INFORMATION ON THE PROCESSING OF PERSONAL DATA
Pursuant to art. 13 Regulation (EU) 2016/679 regarding the processing of personal data (GDPR)
In compliance with the Regulation concerning the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data (EU Regulation of the European Parliament and of the Council of 27 April 2016, n. 2016/679/EU – hereinafter GDPR ), management methods of the www.ricarica.biz site are described below with reference to the processing of personal data of users who consult it.
DATA CONTROLLER
RICARICA SRL – Piazza Cavour, 7, 20121 Milan – VAT number 10360790967
e-mail ricarica@ferasrl.it – Tel. + 39 02 37 069 908
TYPE OF DATA PROCESSED, PURPOSE AND LEGAL BASIS
Data processed by the owner is:
- Navigation data: computer systems and software used to operate this website acquire, during their normal operation, some personal data whose transmission is implicit in the use of Internet browsing protocols. This information is not collected to be associated with identified interested parties, but by their nature could allow users to be identified, through processing or association with data held by third parties (IP addresses or domain names of the computers used by users browsing the site, or other parameters relating to the users’ operating system or IT environment). This anonymous data is used for the sole purpose of checking the correct functioning of the site and optimizing its functionality;
The legal basis that legitimizes processing is the legitimate interest of the owner in safeguarding the security of the site so that it is not used to commit crime or fraud.
- Data provided voluntarily by the user,via requests for information or contact requests by the same, via the e-mail address: ricarica@ferasrl.it. The type of data collected are Name and Surname, e-mail address and text of the message sent by the interested party. The owner informs that, should he receive data of a particular nature, he will proceed with immediate cancellation and with secure methods that do not allow the recovery of such data.
- This data is used in order to respond to requests from the interested party.
- The legal basis that legitimizes the processing is the execution of pre-contractual measures at the request of the interested party.
PROCESSING METHODS
Treatment will be carried out with the aid of electronic tools through operations carried out by collaborators and authorized subjects of the owner. Pursuant to art. 32 of the GDPR, the owner implements technical and organizational measures adequate to guarantee a level of security appropriate to the risk.
DATA RETENTION PERIOD
Data will be kept for the time strictly necessary to achieve the purpose for which they were collected and specifically:
- navigation data is kept for a maximum of 6 months from collection;
- data provided by the user to request information are kept for the time necessary to give feedback to the user and for a subsequent period of 12 months to manage any subsequent requests from the interested party.
DATA RECIPIENTS
Personal data will be communicated to collaborators of the owner, authorized to process them as part of their duties. The data will be accessed by third parties who support the owner in the management of the information system and in technical assistance activities. Furthermore, they may be communicated to Authorities upon request in the cases provided for by Law. Data is not disclosed in any way.
DATA TRANSFER
The Data Controller does not communicate personal data to third countries or to international organizations.
RIGHTS OF THE INTERESTED PARTY AND METHODS FOR EXERCISING THE RIGHTS
As an interested party and in relation to the treatment described in this Information, the interested party may exercise the following rights by sending a formal request to the email address privacy@ferasrl.it:
- Right of access, i.e. the right to obtain confirmation as to whether or not personal data concerning him is being processed and, if so, obtain access to such personal data, including a copy of the same;
- Right to rectification, i.e. the right to obtain, without unjustified delay, the rectification of inaccurate personal data concerning him and/or the integration of incomplete personal data;
- Right to cancellation (right to be forgotten) i.e. the right to obtain, without unjustified delay, the cancellation of personal data concerning him, if one of the following reasons exists: the personal data are no longer necessary with respect to the purposes for which they were been collected or otherwise processed; the interested party opposes the processing and there is no overriding legitimate reason to proceed with the processing; the personal data have been processed unlawfully; personal data must be cancelled to fulfil a legal obligation established by the law of the Union or of the Member State to which the Data Controller is subject;
- Right to limitation of treatment or right to obtain limitation of treatment, when: the interested party disputes the accuracy of personal data, for the period necessary for the Data Controller to verify the accuracy of such data; the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited; personal data are necessary for the interested party to ascertain, exercise or defend a right in court; the interested party has opposed the processing pursuant to art. 21 GDPR, in the waiting period of the verification regarding the possible prevalence of legitimate reasons of the Data Controller with respect to those of the interested party;
- Right to data portability, i.e. the right to receive, in a structured format, in common use and readable by an automatic device, the personal data concerning you and the right to transmit them to another Data Controller without impediments, if the treatment is based on consent and is carried out by automated means. Furthermore, the right to obtain that your personal data be transmitted directly to another Data Controller if this is technically feasible;
- Right to object, i.e. the right to object, at any time, to the processing of personal data;
- Right to complain, i.e. the right to lodge a complaint with the Guarantor Authority for the protection of personal data, following the procedures and indications published on the official website of the Authority www.garanteprivacy.it.
