Fair contact data processing
Information on the processing of personal data pursuant to art. 13 of the European Regulation (EU) 2016/679
This information is made pursuant to Regulation (EU) 2016/679 (hereinafter "Regulation" or "GDPR") and describes the methods of processing personal data collected by the Procosmet S.r.l. On the occasion of exhibition events
The Procosmet S.r.l. (later, "owner"), as data controller, informs it pursuant to art. 13 EU Regulation n. 2016/679 (later, "GDPR") that your data will be processed in the manner and for the following purposes:
Subject of the processing and type of data processed
The owner deals with the personal data, identifiers (for example, name, surname, company name, address, telephone, e-mail, bank references and payment)-below, "personal data" or even "data") communicated by you on the occasion of the exhibition event.
Data processing owner
The data controller is the Procosmet S.r.l., via della Solidarity n. 29/A, 40056 Crespellano (BO), P.I. 02883540243 below "Owner". The owner can be contacted at the email address: firstname.lastname@example.org
Purposes, legal basis for treatment and conservation times
The data that the user chooses to provide are collected and processed by the owner for the following purposes:
A) to fulfill the pre -contractual, contractual and tax obligations deriving from relationships with you in place or in the activation and proposal phase (art. 6 lett. B) Reg. 2016/679). The data collected for contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and according to the provisions of the law;
B) to fulfill the obligations provided for by law, by a regulation, from community legislation or by an order of authority (such as on anti -money laundering) (art. 6 lett. C) Reg. 2016/679). The data collected for legal obligations will be kept for the time necessary to carry out the aforementioned purposes and according to the provisions of the law;
C) exercise the rights of the owner, for example the right of defense in court (art. 6 lett. F) Reg. 2016/679);
D) to follow up on the specific requests aimed at the owner for information communications relating to the services of the same owner, through e -mail messages or other communication tools such as the phone (art. 6 lett. B) Reg. 2016 /679).
E) Soft Spam activities. Sending commercial communications relating to services and products and services of the owner similar to those of which he has already benefited, except for the exercise of the right of opposition (art. 130 c. 4 Privacy Code).
F) send by email, mail and/or sms and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the owner and detection of the degree of satisfaction on the quality of services (art. 6 lett. a) Reg. 2016/679). The provision of these data for these purposes is completely optional but indispensable in order to proceed with the supply of the promotional information service described above. The personal data thus provided are used to the sole purpose of satisfying or reflected to the requests transmitted and are communicated to third parties only in the event that this is necessary for this purpose and only subject to the performance of explicit consent by the interested party. To send the newsletter we use www.klaviyo.com, read their complete information here.
The data collected for contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and according to the provisions of the law. The data collected for tax /administrative obligations or for contractual obligations will be kept for the time necessary to carry out the aforementioned purposes and according to the provisions of the law; The data collected for purposes attributable to the legitimate interest of the owner will be held up to the satisfaction of this interest. The user can obtain further information regarding the legitimate interest pursued by the owner by contacting the owner. The data collected on the basis of the user's consent can be kept until this consent is revoked.
Methods of treatment
The owner deals with the personal data of users by adopting the appropriate security measures aimed at preventing access, dissemination, modification or destruction of personal data.
The treatment is carried out through IT and/or electronic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, categories of persons may have access to the data involved in the corporate organization (administrative, commercial, legal, system administrators) or external subjects (such as third party service providers, postal couriers, hosting providers, computer companies, communication agencies) also appointed, if necessary, responsible for the treatment by the owner.
Among the external subjects appointed external managers of the data processing includes partner commercial activities (suppliers). The updated list of Managers can always be requested from the data controller.
Place and times
The data are processed at the owner's operating offices and in any other place where the parties involved in the treatment are located. The data are processed for the time necessary for the performance of the requested service, or requested by the purposes described in this document, and the interested party can always request the interruption of the processing or the cancellation of the data.
Personal data are not transferred abroad.
Rights of the interested parties
Interested parties - the individuals identified or identifiable to whom the data refer - can exercise specific data protection rights, reported in the following list:
a) Right of access: right to obtain the confirmation from the owner is a processing of personal data and in this case, to obtain access to personal data and detail information regarding the origin, purposes, Categories of data processed, communication and/or data transfer recipients and more;
b) Right of correction: right to obtain from the owner the correction of inaccurate personal data without unjustified delay, as well as the integration of incomplete personal data, also providing an supplementary declaration;
c) Right to cancellation ("oblivion"): right to obtain from the owner the cancellation of personal data without unjustified delay in the event that: i. The necessary data are no longer necessary than the purposes of the processing; II. The consent on which the treatment is based is revoked and there is no other legal basis for the treatment; III. Personal data were processed illegally; IV. Personal data must be deleted to fulfill a legal obligation;
d) right of opposition to the processing: right to oppose at any time to the processing of personal data which have as its legal basis a legitimate interest of the owner;
e) Right to limitation: right to obtain the limitation of the processing from the Data Controller, in the event that the accuracy of personal data is contested (for the period necessary for the Data Controller to verify the accuracy of such personal data), if the processing is illegal and/or the interested party opposed the treatment;
f) Right to data portability: right to receive in a structured format, commonly used and legible from automatic device personal data and to transmit such data to another data controller, if technically feasible, only for cases where the processing is based on consent or contract and for only data processed through electronic tools;
g) Right to propose a complaint to the control authority: without prejudice to any other administrative or jurisdictional appeal, the interested party who believes that the treatment concerning him violates the regulation has the right to propose a complaint with the control authority of the Member State in to which he resides or work habitually, or of the state in which the alleged violation has occurred. Rights can be exercised by contacting the owner at the following addresses: email@example.com