1. DATA CONTROLLER
Pursuant to articles 4 and 24 of the EU Regulations 2016/679, the Data Controller is Karman S.r.l., with registered office in Via Grandi 10, 61034 Fossombrone (PU) Italy, VAT No. 02175640412, Phone: + 39 0721 715042, Fax: + 39 0721 716640, e-mail address firstname.lastname@example.org, in the person of the legal pro tempore representative.
2. PURPOSE AND LEGAL BASIS FOR THE PROCESSING
The personal data provided will be processed in accordance with the conditions of lawfulness established by art. 6 of EU Regulations 2016/679, for the purpose of filling out a request for information form, the legal basis of the processing is legitimate interest (art. 6 paragraph 1 letter f); for the registration to the newsletter the legal basis of the processing is explicit consent (art. 6 paragraph 1 letter a).
3. PERIOD OF DATA STORAGE
The data collected will be processed by manual, IT or telematic means, in compliance with the purposes for which they were collected and in a suitable manner to ensure security and confidentiality. Personal data will be stored for the time necessary to carry out the specific purposes mentioned above, also taking into account compliance with the time limits required by law for the purposes of legal protection of the interests of the User and the Data Controller. Therefore, in compliance with the provisions of art. 5 paragraph 1 letter e) of EU Regulations 2016/679, the storage of personal data provided depends on the purpose of the processing: for contact requests data the storage time is maximum 6 months.
4. DATA RECIPIENTS OR CATEGORIES OF RECIPIENTS
The personal data provided will be communicated to the recipients, which will process the data in their capacity as Data Protection Officers (art. 28 of EU Regulations and/or as natural persons acting under the authority of the Data Controller and the Data Protection Officer (art. 29 of EU Regulations 2016/679), for the purposes listed in the previous point 2. Specifically, the data will be communicated to:
– parties that provide services for the management of the IT system and telecommunication networks, including e-mail and the website;
– freelancers, firms or companies as part of support and consultancy relationships;
– competent authorities for the fulfillment of legal obligations and/or provisions of public agencies.
The parties belonging to the aforementioned categories act as Data Protection Officers, or operate in total autonomy as separate Data Controllers.
5. DATA TRANSFER TO A THIRD COUNTRY
The Data Controller will not transfer your personal data to a third country or international organization.
6. NATURE OF THE PROVISION AND REFUSAL
Except as specified for browsing data, the user is free to provide their personal data. The provision of data is optional or necessary depending on the specific purpose for which the data are processed. Failure to provide the data marked with the symbol * will result in the impossibility of obtaining what was requested or using the services of the Data Controller.
7. RIGHTS OF THE INTERESTED PARTIES
You may exercise your rights as specified in Articles 15, 16, 17, 18, 19, 20, 21, 22 of EU Regulations 2016/679 by contacting the Data Controller at email@example.com. You are entitled, at any time, to ask the Data Controller for access to your personal data, for their rectification, cancellation and limitation. In addition, you are entitled to oppose, at any time, the processing of your data (including automated processing, e.g. profiling), as well as the portability of your data. Without prejudice to any other administrative or jurisdictional appeal, if you believe that the processing of the data concerning you, violates the provisions of EU Regulations 2016/679, pursuant to Art. 15 letter f) of the above mentioned EU Regulations 2016/679, you are entitled to lodge a complaint with the Data Protection Authority for the protection of your personal data and, with reference to Article 6, paragraph 1, letter a) and Article 9, paragraph 2, letter a), you are entitled to revoke your consent at any time. In the event of a request for data portability, the Data Controller will provide you with your personal data in a structured format, commonly used and readable by an automatic device, without prejudice to paragraphs 3 and 4 of Article 20 of EU Regulations 2016/679.