top of page

Customer information and consent

 

The individual company MORRIS DI CAZZANIGA MARIA based in Bulciago as the Data Controller of personal data pursuant to art. 4 of EU Regulation 2016/679 informs you, pursuant to art. 13 of the Regulation, which will process your personal data manually and / or with the support of computerized means for the purposes indicated below.

 

Purpose of the processing

The personal data you provide will be processed for purposes related to the execution of the contract, including any pre-contractual phase and, specifically, for the compilation of personal data lists, bookkeeping, invoicing, making communications both by means paper and computerized, fiscal obligations, organizational management of the requested services and stipulation of contracts, scheduling of appointments, order fulfillment, deliveries, bureaucratic obligations relating to the requested services.

Your data may be used for sending, on paper or by e-mail, commercial and/or promotional communications relating to products and services similar to those covered by the contractual relationship, unless you disagree.

Your data may be processed for internal statistical purposes.

Failure to provide personal data will make it impossible for us to enter into contracts and other related obligations, as well as to correctly manage mutual commercial relations.

 

Legal basis

Your personal data, on the basis of your express consent, will be processed for the execution of a contract concluded with you or for the execution of pre-contractual measures adopted at your request.

The sending of commercial and / or promotional communications relating to products and services similar to those covered by the contractual relationship takes place on the basis of your express consent.

 

Data recipients

Furthermore, your data may be disclosed to third parties, for technical and operational needs strictly related to the purposes set out above and in particular to the following categories of subjects:

  1. entities, professionals, companies or other structures entrusted by us with the processing related to the fulfillment of administrative, accounting and management  obligations related to the ordinary performance of our economic activity, also for credit recovery purposes;

  2. public authorities and administrations for purposes related to the fulfillment of legal obligations or to subjects entitled to access it by virtue of the provisions of law, regulations, community regulations;

  3. banks, financial institutions or other subjects to whom the transfer of the aforementioned data is necessary for the performance of our company in relation to the fulfillment, on our part, of the contractual obligations undertaken towards you.

  4. suppliers of installation, assistance and maintenance services for IT and telematic systems and systems and all services functionally connected and necessary for the fulfillment of the services covered by the Contract.

 

The list of data processors is available upon request.

 

Data retention times

Your personal data will be kept for the time strictly necessary to carry out the purposes described above and to fulfill the obligations established by law. However, a maximum data retention period is envisaged to the extent of 10 years from the establishment of the contractual relationship.

 

Data transfer

The Data Controller does not transfer personal data to third countries or to international organizations.

However, it reserves the right to use cloud services; in which case, the service providers will be selected from those who provide adequate guarantees, as required by art. 46 GDPR 2016/679.

 

Rights of the interested party

Pursuant to articles 13, paragraph 2, and from 15 to 21 of the Regulation, we inform you that with regard to the processing of your personal data, you can exercise the following rights:

 

a) Right to obtain access to personal data and the following information:

- confirmation that personal data is being processed or not;

- the purposes of the processing;

- the categories of personal data;

- the recipients or categories of recipients to whom the personal data have been or will be disclosed;

- if the data are not collected from the interested party, all available information on their origin;

- the existence of an automated decision-making process, including profiling;

- a copy of the personal data being processed.

 

b) Right of rectification and integration of personal data;

 

c) Right to erasure of data ("right to be forgotten") if one of the following reasons exists:

  1. personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;

  2. the interested party revokes the consent to the processing of data and there is no other legal basis for the processing;

  3. the interested party opposes the processing and there is no legitimate overriding reason to proceed with the processing;

  4. the personal data have been unlawfully processed;

  5. personal data must be deleted to fulfill a legal obligation under Union law or the law of the Member State to which the data controller is subject.

 

The data controller, if he has made personal data public and is obliged to delete them, must inform the other owners who process the personal data of the request to delete any link, copy or reproduction of his data.

 

d) Right to limitation of processing in the event that:

 

  1. the interested party disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;

  2. the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;

  3. although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;

  4. the interested party opposed the processing, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party

 

e) Right to lodge a complaint with the Guarantor for the protection of personal data, following the procedures and instructions published on the official website of the Authority www.garanteprivacy.it.

 

f) Right to data portability of the interested party or the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and possibly transmit them to another data controller, if the processing is based on consent or on a contract and is carried out by automated means. Where technically possible, the interested party has the right to obtain the direct transmission of data from one data controller to another.

 

g) Right to object at any time to the processing of personal data, including profiling, in particular in the event that:

 

  1. the processing takes place on the basis of the legitimate interest of the owner, after explaining the reasons for the opposition;

  2. personal data are processed for direct marketing purposes;

  3. the processing takes place for the sending of commercial communications and advertising or direct sales material, pursuant to art. 130 paragraph 4 of Legislative Decree 196/2003 and art. 9 of Legislative Decree 9.4.2003, n. 70, by sending an email to a specific address, expressly requesting the cancellation of their names from the advertising list;

 

h) Right not to be subjected to a decision based solely on automated processing, including profiling, except in cases where the decision: is necessary for the conclusion or execution of a contract between the data subject and a data controller, is authorized by the law of the Union or of the Member State to which the data controller is subject or is based on the explicit consent of the data subject.

Right to obtain human intervention in carrying out automated profiling activities and to contest the choices made by the Data Controller in carrying out automated profiling activities.

 

i) Right to withdraw consent at any time; the data, if not based on another legal basis (including, fulfillment of a legal obligation or execution of a contract) must be deleted by the owner.

 

The exercise of rights is not subject to any formal constraints and is free.

 

How to exercise rights

The interested party may at any time exercise their rights by sending:

- a registered letter with return receipt to MORRIS DI CAZZANIGA MARIA, 23892 Bulciago, Via XXV Aprile, n. 22;

- an e-mail to the address disegni@ditexdisegni.it

 

Holder of the treatment

The Data Controller is MORRIS DI CAZZANIGA MARIA.

Contact details: +39 3284213842 or by e-mail disegni@ditexdisegni.it

 

Responsible for data processing

The person in charge of data processing is Ms CAZZANIGA MARIA.

Contact details: +39 3284213842 or by e-mail disegni@ditexdisegni.it

 

_________________________

¹ By processing of personal data we mean any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as the collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, restriction, deletion or destruction

bottom of page