
Your data can be communicated to:
all subjects whose right to access such data and ‘recognized under regulatory measures;
to our collaborators, employees, within the scope of their duties;
to all those natural and/or legal persons, public and/or private, when the communication is necessary or functional for the development of our activity and in the form and for the purposes indicated above;
6. Transfer of personal data to a third country
The personal data collected by Edirama di M. Rapparini are not transferred to a third country.
7. Method and duration of the storage of personal data
The Personal Data processed for the purposes referred to in sections a-b-c will be kept for the time strictly necessary to achieve those purposes. In any case, Edirama di M. Rapparini will process the Personal Data up to the time allowed by the Italian law to protect your interests (Art. 2946 c.c. et seq.).
The Personal Data processed for the purposes referred to in paragraph “d” will be kept until the time foreseen by the specific obligation or applicable legal rule.
For the purposes of section “e”, your Personal Data will be processed until your consent is revoked or until five years after you have ceased to be a customer of Edirama di M. Rapparini, or have simply registered on the Site, and have not made any purchase of products or services. In any case, Edirama di M. Rapparini reserves the right to keep your Personal Data until the moment foreseen by the Italian law for the protection of its own interests (Art. 2947(1)(3) c.c.). Further information on the period of data retention and the criteria used to determine such period may be requested in writing from the Owner.
6. Identification of the Owner
Matteo Rapparini – email firstname.lastname@example.org
7. Rights of the person concerned
7.1 Article 15 (right of access), 16 (right of rectification) of Regulation EU 2016/679
The data subject shall have the right to obtain from the controller confirmation that personal data concerning him or her are being processed and, if so, to obtain access to the personal data and to the following information:
(a) the purposes of the processing;
(b) the categories of personal data concerned;
(c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
(d) the intended storage period of the personal data or, if this is not possible, the criteria used to determine this period;
(e) the existence of the right of the data subject to request the controller to correct or erase personal data or to restrict the processing of personal data relating to him or her or to object to such processing;
(f) the right to lodge a complaint with a supervisory authority;
(h) the existence of an automated decision-making process, including profiling and, at least in such cases, significant information on the logic involved, as well as on the importance and the expected consequences of the processing for the data subject.
7.2 Right pursuant to Article 17 of Regulation EU 2016/679 – right of deletion (‘right to forget’)
The data subject shall have the right to obtain from the data controller the deletion of personal data relating to him/her without undue delay, and the data controller shall be under an obligation to delete personal data without undue delay if any of the following circumstances apply
(a) the personal data are no longer necessary for the purposes for which they were collected or otherwise processed;
(b) the data subject withdraws the consent on the basis of which the processing was carried out in accordance with Article 6(1)(a) or Article 9(2)(a) and if there is no other legal basis for the processing;
(c) the data subject opposes the processing according to Article 21(1) and there are no compelling legitimate grounds for doing so, or objects to the processing according to Article 21(2);
(d) the personal data have been processed unlawfully;
(e) the personal data must be erased in order to comply with a legal obligation under Union law or under the law of the Member States to which the controller is subject;
(f) personal data have been collected in connection with the provision of information society services referred to in Article 8(1) of Regulation (EEC) No 2016/679
7.3 Right referred to in Article 18 Right to restriction of processing
The data subject has the right to obtain from the data controller the restriction of the processing when one of the following situations occurs
(a) the accuracy of the personal data is contested by the data subject for as long as it is necessary for the controller to verify the accuracy of the data;
(b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead that their use be restricted;
(c) even if the controller no longer needs it for processing purposes, the personal data are necessary for the data subject to establish, exercise or defend a right before the courts;
(d) the data subject has objected to the processing pursuant to Article 21(1) of Regulation (EC) No 2016/679, pending verification that the legitimate interests of the controller prevail over those of the data subject.
7.4 Right under Article 20 Right to retain data
The data subject shall have the right to receive in a structured, commonly used and machine-readable form personal data relating to him/her which are supplied to a controller, and shall have the right to have them communicated to another controller without constraint by the latter.
8. Withdrawal of consent to processing
You have the right to revoke your consent to the processing of your personal data by sending a registered letter with acknowledgement of receipt to the following address: via Paolo Fabbri 1/4 – 40138 Bologna accompanied by a photocopy of your identity card, with the following text: <>. At the end of this operation, your personal data will be deleted from the files as soon as possible.
For further information on the processing of your personal data, or to exercise the rights mentioned in paragraph 7, you can send a registered letter with acknowledgement of receipt to the following address: via Paolo Fabbri 1/4 – 40138 Bologna. Before you can provide or modify any information, it may be necessary to verify your identity and answer some questions. You will be given an answer as soon as possible.