According to the art. 13 of Regulation (EU) 2016/679 (also known as GDPR) on the protection of personal data and in relation to your personal data, we inform you that their processing will be based on the principles of correctness, lawfulness and transparency by the company Interdipros Srl. protection of your privacy and protection of your rights. In relation to this we inform you of the following:
a) Identity and contact details of the Data owner
The Data owner is Interdipros Srl, with registered office at Via dei Lavoratori 5 - 20843 Verano Brianza MB . Your contact details are: e-mail address firstname.lastname@example.org, or the telephone number (+39) 0362 805517.
b) Type and method of data pickup
By browsing the website www.interdi.it, and in particular in the reserved personal area, the following types of personal data concerning you can be collected:
- Contact details - information about the name, phone / mobile number, email address;
- Other personal data - information that you provide us about your company or your business;
- Interests - information you provide about your interests, including the products you are interested in;
On the website may be present those particular plug-ins (c.d. social buttons) that depict the social network icons - for example Linkedin - and allow users who are consulting the www.interdi.it site to interact directly with social platforms. The social buttons on the site refer to the account of the owner on the social networks depicted and, as a rule, this transfer of information does not require the user to log in or be registered on the social network.
Interdipros Srl has no knowledge or influence on the way in which social networks treat the information you disclose and whether this information is shared with third parties. Interdipros Srl recommends to carefully read the respective information on data protection.
c) Purpose and legal of the processing
The process to which your personal data will be submitted, collected at the time of registration or when making online purchases on the website www.interdi.it, will be made for the following purposes:
operational management for the registration and compilation of data collection forms in order to view the documents relating to the products purchased, request information, make reports and contact the Data Owner - (Legal basis of processing: Contract execution);
sending, exclusively to the e-mail address you provided during the purchase of a product or service on the website www.interdi.it, of promotional messages on goods or services similar to those you purchased, provided you do not allow to processing in the manner indicated below, in accordance with the provisions of Recital 47 of Regulation (EU) 2016/679 and of art. 130, paragraph 4, of Legislative Decree 196/2003 (so-called soft spamming) and subsequent amendments and additions - (Legal basis of processing: Legitimate interest);
- sending - via e-mail, postal service, social network, sms, app, and in any case through the expressly indicated means of communication - of newsletters, offers, promotions, discounts, concessions, commercial or promotional information, free products, invitations to events or events, reporting of special initiatives regarding products bearing the Owners' Trademarks and / or third parties, however, in line with your preferences - (Legal basis of processing: Consent of the interested party);
- surveys to measure the level of satisfaction of the service provided (so-called customer satisfaction) in order to define the framework of the improvement or corrective actions to be implemented - (Legal basis of processing: Consent Consent of the interested party);
- fulfill a legal obligation, regulations or provisions of the judicial authority, as well as to defend a right in court in accordance with the legally binding requests and / or to defend a right in court - (Legal basis of processing: Consent: Legal obligations);
Where the legal basis is the execution of the contract or the legal obligation, the provision of data is mandatory to manage the contractual relationship; in default we could not give you course. In the event that your consent to processing is necessary, failure to provide the same does not have any consequences on contractual relationships.
d) Legal basis of the treatment is legitimate interest
The legal basis for the processing of personal data relating to each of the purposes indicated above, is specified alongside each of them.
When consent is indicated as the legal basis for the processing, it is understood that the data will be processed by the Data Controller for these purposes only upon collection of your consent.
Legitimate interests relate to the fact that the interested party has already expressed an interest in the product sector in question, purchasing certain products or services, and the Data Controller has a specific and justified interest in continuing to send him communications in relation to services or goods similar to those purchased, as well as the owner's interest in letting the user navigate.
e) Recipients or categories of recipients of personal data
We limit access to your personal data only to those who need to use them for relevant purposes; in particular the data relating to the processing in question and for the purposes mentioned above, may be communicated or disclosed:
to those who need it within the organization of the Data Controller due to their duties or hierarchical position. These subjects are the persons authorized to the treatment under the direct authority of the Owner, whose number will be contained to the maximum, which, in relation to their job, will have access only to the data pertinent to this task and will be suitably instructed in order to avoid losses, destruction, unauthorized access or unauthorized processing of the data;
to those subjects to whom the provisions of the law give access rights, or to whom the transfer of data is necessary for the fulfillment of the duties provided for by laws or regulation;
to third parties to whom the Data Owner may certain activities and which provide instrumental services related to the treatments and purposes described above, such as for example Companies providing commercial information, Mail delivery companies, Call Centers. These third parties carry out processing on behalf of the Data Controller and are authorized to process them as Data Processors in accordance with the provisions of Article 28 of Regulation (EU) 2016/679.
f) Period of conservation
We store your personal data only for the time necessary to achieve the purposes for which they were collected or for any other legitimate related purpose. Therefore, if the personal data are processed for two different purposes, we will keep such data until the purpose for the longer term has ceased, but we will no longer treat personal data for that purpose whose retention period has ceased. Your personal data that are no longer necessary, or for which there is no longer a legal prerequisite for its storage, is irreversibly anonymized (and in this way can be stored even for a period exceeding the purpose for which they were acquired) or destroyed safely.
Here below are the storage times in relation to the different purposes listed above:
Operational management and purposes: strictly connected to this for access to the website: the data processed for this purpose may be kept for the duration of the contract and in any case not later than 10 years.
Fulfill any contractual obligation: may be kept for the entire duration of the contract and in any case not later than 10 years, in order to verify any pending claims including the accounting documents
Marketing purposes, including profiled: personal data processed for marketing purposes may be stored for 24 months from the date we obtained your last consent for this purpose (with the exception of opposition to receive further communications); for the purpose of marketing, they will instead be kept for 12 months
Purpose of customer satisfaction surveys: : the data processed for this purpose may be kept for 24 months from the date on which we obtained your last consent for this purpose (with the exception of opposition to receive further communications).
In the event of disputes: in the event that it is defending us or acting or even making claims against you or third parties, we may keep the personal data that we consider to be reasonably necessary to process for these purposes, for as long as this claim can be prosecuted.
g) Your claim
The GDPR recognizes the following claims in relation to your personal data that you can exercise within the limits and in compliance with the provisions of the legislation:
Right of access to your personal data (art. 15);
Right of rectification (Article 16);
Right to cancel data (art. 17 - "right to be forgotten") for which there is no longer any legal condition for processing;
Right to limitation of treatment (art. 18) within the limits set by the law protecting personal data;
Right to data portability (art. 20);
Opposition right (art. 21) where required by applicable law;
Right to object to a decision based solely on automated processing (Article 22);
Right to revocation the consent granted at any time, without prejudice to the lawfulness of the processing based on the consent given before the revocation; . 22);
These rights are fulfilled with some exceptions aimed to safe the public interest (for example the prevention or identification of crimes) and our interests. In the event that you exercise any of the aforementioned rights, it will be our responsibility to verify that you are entitled to exercise it and we will reply, as a rule, within a month.
For any complaints or reports on how we process your data, we will do our best to respond to your concerns. However, if you wish, you can forward complaints or reports to the Data Protection Authority, using the relevant contact details: Guarantor for the protection of personal data - Piazza di Monte Citorio n. 121 - 00186 ROME - Fax: (+39) 06.69677.3785 - Telephone: (+39) 06.696771 - e-mail: email@example.com - Certified mail: firstname.lastname@example.org - website: www.garanteprivacy .it