PRIVACY POLICY

Handling

The Company adopts appropriate security measures to prevent unauthorized access, disclosure, change or destruction of personal data.

Handling of personal data is managed through software and/or online tools, with methods of organization and logic strictly related to the specified purposes. In addition to the Company, other individuals could in some cases have access to the data. These could be individuals involved in the organization of this application (system administrators and administration, sales, marketing, and legal staff) or external individuals (such as third-party providers of technical services, delivery companies, hosting providers, IT and communication companies) also nominated, if required, responsible for data handling by the Company. An updated list of those Responsible can be requested at any time from the Company.

Legal basis behind using personal data

The Company handles the Customer’s personal data based on one of the following conditions:

• the Customer has agreed to one or more specific purposes; note: in some legal cases the Customer could be authorized to use the personal data without the agreement of the Customer or any of the legal bases specified below, until the Customer opposes (“opt-out”) that use. However, this does not apply when the handling of personal data is regulated by European legislation on the protection of personal data;
• handling of data is necessary in order to carry out a contract with the Customer and/or carry out pre-contractual measures;
• handling of data is necessary in order to meet a legal requirement of the Company;
• handling of data is necessary in order to perform a task assigned to the Company based on public interest or the exercise of public authority;
• handling of data is necessary for the pursuit of legitimate interest on the part of the Company or third parties.

It is always possible to ask the Company to clarify the concrete legal basis of any use and, in particular, to specify if the use is based on law, present in a contract, or is necessary to carry out a contract.

Location

Handling of personal data will take place in the offices of the Company and the locations of any other party involved in its handling. For further information, please contact the Company.

The Customer’s personal data could be transmitted to a country other than that in which the Customer is located. To obtain further information on the location of handling of data, the Customer can refer to the section related to the details on how it is handled.

The Customer has the right to obtain information with regard to the legal basis of the transfer of personal data outside the European Union or to an international organization of public international law or to an organization consisting of two or more countries, for example the United Nations, and also with regard to the safety measures put in place by the Company to protect personal data.
The Customer can check whether any such transfer mentioned above takes place by examining the section of this document related to the details of the handling of personal data and can ask the Company for information, contacting them at the previously mentioned address.

In particular, the Customer has the right to:

• withdraw consent at any moment. The Customer can withdraw previously expressed consent to the handling of their personal data.
• no consent to the handling of their data. The Customer can express their non-consenting to the handling of their data when it is on a legal basis different to that of the consent. Further details on the right to non-consenting are provided in the section below.
• access their data. The Customer has the right to obtain information about their data handled by the Company, about specific aspects of this handling and to receive a copy of the data in question.
• check and request any corrections. The Customer can check the accuracy of their data and request any update or correction.
• ottenere la limitazione del trattamento. Quando ricorrono determinate condizioni, il Cliente può richiedere la limitazione del trattamento dei propri Dati. In tal caso il Titolare non tratterà i Dati per alcun altro scopo se non la loro conservazione.
• obtain restrictions on the handling of data. Under certain conditions, the Customer can request restrictions on the handling of their data. In such a case, the Company will not use the data for any reason other than that of retention.
• obtain the deletion or removal of their personal data. Under certain conditions, the Customer can request that the Company deletes their data.
  receive their data or have them transferred to another Company. The Customer has the right to receive their data in a structured format, in a commonly used form, legible on an automated device, where technically possible, to obtain the transfer to another company without obstruction. This arrangement is applicable when the data is handled by automatic tools and its handling is based on the consent of the Customer, on a contract that the Customer is a party to or on related contractual measures.
• make a complaint. The Customer can make a complaint to the regulatory authority on the protection of personal data and take legal action.

Right to object

When personal data is used in the public interest, when requested of the Company by the authorities, or to pursue the legitimate interests of the Company, the Customer has the right to object to the use of their personal data based on reasons related to their specific situation.

The Customer can object to their data being used for the purpose of direct marketing without providing any reason. To find out whether the Company uses data for the purposes of direct marketing, the users can refer to the related sections of this document.

How customers can exercise their rights

Customers can exercise their rights by sending the Company a request using the contact information in this document. There are no costs related to such requests. The Company will deal with them as quickly as possible, within a month at the latest.