INFORMATION ON THE PROCESSING OF PERSONAL DATA

Information provided pursuant to articles 13-14 of the GDPR

(General Data Protection Regulation) 2016/679

(GOOGLE TRANSLATED)

Dear User,
in compliance with the provisions of the European Regulation 2016/679 (in initials GDPR)

Affittacamere FABER

wishes to inform you that the personal data provided by you or acquired by us in the context of our activity, necessary to execute the services offered to you, will be treated in compliance with the legislation on privacy and principles of correctness , lawfulness , transparency and protection of your privacy and your rights. </ p>

We would also like to pass on the following information to you:

1. OWNER OF TREATMENT and RESPONSIBLE FOR DATA PROTECTION is TESSCAFFE ‘S.a.s. via Giuseppe Verdi, 18 07029 Tempio Pausania SS – VAT number 02280040904– email: info@aff Affittacamerefaber.it

2. DATA PROCESSED, PURPOSE AND LEGAL BASIS OF THE PROCESSING

2.1. The computer systems and software used to operate the site www.aff Affittacamerefaber.it acquire some personal data which are implicit consequences of the use of information protocols on the Internet (for example, domain names and IP addresses). These data are not accompanied by additional personal information and are used to obtain anonymous statistical information on the use of the site, to check how it is used and to ascertain any liability in the event of computer crimes. The legal basis that legitimizes the processing of such data is the need to make the site’s features usable as a result of User access.

2.2. The data provided voluntarily by the User are instead those necessary for the Data Controller to provide the services available and are processed lawfully and fairly, they are also collected and recorded for the specific, explicit and legitimate purposes indicated below and are used in operations of treatment that is not incompatible with these purposes.

Personal data (personal identification data such as, for example: name and surname, company name, tax code and VAT number, address, telephone / fax, e-mail, bank and payment details) are possibly collected and processed:

a) to carry out customer relationship activities based on pre-contractual and contractual agreements ;

b) for internal administrative, fiscal or accounting purposes connected to the customer-supplier relationship and to fulfill the obligations generally provided for by the Data Controller by laws or regulations, by community legislation, from requests from the judicial authority or to exercise the rights of the owner (for example the right to defense in court); such data may be processed by third parties appointed to carry out administrative, tax or accounting obligations.

c ) in the presence of specific and distinct consent of the User , for the following marketing purposes : send ( via e-mail, post, text message or telephone contact) newsletters, updates on the activities of the Data Controller, advertising material or commercial communications – on products or services offered by the Data Controller that the User may consider of your interest and to detect the degree of satisfaction on the quality of services;

The legal basis that legitimizes the processing of the data referred to in points “a” (pre-contractual and contractual agreements) and “b” (administrative, accounting or tax purposes) is the execution of a provision of services to which the User is a party, or the performance of pre-contractual activities at the request of the User.

In the cases expressly indicated in point “c”, if the company were to initiate this type of treatment, the legal basis is the consent freely given by the User.

2.3. Pursuant to art. 9 and 10 of the GDPR, the User can give the Data Controller qualifiable data as “special categories of personal data” (ie those data that reveal “racial or ethnic origin, political opinions, beliefs relating to hygienic or philosophical, or trade union membership … genetic data, biometric data intended to uniquely identify a natural person, data relating to the person’s health or sexual life or sexual orientation “). These categories of data may be processed by the Data Controller only with the consent of the User, expressed in writing by signing this Information or after having read it, by other written means (email, etc.) for contractual requirements and related fulfillment of legal and tax obligations. and for any personnel selection needs.

& nbsp;

3. PROCESSING METHOD

The processing of the User’s personal data is carried out by means of the following operations: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data.

The User’s personal data are collected following direct sending to the Data Controller, by filling in forms or forms in general prepared for this purpose, also included in contractual documents, or collected by telephone within the of pre-contractual activities. The data are processed both by manual processing in paper format and by electronic or in any case automated, IT and telematic tools. The collected data are recorded and stored by the Data Controller in computer and paper archives, as well as kept and controlled in such a way as to minimize the risks of destruction or even accidental loss, unauthorized access and treatment that is not permitted or does not comply with the purposes. of the collection.

& nbsp;

4. NATURE OF DATA COMMUNICATION

The provision of personal data relating to the processing is optional. However, failure to provide the data, partial or total, may result in the partial or total impossibility of establishing or continuing the relationship with the User, to the extent that such data are necessary for the execution of the same.

The provision of data for marketing purposes is also optional. The User can therefore decide not to provide any data or subsequently deny the possibility of processing data already provided: in this case, he will not be able to receive newsletters, commercial communications and advertising material in general relating to the services offered by the Data Controller.

& nbsp;

5. RECIPIENTS OR POSSIBLE CATEGORIES OF RECIPIENTS OF THE PERSONAL DATA

The processing of the User’s data is carried out by the Owner in compliance with current legislation on privacy and data security. In any case, the User’s personal data are not subject to disclosure.

& nbsp;

6. TRANSFER OF DATA TO A THIRD COUNTRY OR INTERNATIONAL ORGANIZATIONS

As part of the management of the contractual relationship, no transfer of User data to third countries outside the EU or to international organizations is envisaged.

7. PERIOD OF CONSERVATION OF PERSONAL DATA OR CRITERIA USED TO DETERMINE THIS PERIOD

For any purposes referred to in letters “c” (marketing), the User’s personal data will be processed and stored by the Data Controller until the User’s consent is revoked or until exercise, by part of the User, of the right to object to the processing or to the cancellation of personal data.

& nbsp;

8. USER RIGHTS

In your capacity as Data Subject and in relation to the treatments described in this Notice, the User has the rights referred to in articles 7, from 15 to 21 and 77 of the GDPR and, in particular, the:

• right of access – article 15 GDPR: right to obtain confirmation as to whether or not personal data concerning the User is being processed and, if so, obtain access to such personal data, including a copy thereof;

• right of rectification – article 16 GDPR: right to obtain, without undue delay, the correction of inaccurate personal data concerning the User and / or the integration of incomplete personal data;

• right to cancellation (right to be forgotten) – article 17 GDPR: right to obtain, without undue delay, the cancellation of personal data concerning the User; < / p>

• right to limitation of treatment – article 18 GDPR: right to obtain limitation of treatment, when: the interested party disputes the accuracy of personal data, for the period necessary for the Owner to verify the accuracy of such data; the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that its use be limited; personal data are necessary for the interested party to ascertain, exercise or defend a right in court; the interested party opposed the processing pursuant to art. 21 GDPR, in the period of waiting for the verification of the possible prevalence of legitimate reasons of the Data Controller with respect to those of the interested party;

• right to data portability – article 20 GDPR: right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning the User provided to the Data Controller and the right to transmit them to another Data Controller without impediments, if the processing is based on consent and is carried out by automated means. Furthermore, the right to obtain that the User’s personal data are transmitted directly to another Data Controller if this is technically feasible;

• right to object – article 21 GDPR: right to object, at any time for reasons connected with your particular situation, to the processing of personal data concerning the User based on the condition of lawfulness of the legitimate interest or the execution of a task of public interest or the exercise of public authority, including profiling, unless there are legitimate reasons for the Data Controller to continue the processing that prevail over the interests, rights and freedom of the interested party or for the assessment, exercise or defense of a right in court. Furthermore, the right to object to processing at any time if personal data are processed for direct marketing purposes, including profiling, to the extent that it is connected to such direct marketing;

• right of revocation – Article 7 of the GDPR: the User has the right to revoke their consent at any time. The withdrawal of consent does not affect the lawfulness of the processing based on consent before the withdrawal;

• right of complaint – article 77 GDPR: the User has the right to lodge a complaint with the Guarantor Authority for the protection of personal data, Piazza di Montecitorio 121, 00186, Rome (RM) .

& nbsp;

9. METHOD OF EXERCISE OF RIGHTS

The User may at any time exercise their rights by sending a registered letter with return receipt to:
TESSCAFFE ‘S.a.s. via Giuseppe Verdi, 18 07029 Tempio Pausania SS – VAT number 02280040904–

or by email to the address: info@aff Affittacamerefaber.it

To exercise the rights as indicated in this Notice as well as to receive any information relating to them, the User may contact the Data Controller who, also through the designated structures, will take charge of the request and to provide the User, without undue delay and in any case, at the latest, within one month of receipt of the same, the information relating to the action taken regarding the request.

The exercise of rights by the User is free pursuant to Article 12 of the GDPR. However, in the case of manifestly unfounded or excessive requests, also due to their repetitiveness, the Owner may charge the User a reasonable fee, in light of the administrative costs incurred to manage his request, or deny the satisfaction of his request. / p>

The last modification to this Privacy Policy was made on 23.05.2018 vers.1.0.