Information sheet pursuant to Art. 13 Reg. (EU) 2016/679 – GDPR –
Information on the processing of personal data obtained from the interested party
Magir S.r.l., Via Aurelio Saffi, n. 132, 21100 – Varese, Phone number +39 0332 226027, email email@example.com, duly represented by Mr. Fernando Rossi, in her capacity as Legal Representative.
Purpose of the processing
Legal Basis of the processing
Data retention period
|Browsing on this website||Legitimate Interest| Rights of the interested party
Activity which are necessary for the functioning of the website and for providing the platform with the browsing services
|Until the end of the browsing session|
|Contact request or information request||Legitimate interest|
Interested party’s request
|E-Commerce and related administrative-accounting activities||Contract
Art. 6 letter b) GDPR: the processing of personal data is necessary for the execution of the contract to which the interested party is a party (E-Commerce)
|10 years or different legal term set forth under article 2220 of the Italian Civile Code|
Direct marketing through newsletters for promoting products or services of the owner similar to those already purchased by a (soft spam)
Legitimate interest of the owner to carry out marketing activities to its customers | art. 130 c4 TU Privacy
|Until opt-out |
request of the interested party
|Transfer of data to third-party marketing||consent||Until opt-out|
|Profiling the user with reference to preferences, personal interests, buying habits, geographical location etc. in order to send commercial proposals of interest to the user||consent||
(or until the user opposition if previous)
PERSONAL DATA TRANSFER
With the exception of the browsing data (which are necessary for the browsing of the website) and for the data related to purpose C) (which are necessary for the execution of the E-Commerce contract between the parties and the related administrative-accounting activities), the users are free to decide whether to provide their personal data. Any failure to provide the data identified by the symbol * or the wording “required” shall entail the impossibility to obtain satisfaction of the users’s requests and enjoy the services offered on the website of the Data Controller.
RECIPIENTS OF THE DATA
In order to fulfil the obligations of the contracts and its related purposes, your personal data will be processed by the following entities/persons which are contractually bound to Magir S.r.l.:
- parties that provide services for managing the informatic system used by Magir S.r.l. and the telecommunication networks;
- companies, offices or independent contractors which/who provide Magir S.r.l. with assistance and consulting services;
- operators who are in charge for managing the platform on which the services will be provided (for example, website hosting);
- the relevant authorities for compliance with legislative requirements and/or directives issued by public bodies, upon request.
Parties belonging to the abovementioned categories cover the function of Data Processor or operate independently as Data Controllers. The list of Data Processors is constantly updated and available at the offices of Magir S.r.l., or by writing to firstname.lastname@example.org.
TRANSFER OF DATA TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANIZATION
The Personal Data provided will not be transferred to countries outside the European Union.
RIGHTS OF THE INTERESTED PARTY – COMPLAINT BEFORE THE DATA PROTECTION AUTHORITY
You shall be able to exercise your rights under articles 15, 16, 17, 18, 19, 20, 21 and 22 of EU Regulation 2016/679 by sending an email to the Data Controller at the following address: email@example.com or by calling the following phone number: +39 0332 226027. You shall have the right to obtain, at any moment, from the Data Controller, access to your personal data and their rectification or cancellation, as well as the restriction of their processing.
Furthermore, you have the right to object at any time the processing of your data (including automated processing, such as, for instance, profiling) and to revoke the consent provided without prejudice for the legitimate processing of your data previously given.
In case of a request for data portability, the Data Controller shall provide your personal data to you in a structured, commonly used and machine-readable format.
Without prejudice for any other administrative and jurisdictional recourse, if you believe that the processing of your personal data violates the provisions of EU Reg. 2016/679, you have the right, pursuant to art. 15 letter f) of said EU Reg. 2016/679, to file a complaint before the Data Protection Authority.
CHANGES TO THE PRIVACY INFORMATION SHEET
The Data Controller reserves the right to change, update, implement or remove parts of the present Privacy Information Sheet at its sole discretion at any time. To facilitate such checking, the Privacy Information Sheet will contain its date of updating.
Last update: July 4, 2018
The Data Controller