Object: Notice concerning the processing of the personal data pursuant to section 13 of the Personal Data Protection Code (Legislative Decree no. 196/2003 hereinafter the “Code”) and section 13 of EU Regulation (GDPR 679/2016 hereinafter the “Regulation”) and subsequent national adaptation provisions.
NOVA S.r.l., with registered offices at Palata Pepoli – Crevalcore (BO), Via G. Galilei, n. 116/c, Taxpayers and VAT number 01527961203, phone number: 051.985330 , dedicated email address: firstname.lastname@example.org, hereby informs you to be the Data Controller of the data defined as personal by the Code and the Regulation, which are possessed by the company in order to establish and execute existing or future contractual relationships with You or Your organization.
In full compliance with the principles of correctness, lawfulness and transparency NOVA S.r.l. provides the following information.
- Types of data processed
NOVA S.r.l., processes Your personal identification data (including but not limited to name, surname, business name, address, telephone number, email address, bank details).
NOVA S.r.l. is neither in the possession of any of Your sensitive data (or pertaining to specific categories of data pursuant to section 9 of the Regulation) nor of any biometric, genetic or judiciary data.
Data will be processed in compliance with the principles of limitation of purposes, data minimization, accuracy, limitation of retention, pertinence, non-redundancy and protection of confidentiality.
- Purposes of processing and legal ground
Your data will be processed:
- with respect to the pre-contractual and contractual needs and the related fulfilment of legal, fiscal and accounting obligations;
- to enable an effective management of the service, financial and commercial relationships or for administrative needs related to orders, deliveries, shipments, arrivals and invoices;
- to allow the subscription to further specific services such as receiving newsletter and/or sending commercial and advertising communications.
The provision of data for the purposes above indicated under points 1 and 2 is necessary to establish and execute the contractual relationship; it is therefore mandatory and the failure to provide the relevant consent to the processing shall cause the impossibility to render the services requested relating to the purchase of goods and services.
NOVA S.r.l. will send newsletters and commercial communications to the addresses you provided us with, exclusively in the case you have expressed your consent. In any case you may refuse at any time to receive information by NOVA S.r.l. Each commercial communication provided by NOVA S.r.l. will include information and instruments necessary for the refusal.
Your data are not subject to automated processing.
- Methods of processing
The processing of personal data is effected by means of the operations indicated under section 4 of the Code and section 4 no. 2) of the Regulation and precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, limitation, communication, cancellation and destruction of data.
Data are subject to electronic, papery and mixed processing.
- Period of retention
The Data Controller will process data for the term necessary to execute the contractual relationship and subsequently to fulfil the obligations provided for by the law or for administrative and accounting purposes. Successively, the data will be processed, for storage purposes only, for a period of 10 years starting from the termination, to any cause due, of the relationship.
The Data Controller will process data collected for the purposes under no. 3 of point 2 above (to allow subscription to further specific services such as receiving newsletter and commercial communication containing promotional offers) for 8 years from the collection, without prejudice for the right of the User to modify and/or revoke the consent at any time.
- Obligation to provide the data
The provision of data is mandatory for pursuing the purposes indicated under point 2 no. 1 and 2: Your failure to provide the data shall cause the impossibility to establish or continue any pre-contractual or contractual relationship.
The provision of data for pursuing the purposes of commercial communications and receipt of newsletter is instead completely optional. You may at any time modify your commercial consent even subsequently to the establishment of the contractual relationship.
- Withdrawal of consent to process personal data.
The personal data processed by the Data Controller are necessary for pursuing the purposes indicated under point 2. When the processing is based upon consent, You have the right to withdraw the consent at any time without prejudice to the lawfulness of the processing based on the given consent.. You may at any time as well modify the consent rendered for the receipt of commercial communications and newsletters according to what provided for under point 11 below.
Your data may be made available for the purposes indicated under point 2 to the following categories of recipients:
- employees and collaborators of NOVA S.r.l., in their capacity as persons in charge of the processing appointed by the Data Controller;
- third parties (including but not limited to banks, consulting firm, advisors, insurance companies for the provision of insurance services, companies providing IT and software and websites management, companies dealing with the processing the accounting and drawing up financial statements, companies dealing with the sending of newsletter and/or commercial communications) carrying out outsourcing activities on behalf of the Data Controller, in their capacity as external data supervisors.
Moreover Your data may be communicated to:
- Supervisory bodies (such as IVASS),
- Judicial authorities;
- Public authorities;
- Any third party to whom the communication is mandatory by law for pursuing the purposes indicated under point 2. Such third parties will process the data in their capacity as independent data controllers.
Your data will not be disseminated.
- Data transfer
Your personal data are stored at the company’s premises in Palata Pepoli- Crevalcore (BO – Italy), Via G. Galilei n. 116/c and therefore within the European Union.
- Exercise of rights by the interested party
At any time the interested party may exercise its rights towards the Data Controllers. Pursuant to section 7 of the Legislative Decree no. 196/2003 and sections 15 et seg of the EU Regulation no. 2016/679 the interested party may: a) obtain confirmation of whether or not any of its personal data, even if not yet registered, exist and their communication in an intelligible manner; b) obtain directions on the origin of the personal data, the purposes and modes of the processing, the logic applied in case of processing effected through electronic instruments, the identification details of the data controller, the data supervisors, the third parties or the categories of third parties whom the personal data may be communicated to in their capacity of persons in charge of the processing; c) obtain update, correction, or, when it has an interest, integration of data; d) obtain data cancellation in the cases set forth under section 17 of the EU Regulation 2016/679 or data transformation on an anonymous basis or blocking of the data processed unlawfully, including those whose retention is unnecessary in relation to the purposes for which the data were collected or successively processed; e) obtain limitation to processing in the cases set forth under section 18 of the EU Regulation no. 2016/679; f) receive its personal data in a structured format, in common use and readable by automatic device and the right to transfer them to another Data Controller; g) object, wholly or partially for reasons related to its specific situation, to the processing of its personal data, even if relevant to the collection’s purpose; h) object to the processing of its personal data for purposes of direct marketing, sending advertising material, direct sale, market researches or commercial notices; i) submit a complaint to the Data Protection Authority.
The exercise of rights is not subject to any restriction on form and is free.
Section 7 of the Code and sections from 15 to 23 of the Regulation may be consulted at the following link: www.garanteprivacy.it
- Methods of exercising the rights
To exercise Your rights you may directly address to the Data Controller by sending:
- a registered letter with return receipt to NOVA S.r.l., at the following address: Palata Pepoli- Crevalcore (BO – Italy), Via G. Galilei n. 116/c;
- an email to the following address: email@example.com
- Modification of the commercial consent
To modify the commercial consent even subsequently to the execution of the contract you may use the same methods indicated under point 10 or click on the link Unsubscribe which you will find in the newsletter.