Form INL – Date Added 10/2022
Dear Data Subject,
EDG SRL as Data Processor in accordance with Article no. 13 of the European Regulation no. 679/2016 "General Data Protection Regulation (GDPR)" (hereinafter referred to as the EU Regulation), containing provisions on the processing of personal data, would like to inform you about the processing of your personal data.
The provision requires that anyone who processes personal data must inform the data subject of the data processed and the elements qualifying the processing, which must in any case be carried out in a lawful, correct and transparent manner, as well as protect the confidentiality and guarantee the rights of the data subject.
It should be noted that data processing means any operation or series of operations concerning the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, distribution and destruction of data.
1.The Data Processor
The Data Processor is EDG SRL with registered office in Via Gaffarello, 75 – 35010 Borgoricco (PD) and operational headquarters in Via Grandi 12, 30036 Santa Maria di Sala (VE), Tax Code and VAT no.: 05252830285, contact details: telephone +39 041 5739911, email: firstname.lastname@example.org.
2. Nature of the Data Processed, the Purpose and Legal Basis of the processing
Nature of the data processed. In relation to the purposes of the processing below, please note that only "common personal data" will be processed, such as, for example:
Purpose of processing. Your personal data will be processed for the following purposes:
Legal basis of processing. Personal data for the purposes set out in 2A and 2B will be lawfully processed to fulfil pre-contractual and contractual obligations between us and the user (article 6, paragraph1 letter b), to fulfil our legal obligations (article 6 paragraph1 letter c).
For the purposes set out in points 2C-2D of this information notice, your personal data may only be lawfully processed with your consent (article 6, paragraph1 letter a EU Regulation), specific, separate, express, documented, prior and entirely optional.
The consent you have given may be withdrawn at any time, without affecting the lawfulness of the processing based on the consent given before the withdrawal (article 7 paragraph 3 EU Regulation)
We also inform the data subject that, pursuant to article 21 of the EU Regulation, the data subject has the right to object at any time to the processing of personal data concerning them carried out for the purposes of direct marketing (including profiling) and that, should the data subject object to the processing, the personal data may no longer be processed for such purposes.
Clarification: in keeping with the principle of maximum transparency towards the Data Subject that is a distinctive feature of our Company, we wish to inform you that in the event that you decide to give your consent to point 2C (marketing), you must be informed in advance and aware that the purposes of the processing activities pursued are of a specific commercial, advertising, promotional and marketing nature in the broadest sense, such as:
3.Recipients of the data and processing methods
The processing of your personal data will be based on the principles of fairness, lawfulness and transparency and may be carried out using paper and electronic tools both by the staff of the undersigned Company, authorised/charged with the processing of personal data, and by external parties called upon to carry out specific tasks, on behalf of the Data Processor, in their capacity as Data Processors, pursuant to article 28 of the EU Regulations, subject to our letter of appointment requiring them to observe the duty of confidentiality and security in the processing of personal data, and the adoption of suitable security measures to prevent the loss of data, unlawful and incorrect use, and unauthorised access, in compliance with the provisions in force on the protection of personal data.
For the sake of brevity, the detailed list of these figures is available at the Data Controller's headquarters and is at your disposal.
Your personal data will not be disclosed and will not be transferred to third countries or international organisations, will not be disclosed to third parties except for legal or contractual obligations
4. Data retention periods
Your personal data will be retained for a period of time not exceeding the purposes for which they are processed, in compliance with the principle of retention limitation provided for in the EU Regulation and/or for as long as necessary for legal and contractual obligations or until you revoke your specific consent, and therefore
In order to guarantee the stated retention periods, a periodic check is to be carried out annually on the data processed and on whether it can be deleted if it is no longer needed for the intended purposes.
5. Consequences of non-disclosure of data
The personal data referred to in points 2A-2B of this information sheet are necessary, without which it would be impossible for us to proceed with registration (creation of your personal account) and fulfil our contractual and legal obligations.
On the other hand, the personal data referred to in points 2C-2D are optional, and refusal to provide them will not result in any consequences and will not affect your request to proceed with registration or to perform your contractual and legal obligations. You may therefore decide not to provide any data or subsequently refuse to process data already provided at any time.
6. Data subject rights
Data subjects have the rights set out in articles 15 to 22 of the EU Regulation below, and more specifically, data subjects have the right to:
Please note that there may be conditions or limitations to the rights of the data subject. It is therefore not certain whether, for example, data subjects have the right to data portability in all cases as this depends on the specific circumstances of the processing activity.
A further example: if you choose to object to the processing of your data, the Data Processor is entitled to assess your request, which may not be accepted if there are clear legitimate grounds for processing that override your interests, rights and freedoms.
7. Methods for exercising rights
At any time, you may exercise your rights in a clear and explicit manner by submitting:
What the Data Controller offers and what is the subject of the relationship with you in existence does not provide for the intentional acquisition of personal information referring to minors. If information on minors is unintentionally recorded, the Data Processor will delete it in a timely manner on the request or indication of the data subject.
9. D.P.O. – Appointed/Authorised – Data Processors
Below we provide you with some information that we need to bring to your attention, not only in order to comply with legal obligations, but also because transparency and fairness towards the Interested Parties is a fundamental part of our business.
DPO (Data Protection Officer). You can also contact the Data Protection Officer to obtain information and forward requests about your data or to report inefficiencies or any issues encountered. The Data Controller has appointed Mr Nicola Ghinello, who can be contacted as follows: telephone +39 348 3165267, email: email@example.com.
Appointees/Authorised Persons. The updated list of the appointees/Authorised persons and the staff involved in data processing is kept at the Data Controller's registered offices.
Data controllers. For the sake of brevity, the detailed list of these figures is available at our office and is at your disposal.