According to the European law on data security (Art.13, European Regulation 2016/679) the User acknowledges that By Carpel S.r.l. undertakes to process the User’s personal data according to the principles of correctness, lawfulness and transparency and protection of confidentiality. Therefore, the User is informed that
A. CATEGORIES OF DATA: the object of the processing may be your personal data such as identification data, personal data and contact details.
B. DATA CONTROLLER: the data controller is By Carpel S.r.l., Via Como 79, Brivio (LC) – VAT number 03338830130, which can be contacted by telephone on 039.5320952 or by e-mail at [email protected].
C. SOURCE OF PERSONAL DATA: personal data held by the Owner are collected directly from the interested party.
D. PURPOSES OF DATA PROCESSING AND LEGAL BASIS: the processing of your data, collected and stored in relation to the compilation of this form, has as legal basis your consent and is carried out for the following purposes: request for information.
E. DATA CONTROLLERS: within the limits pertinent to the processing purposes indicated, your data may be communicated to partners, consulting firms, private companies, appointed as Data Processors by the Data Controller. Your data will not be disseminated in any way.
F. TRANSFER OF DATA TO THIRD COUNTRIES: your data will not be transferred to a third country.
G. PERIOD OF STORAGE: the data collected will be stored for a period of time not exceeding the achievement of the purposes for which they are processed (“principle of limitation of storage”, art.5, GDPR) or according to the deadlines provided for by law, not exceeding 1 year. The verification of the obsolescence of the stored data in relation to the purposes for which they have been collected is carried out periodically.
H. RIGHTS OF THE INTERESTED PARTIES: the interested party is always entitled to ask the Data Controller for access to your data, the correction or deletion of the same, the limitation of the processing or the possibility to oppose the processing, to request the portability of the data, to revoke the consent to the processing by asserting these and other rights provided by GDPR by simple communication to the Data Controller. The data subject may also lodge a complaint with a supervisory authority.
I. OBLIGATIONS OR LESS OF CONFERENCE: we inform you that the provision of data is optional for some fields and mandatory for others (indicated by an asterisk) and failure to provide them will result in the failure to perform the requested service.
J. METHODS OF DATA PROCESSING: the personal data you provide will be processed in compliance with the above mentioned regulations and the confidentiality obligations that inspire the activity of the Owner. The data will be processed both by computer and on paper and on any other type of suitable support, in compliance with the appropriate security measures pursuant to the GDPR.
L. AUTOMATED DECISIONAL PROCESSES: no automated decision-making processes are foreseen.