INFORMATION ON THE TREATMENT OF PERSONAL DATA
Trevinvest Srl/ Residence la Filanda (hereinafter, "Data Controller"), as Data Controller, informs you pursuant to art. 13 EU Regulation n. 2016/679 (hereinafter "GDPR") that your data will be processed in the manner and for the following purposes.
1) Subject of processing.
The Data Controller processes personal data - identifiers (for example: name, surname, title, phone number, e-mail), afterwards only "data", communicated by you.
2) Legal basis and purpose of the processing.
The processing of personal data provided will only take place to respond to specific requests, received by completing the appropriate contact form. The provision of data for the aforementioned purpose is necessary to respond to your requests; in the absence of this it will not be possible to provide the information requested.
3) Processing methods and storage period.
The processing of your personal data is realized through the operations indicated in the art. 4 n. 2) GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, use, limitation, communication, cancellation and destruction of data. Your personal data is processed both on paper and electronic / digital.
The Data Controller will process personal data for the time necessary to fulfill the purposes referred to in paragraph 2), without prejudice to the need of the Data Controller for longer periods, linked to the need to ascertain, exercise or defend a right in judicial branch or, whenever the authorities exercise their functions.
4) Categories of recipients of personal data.
Always within the limits and with the purpose referred to in the previous paragraphs, your personal data may possibly be communicated, in addition to to the data processors and / or sub-data processors (if appointed) also to the subjects acting under the authority of the same or of the Data Controller (employees and internal coworkers duly educated),to Public Bodies and Institutions, to the subjects to whom the communication of the data must be carried out in fulfillment of the obligation provided for by the law, by a regulation or by the Community legislation or to fulfill an order from Judicial Authority, as well as to any other third parties, in the cases expressly provided for by law, or even if the communication will be necessary for the protection of the data controller in court.
In any case, you may request to be updated on the data relating to the data processors and sub-data processors, who may be appointed, by sending a written request to the addresses indicated in point 6 below.
5) Rights of the Data Subject.
As a Data Subject, you have the rights provided for by articles 15, 16, 17, 18, 20 and 21 of the GDPR and precisely the rights of:
a) access: the Data Subject has the right to obtain from the Data Controller the confirmation that the processing of personal data concerning him/her is in progress or not, and, in this case, to gain access to personal data, to information regarding the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients, the retention period (if possible), the right to rectify, cancel, limit, oppose, complain to a supervisory authority;
b) correction: the Data Subject has the right to obtain from the data controller the rectification of inaccurate personal data concerning him/her without unjustified delay; c) cancellation ("right to oblivion"): the Data Subject has the right to obtain from the Data Controller the deletion of data concerning him/her without unjustified delay in the cases provided for by art. 17 of the GDPR;
d) treatment limitation: the Data Subject has the right to obtain from the Data Controller the limitation of the processing of data concerning him / her when there are the hypotheses referred to in art. 18 of the GDPR;
e) data portability: the Data Subject has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him /her provided to a data controller and has the right to transmit such data to another data controller without impediment from the data controller to whom he/she provided them in the cases provided for by art. 20 of the GDPR;
f) opposition: the Data Subject has the right to object at any time to the processing of personal data concerning him/her in the cases provided for by art. 21 of the GDPR;
g) revocation: the Data Subject has the right to revoke the consent given to the Data Controller at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation;
h) make a complaint to the supervisory authority (Italian privacy guarantor).
6) Procedures for exercising the rights.
You can exercise your rights at any time by sending:
- a registered mail firstname.lastname@example.org;