Information pursuant to art. 13 of Legislative Decree 196/2003 and article 13 of EU Regulation no. 2016/679
Pursuant to art. 13 of Legislative Decree 196/2003 (hereinafter “Privacy Code”) and art. 13 of EU Regulation no. 2016/679 (hereinafter “GDPR 2016/679”), containing provisions for the protection of persons and other subjects with respect to the processing of personal data, we wish to inform you that the personal data provided by you will be processed in compliance with the aforementioned legislation and the confidentiality obligations to which Federica Pessina is bound.
Data controller
The Data Controller is Federica Pessina in the person of the President and legal representative pro tempore Federica Pessina.
Data Protection Officer (DPO)
The data protection officer (DPO) is Federica Pessina. The data controller is Federica Pessina.
Purpose of the processing
The personal data provided by you are necessary for the obligations required by law, and will be kept within what is established.
Treatment and conservation methods
The processing will be carried out automatically and/or manually, in compliance with the provisions of the art. 32 of the GDPR 2016/679 and Annex B of Legislative Decree 196/2003 (articles 33-36 of the Code) regarding security measures, by specifically appointed individuals and in compliance with the provisions of the articles. 29 GDPR 2016/679.
We inform you that, in compliance with the principles of lawfulness, limitation of purposes and minimization of data, pursuant to art. 5 GDPR 2016/679, subject to your free and explicit consent expressed at the bottom of this information, your personal data will be retained for the period of time necessary to achieve the purposes for which they are collected and processed.
Scope of communication and dissemination
We also inform you that the data collected will never be disclosed and will not be communicated without your explicit consent, except for necessary communications which may involve the transfer of data to public bodies, consultants or other subjects for the fulfillment of legal obligations. .
Transfer of personal data
Your data will not be transferred either to member states of the European Union or to third countries not belonging to the European Union.
Special categories of personal data
Pursuant to articles 26 and 27 of Legislative Decree 196/2003 and articles 9 and 10 of EU Regulation no. 2016/679, you could provide the data controller with data that can be classified as “particular categories of personal data”, i.e. data that reveal “racial or ethnic origin, political opinions, religious or philosophical beliefs, or membership union, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to the person’s health or sexual life or sexual orientation”. These categories of data may be processed only with your free and explicit consent, expressed in written form at the bottom of this information.
Existence of an automated decision-making process, including profiling
The DATA CONTROLLER does not adopt any automated decision-making process, including profiling, referred to in Article 22, paragraphs 1 and 4, of EU Regulation no. 679/2016.
Rights of the interested party
At any time, you may exercise, pursuant to art. 7 of Legislative Decree 196/2003 and articles 15 to 22 of EU Regulation no. 2016/679, the right to:
a) request confirmation of the existence or otherwise of personal data;
b) obtain information regarding the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
c) obtain the rectification and deletion of data;
d) obtain the limitation of processing;
e) obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
f) object to processing at any time and also in the case of processing for direct marketing purposes;
g) oppose an automated decision-making process relating to natural persons, including profiling.
h) ask the data controller to access personal data and to rectify or cancel them or limit the processing that concerns them or to oppose their processing, in addition to the right to data portability;
i) revoke consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
j) lodge a complaint with a supervisory authority.
You can exercise your rights with a written request sent to hello@inwoonder.land
