INFORMATION ON THE TREATMENT OF PERSONAL DATA
(According to UE 679/2016 legislation for the treatment of personal data)
(UPDATED 28/05/2018)
The Controller of the data treatment is Candusso Editrice di Lidia Carla Candusso with its office at Via Saronnino 41/47 – 21040 Origgio (VA), Codice Fiscale CNDLCR71D60L319A and P.IVA n. 03573750126 (to be known here after as the ‘Data Controller’). Treatment. Personal data is processed in full compliance with the UE 679/2016 rules. The data provided by the Customer (hereinafter referred to as the ‘Interested Party’) will be used for the sole purpose of following up their requests and will be processed by the ‘Data Controller’ with procedures, technical and IT tools suitable to protect the confidentiality and security of the data involved. The processing of the personal data of the ‘Interested Party’ consists of the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation or destruction of the same including the combination of two or more of the aforementioned activities. In any case, the ‘Interested Party’ will not be subjected to any automated processing that can collect the choices and habits of the user (data profiling). Contractual and legal obligations. The data of the ‘‘Interested Party’’ is processed for the performance of the following obligations: 1) Contractual obligations, such as the supply of goods and services to customers, including communication to banking institutions and the like, for the collection of payments and other related activities to contractual obligations; 2) Legal obligations, such as invoicing, obligatory accounting records and registrations, communications to the requesting authorities The data requested by the ‘Data Controller’ is mandatory for the conclusion of the contract and failure to provide data implies the impossibility for the ‘Interested Party’ to access the services. For the processing of personal data for the above purposes, the consent of the ‘Interested Party’ is not required as data processing is necessary for health treatment (diagnosis, assistance or health treatment and for the management of health systems and services on the basis of EU or Member State law or in accordance with a contract with a health professional referred to in letter h, Article 9 of the Regulation) or otherwise necessary for the execution of a contract of which the ‘Interested Party’ (Article 6, paragraph 1, letter b) of the Regulations) and, where applicable, to fulfil a legal obligation (Article 6, paragraph 1, letter a) of the Rules). Storage. The data will be kept for the time strictly necessary to provide the ‘Interested Party’ with the requested services and will be eliminated as a result of the request of the ‘Interested Party’, without prejudice to further conservation obligations established by law. Dissemination and communication. The data of the ‘Interested Party’ will not be disclosed and communicated to third parties, except for the fulfilment of contractual or legal obligations or without the explicit consent of the ‘Interested Party’. Responsibilities for the treatment of data. Within the scope of its activity and for the purposes indicated above, the ‘Data Controller’ may use services rendered by third parties that operate on behalf of the ‘Data Controller’ and according to its instructions, the so-called data processors, such as suppliers, commercial and production partners, intermediaries, technical consultants and other similar subjects who collaborate to fulfil the contractual commitments with the ‘Interested Party’, subjects that provide a service strictly and necessarily linked to the activity of the company as tax consultants , banks, shippers, insurance companies, public and private bodies, including for inspections or checks. The ‘Interested Party’ may request a complete and updated list of the persons nominated responsible for the treatment by contacting the contact indicated below. Transfer within the European Union and outside the EU. The data may be transferred within the European Union, where the ‘Data Controller’ or its suppliers and collaborators are based or have their own servers. Data will not be transferred outside the European Union. The ‘Interested Party’ has the right at any time to ask the ‘Data Controller’ for access (Article 15 of the GDPR) and the correction (Article 16 of the GDPR) of the data concerning him. You can also request the cancellation of your data (Article 17 GDPR) or the limitation of processing (Article 18 GDPR) or to oppose their processing (Article 21 GDPR), in addition to the right to data portability (Article 20 GDPR). In case of rectification or deletion or limitation of the data, the Controller will communicate any changes to the recipients to who the data is transmitted (Article 19 of the GDPR). In any case, the possibility is reserved for the ‘Interested Party’ to contact the Guarantor Authority or to refer to the Judicial Authority. The contact details of the‘‘Data Controller’ are as follows: Candusso Editrice di Lidia Carla Candusso Via Saronnino 41/47 – 21040 Origgio (VA) tel. +39 3471038009, email address: lidiacandusso@libero.it Declaration with respect to data processing (Regulation EU 2016/679)