Newsletter registration notice
This document provides the information note in accordance with article 13 of the UE regulation n. 2016/679 on data protection, General Data Protection Regulation, hereinafter GDPR
• Controller’s identity
It is possible to contact the data controller by email to the address RAFFAELLA.BOMBRINI@CAPITOLSRL.IT or by mail to the company’s headquarters, at the abovementioned address.
The data Controller ensure the security, confidentiality and protection of the personal data held, in any phase of the data processing.
Collected data are used in accordance with the principles of lawfulness, transparency and in accordance with the GDPR.
• Purposes of processing
Personal data, voluntarily provided, will be processed in order to handle the information requested.
The following data are required in the “contact” registration form: name and surname (mandatory field), email address (mandatory field).
The data collected will not be used for purposes other than those specified in this information note, without previously informing the data subject and, when necessary, obtaining the data subject prior consent.
• Legal basis for processing
The legal basis for the data processing for the aforementioned purpose is the fulfilment of a contract of which the data subject is a part, or the execution of pre-contractual measures requested by the data subject (e.g. the request for information sent).
The provision of data is optional, but necessary, as the denial to provide those data implies the inability to deal with the requests.
• Processing Methods
The processing of personal data is carried out by means of both hard copy and electronic and digital tools, for the operations included in the article 4 n. 2 of the GDPR, precisely: collection, recording, organization, storage, consultation, elaboration, modification, selection, use, erasure or destruction.
• Data recipient
The personal data of data subject will not be disclosed to unspecified subject, in any form, including consultation.
The data will be processed by people who are under the authority of the data controller and/or collaborators, after receiving explicit authorization and appropriate instructions.
Without prejudice to the communications made in compliance with law and contractual obligations, data can be disclosed to entities allowed to access them on the basis of provisions of the law, regulations, Community legislation, as well as, when necessary for the pursuit of the aforementioned purposes and to the extent which is strictly necessary, to entities providing services to the controller, such as, by way of example, computer technicians and IT personnel in charge of the computer system, in accordance with the GDPR and for the specified purposes.
• Data transfer
The data controller does not transfer the personal data of the data subject to third countries or international organizations. Although, we reserve the right to use cloud service; in this case the service suppliers will be chosen among those who provide appropriate safeguards, as established by the article 46 of the GDPR 679/16.
• Data storage
Stored personal data will be stored for the period of time that is strictly necessary for the fulfilment of requests and in accordance with the law.
Once the necessary time has elapsed, data will be erased or rendered anonymous in such a manner that the data subject is no longer identifiable, even indirectly or by means of any other database, without prejudice to the necessity of storing data in order to comply with the existing regulations and obligations, also after the termination of processing operations.
• Data subject rights
At any moment, the data subject can exercise the following right, pursuant articles 15 and 22 of the GDPR:
- right to access his/her personal data
- right to rectify and erase personal data
- right to the restriction of processing
- right to data portability
- right to object
The data subject has the right to withdraw his or her given consent at any time. Processing operations carried out based on the given consent, before its withdrawal and their legal effect will remain valid, also after the withdrawal of consent.
In order to exercise his or her rights, to report problems or to ask for clarifications on the data processing, the data subject can send an email to the following address RAFFAELLA.BOMBRINI@CAPITOLSRL.IT.
If he/she consider the personal data processing as contrary to the existing law, the data subject is entitled to exercise the right to lodge a complaint with a supervisory authority, in Italy, The Italian Data Protection Authority (Garante per la protezione dei dati personali).
• Amendments and updates
This information note may be subject to modification and/or integrations, including because of updates of the applied law.
The update note will be available on the website http://www.capitolsrl.it, at the privacy section.