INFORMATIVA SUL TRATTAMENTO E SULLA PROTEZIONE DEI DATI PERSONALI (ART. 13 GDPR)
James Rivière provides information on how he processes and protects personal data he may acquire from and process through the website.
Art. 1. Data Controller: collects data and decides processing purposes/ methods
SOLIS S.R.L.
Address: Via Monte di Pietà n. 1/A, 20121 MILANO
VAT number and Tax Identification number: 08396360151
Telephone: 02 72023808
Email: info@riviere.it
Certified email: info@pec.solissrl.it
Art. 2. Purposes and legal basis for processing: why data are processed and what justifies processing
Data are processed for the following purposes.
Purpose a) – Online contacts
- adempiere agli obblighi precontrattuali (rispondere alle richieste inviate tramite il modulo contatti del sito internet nella sezione “contatti”);
Legal basis: execution of the contract
Refusal to provide compulsory data (indicated with a *) prevents the controller from responding to requests.
Purpose b) – Anonymous statistics
- vengono raccolti dati anonimi sul corretto funzionamento del sito internet e sulle pagine visitate dagli utenti. I dati sono tratti in modo aggregato, non risaliamo al singolo utente che effettua la navigazione.
Legal basis: controller’s legitimate interest.
Art. 3. Processed data and processing methods
The following data are processed in order to fulfil the purposes of Art. 2:
Purpose a) – Online contacts
- Dati obbligatori: nome, cognome, indirizzo e-mail, interesse, messaggio
- Dati facoltativi: numero di telefono
Purpose b) – Statistics
- Sono raccolti dati statistici anonimi sulle pagine visitate del sito internet. Non rileviamo l’indirizzo IP dell’utente, pertanto non siamo in grado di sapere quali pagine stai visitando.
All disclosed data are processed within the limits strictly necessary for the achievement of purposes set forth in Art. 2 here above, in hard copy or by computerised means.
Art. 4. Data conservation
Data are processed and stored at the Data Controller’s office and in company devices (e.g. computer, server, smartphone, etc.).
Data processing (hard copy or digital) is executed with appropriate measures for ensuring the security and confidentiality of personal data and specifically in compliance with adequate security measures and in accordance with the principles of propriety, necessity and proportionality.
Some of the software used by the Data Controller is managed by cloud systems (e.g. email inboxes and management software). Providers have been selected to ensure the safeguarding and confidentiality of data.
Some data may also be present in backup systems. If this is the case, removal will not be possible. As of now we guarantee that in the event of a total system reboot, such data will be anonymised once more/ deleted.
Collected and processed data are stored for the following periods:
Purpose a): 5 years from contract request.
Purpose b): 14 months
Art. 5. Communication and transmission of data
In the execution of normal contractual duties, employees and/or non-employed professionals working for the Data Controller have access to data in their capacity as authorised processing persons.
Art. 6. Data transmission beyond the EU
SOLIS S.R.L. does not directly transfer data outside the European Union. However, website analytics data may pass through servers located around the world.
Statistics
Anonymous statistical data is stored on the servers of the provider (Google), located outside the European Union.
Art. 7. Rights of the data subject
Art. 7 no. 3 The data subject has the right to withdraw their consent at any time; Art. 15 Right of access, including the right to obtain information about the applicable personal data retention period, the origin of the data collected, and the purposes and methods of processing. The right to lodge a complaint at any time with the competent supervisory authority (Italian Data Protection Authority – Garante per la Protezione dei Dati Personali). Art. 16 The data subject has the right to obtain the updating, rectification and completion of their personal data. Art. 17 Right to cancellation /the right to be forgotten (when provided for); Art. 18 Right to the limitation of processing (when provided for); Art. 20 Right to data portability (when enabled by current technology); Art. 21 Right to object to processing; Art. 22 Right to not be subjected to a decision solely based on automated processing, including profiling
Art. 19 requires the Data Controller to notify of rectification, erasure and/or limitation of processing requested by data subjects.
Art. 8. Requests from data subjects: how rights can be exercised
Le istanze relative all’esercizio dei diritti di cui al precedente Art. 7 potranno essere presentate dagli interessati al Titolare del trattamento tramite lettera raccomandata o e-mail agli indirizzi riportati al precedente Art. 1.
In tutti i casi gli interessati dovranno allegare alla richiesta un proprio documento d’identità in corso di validità.
Art. 9. Aggiornamenti a questa informativa
La presente Informativa può essere soggetta a modifiche ed integrazioni, anche quale conseguenza di eventuali modifiche e/o integrazioni normative. Le eventuali modifiche saranno comunicate agli interessati.
Si ricorda che l’interessato potrà ottenere il testo dell’informativa costantemente aggiornata inviando una richiesta a:
info@riviere.it