Customer information on the processing of personal data GDPR - EU Regulation 679/2016
The user's personal data are used by the Associazione Porté Disné, in compliance with the principles of personal data protection established by Art. 13 of the EU Regulation GDPR 2016/679.
Methods and purposes of the data processing
In accordance with art. 4; Art. 6 of the UE Regulation GDPR 679/2016
We inform you that the data will be processed with the support of the following means:
a) Paper (registration forms, order forms, etc.)
b) Information technology (management, accounting software, etc.)
c) Electronic
for the following purposes:
• provision of services requested by the Customer and/or proposed by us or available on portals managed by the Associazione Porté Disné, partner companies or professionals
• newsletter, information material etc., as well as the conclusion of the contract of which the interested party is a part
• administrative and accounting purposes related to service contracts
Any refusal to allow data processing makes it impossible to use the service requested by the user.
Without prejudice to explicit refusal by the interested party, user data will also be processed for the following purposes:
• sending of proposals and commercial communications by e-mail or SMS or fax, by both the Associazione Porté Disné, partner companies or professionals
• market research and statistics, marketing and references on advertising communications (press, radio, TV, internet, etc.), product preferences
Legal basis
In accordance with the Art. 4 of the UE Regulation GDPR 679/2016
The provision of data is mandatory for all that is required by legal and contractual obligations and therefore any refusal to provide them in whole or in part may give rise to the inability to provide the requested services. The company processes optional user data on the basis of consent, i.e. through the explicit approval of this privacy policy and in relation to the methods and purposes described below.
Target groups
In accordance with the Art. 2 of the UE Regulation GDPR 679/2016
Without prejudice to the communications made in fulfilment of legal and contractual obligations, all the data collected and processed may be communicated exclusively for the purposes specified above to the following categories of interested parties:
• Consultants, Collaborators, Outsourcers
• Accounting and administrative
• Suppliers
• Banks and Credit Institutions
Data retention period
In accordance with the Art. 4 of the UE Regulation GDPR 679/2016
The mandatory data for contractual and accounting purposes are kept for the time necessary to carry out the professional and commercial relationship, sanctioned by the acceptance of an economic offer and/or stipulation of a mandate. Administrative and accounting data will be kept for 10 years following the date of commencement of the professional relationship with the customer (art. 2200 of the Italian Civil Code).
The data of those who do not purchase or use services, despite having had previous contact with company representatives, will be deleted or processed anonymously at the explicit request of the customer, where their conservation is not otherwise justified, unless it has been validly acquired the informed consent of the interested parties relating to a subsequent commercial promotion or market research activity.
Right of the data subject
In accordance to the Art. 15 of the UE Regulation GDOR 679/2016
Pursuant to European Regulation 679/2016 (GDPR) and national legislation, the interested party can, according to the methods and within the limits provided for by current legislation, exercise the following rights:
• request confirmation of the existence of personal data concerning him (right of access)
• know where they have originated from
• receive intelligible communication
• have information about the logic, methods and purposes of the treatment
• request their updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of the law, including those no longer necessary for the pursuit of the purposes for which they were collected
• in cases of consent-based processing, receive your data provided to the owner, in a structured and readable form by a data processor and in a format commonly used by an electronic device
• the right to lodge a complaint to the supervisory authority
Requests should be addressed to the Data Controller: Associazione Porté Disné