Information about the new personal data policy
According to Regulation (EU) 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation) Etruria srl, as Data Controller, is obliged to provide information on the processing of personal data and on your rights.
1. Source of personal data
Personal data are normally provided by the Customer during the performance and management of the contract to allow the supply of services by Etruria srl.
2. Purposese
The data will be processed for institutional purposes, connected or instrumental to the activity of Etruria srl and in particular:
a) for purposes strictly connected to the management of the contractual relationship of the interested party and to the pursuit of the legitimate interest of the Data Controller in carrying out his economic activity (contractual purposes);
b) for the fulfillment of the obligations established by laws or by regulations to which the Data Controller is subject (Article 6 letter c) of the GDPR) (legal obligations);
c) to communicate and / or send, even with automated methods, advertising material, information and commercial information through telephone channels, SMS, e-mail, fax, whose legal basis resides in the explicit consent of the interested party (Article 6 letter a) of the GDPR) (direct marketing purposes);
d) to obtain absolutely anonymous statistics on the site’s consultation through Google Analytics. Browsing data is also collected through the use of cookies, the legal basis of which lies in the explicit consent of the interested party (Article 6 letter a) of the GDPR) (profiling purposes).
3. Data communication
It is explicitly excluded the transfer of personal data held by Etruria srl to third parties with the exception of the transfer of this information if required by law or in cases where such third parties use the above information on request and for exclusive use by Etruria srl.
4. Consent to the use of personal data
The consent to the processing of data for the purposes written in the previous letter 2.a) and 2.b) is not necessary in accordance with art. 6 o of the GDPR. The consent to the processing of data for the purposes written in lett. 2.c), 2.d) is optional and any refusal will prevent Etruria srl from sending commercial communications and profiling activity.
5. Data management
The data will be managed using paper or electronic methods directly by Etruria srl. The data may be processed and organized in databases, processed for the time strictly necessary for the provision of the services covered by the Contract.
6. Conservation time
The conservation time of personal data for contractual purposes coincides with the duration of the contractual relationship, while the conservation time related to the fulfillment of legal obligations is indicated by law. In relation to the purposes of direct marketing and profiling, the conservation time of the data has a duration of 10 years and, in any case, the interested party has the right to cancel the consent at any time without compromising the legalness of the data use based on the consent given before the cancellation. To make the cancellation explicit the interested party must send the request to the e-mail address of Etruria s.r.l (info@etruriamare.com)
7. Controller and Processor of the data
Controller is Etruria srl with registered office in via Camozzi 77, 24121 Bergamo. For any comunication about personal data protection the following e- mail is available: info@etruriamare.com Processor of the data is Etruria s.r.l
8. Rights of the customer
At any time the Customer can exercise his rights towards the Data Controller, in accordance with art. 15 of the GDPR. In particular, each customer has the right to access to his personal data, to correct or cancel data or to limit the processing of his data or to oppose to their processing, in addition to the right to data portability. The Customer has also the right to file a complaint to the Authority for the Protection of Personal Data.
