ART – 13 and 14
Pursuant to Regulation (EU) 2016/679 called “General Data Protection Regulation” (GDPR), we inform users that the personal data entered on the site is processed in the manner and for the purposes described below.
In compliance with the provisions of the new Regulation on the protection of personal data, the following information is provided:
Pursuant to articles 13 and 14 of the European Regulation 2016/679, we inform you that Inprinting Srl, Tax Code and VAT no. 07550840727, is the Data Controller (hereinafter the “Controller”) and that its registered office is in Via A. Salvucci 6 – 6/A – 6/B, 70056 Molfetta (BA) Italy.
The Data Processor is Inprinting Srl. It is possible to contact the company at the email address email@example.com. According to the law mentioned above, the processing will be based on principles of correctness, lawfulness and transparency, so to ensure the protection of your privacy and rights.
Object of the Processing
Personal data are processed in the context of the normal activity carried out by the Company and for the following purposes:
b1) purposes strictly connected and instrumental to the management of relationships with customers;
b2) purposes related to the obligations established by laws, regulations and community legislation, as well as by provisions issued by authorities appointed by the law and by supervisory and control bodies.
The data being processed is the same as those reported in the deed or in any other agreement with our Company.
In particular, data suitable for detecting racial and ethnic origin, religious, philosophical or other beliefs, political opinions, membership of parties, trade unions, associations or organisations of a religious, philosophical, political or trade union nature, as well as personal data suitable for detecting the state of health and sexual life, can be processed only with the written consent of the Data Subject (person concerned) and with the prior authorisation of the Data Protection Authority.
Purpose of the Processing
Personal data is processed for purposes connected or instrumental to the activity of Inprinting Srl, such as the storage in its databases.
- Without the express consent of the Data Subject for:
the receipt of a message sent via the “Contact Us” form. When filling in the form, personal information (such as name, surname, telephone number and email address) is requested. Such information will be subsequently used to identify the user in order to send a reply.
‘Processing of personal data pursuant to the law’ means any operation or set of operations, carried out with or without the aid of electronic or automated means, concerning the collection, recording, organisation, storage, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and distribution of data. The company ensures that data processing will be carried out through the use of suitable procedures that avoid the risk of loss, unauthorised access, illicit use and dissemination, in compliance with the limits and conditions set by Regulation (EU) 2016/679.
Access to Data
The subjects who may become aware of the user’s personal data given their role as processors or persons in charge of the processing (based on Article 13, Paragraph 1 of the GDPR) are:
- The Data Controller
- The staff of the Data Controller, for the fulfilment of the user requests (response to a request for information or contact).
Personal data will not be disclosed to third parties.
Communication of Data
The data may be disclosed to supervisory bodies, judicial authorities and other third parties to whom communication is mandatory by law, including in the context of prevention/repression of any illegal activity connected to accessing the site and/or sending a request.
The management and storage of personal data will be carried out on servers located in Italy owned by the Data Controller and/or by third-party companies appointed as System Administrators and/or Data Processors.
The data will not be transferred outside the European Union.
Data Retention Period
The personal data of website users who send a request for information through the contact form will be stored only for the time necessary to complete the request.
If the Data Subject withdraws the consent to the specific processing, the data will be deleted or made anonymous within 72 hours from receiving the withdrawal notice.
Pursuant to Art. 13, paragraph 2, letter (f) of the Regulation, we inform you that all data collected will not be subject to any automated decision-making process, including profiling.
Rights of the Data Subject
Users can always exercise their rights specified in articles 13 (Paragraph 2), 15, 17, 18, 19 and 21 of the GDPR, summarised here in the following points:
- The Data Subject has the right to obtain confirmation of the existence of data concerning him/her, even if not yet communicated, and to have them communicated in an intelligible form;
- The Data Subject has the right to ask the Data Controller for access to personal data and the integration, correction and cancellation of the same. Moreover, the Data Subject has the right to ask for the limitation of the processing concerning him/her or to oppose the personal data processing, in addition to the right to data portability;
- The Data Subject has the right to file a complaint with the Italian Data Protection Authority, following the procedures and indications published on the official website of the Authority (www.garanteprivacy.it);
The exercise of these rights is not subject to any formal restrictions and is free.
Upon receipt of this communication, the consent to the processing of personal data referred to in the points above will be deemed to have been granted.
How to Exercise Your Rights
Users can exercise their rights at any time by sending an email to: firstname.lastname@example.org