Information on the Processing of Personal Data for users (Privacy Policy)
Warning: this content has been automatically translated from the Italian language. In case of conflict between this version and the original version, the Italian version will take effect.
Annex 2 - INFORMATION ON THE PROCESSING OF PERSONAL DATA
pursuant to art. 13 and 14 of Regulation (EU) 2016/679 relating to the protection of individuals with regard to the processing of personal data
Digital Solution (hereinafter also "Owner"), with registered office and VAT number as declared in the above-mentioned contract and in the related annexes to which this information is linked (the " Contract "), as data controller informs you, to pursuant to articles 13 and 14 of the European Regulation 679/2016 relating to the protection of personal data (" GDPR ") of the following.
- Type of data processed
Digital Solution is the owner of the processing of personal data communicated at the time of signing the Contract and subsequently provided on the occasion of the execution of the Contract.
The personal data that Digital Solution collects in relation to the management of the contractual relationship and in any pre-contractual phases can be provided directly by the interested party (as defined below) or by the customer, in the case of internal contacts of the customer in charge of managing the contract. The personal data processed by Digital Solution can be, by way of example and not exhaustively, the names, qualifications, telephone numbers, tax code, payment and bank data, possibly the company name and e-mail addresses of natural persons and legal representatives of companies such as contracting parties of the Agreement as well as internal references for contract management (hereinafter, the "interested parties" and "data").
Some information, relating for example to the data of representatives and agents, or to financial statements or customer custody, is also acquired from public sources (for example Chambers of Commerce, or commercial information services).
- Purpose of the treatment
Data processing is carried out by Digital Solution in the performance of its economic and commercial activities for purposes related to the establishment, management and execution of commercial relationships, including the management of the pre-contractual relationship. In particular, the data provided by the interested parties will be processed, mainly through IT tools, for the following purposes:
a) the execution of obligations strictly connected to the management of the Contract, including the administrative and accounting management of the contracts, the management of payments and invoices, the release of services and the management of customer support services. The provision of data for these activities is essential for the correct management of the Contract and does not require the consent of the interested party (art.6 (1) (b) of the GDPR);
b) the execution of activities instrumental to the management of the Contract, including the scheduling of activities, the protection management of any litigation and debt collection for which the provision of data, where necessary, is optional and whose treatment is based on legitimate interest of Digital Solution;
c) the fulfillment of obligations deriving from the law, regulations or community legislation (e.g. tax and accounting obligations) for which the provision of data is mandatory and the processing does not require the consent of the interested party (art.6 (1) (c ) of the GDPR);
- Processing methods
The Data will be processed by the Company with electronic and manual systems according to the principles of correctness, loyalty and transparency envisaged by the applicable legislation on the protection of personal data and protecting the privacy of the interested party through technical and organizational security measures to guarantee a level of adequate security.
- Data retention
The Data necessary for the management of the Contract and the fulfillment of the charges referred to in letter (a) and (b) of point 2 of this information will be kept by the Owner in its archives for 10 years following the recording of the operations in compliance with the civil and fiscal obligations imposed by current legislation. Similarly, the Data referred to in letter (c) of point 2 necessary for the protection in case of dispute or controversy will be kept for 10 years from the termination of the Contract.
- Communication, dissemination and transfer of data
The Data will be processed, within the limits of what is necessary, by the authorized, properly trained and trained staff of the Data Controller, as well as by the staff of third parties who provide services to the Data Controller and perform Data processing on behalf of and on the instruction of the latter as managers of the treatment. These are those who provide IT services (e.g. hosting provider), call center services, debt collection activities, customer support services (e.g. ticketing management), support services for marketing activities (e.g. direct email marketing) and third-party companies, including the companies of the Digital Solution Group, which provide complementary activities (e.g. delivery activities - mainly consisting of providing the customer with installation services, parameterization, configuration, customization and start-up of the IT system). The complete and updated list of the subjects that process the Data as data processors is available on request to the Data Protection Officer.
In cases where the contractual relationship requires the intervention of our commercial partners, the Data Controller may share some Data with distributors, resellers and partners belonging to the distribution chain of Digital Solution products and services. In carrying out its ordinary business activities, the Data may be communicated to subjects who carry out control, revision and certification of the activities carried out by the Data Controller, consultants and freelancers in the context of tax, judicial assistance services and in the case of corporate operations for which it is necessary to evaluate the corporate assets, to other companies of the Digital Solution Group where this is necessary for the purposes of coordination and control of the Group, public bodies and administrations, including tax authorities where this is necessary, as well as to persons entitled to law to receive such information, Italian and foreign judicial authorities and other public authorities, for the purposes related to the fulfillment of legal obligations, or for the fulfillment of the obligations assumed and arising from the contractual relationship, including for the need of defense in court. The contact data could be communicated for completely occasional needs to customers and / or suppliers of the Data Controller, for example if they have to collaborate with these subjects for the purpose of providing the services.
The Data will in no case be disclosed nor will it generally be transferred outside the European Union. However, where - for specific needs related to the location of the third party with which the Data can be shared, some Data are transferred outside the European Economic Area, the Data Controller undertakes to guarantee adequate levels of protection and safeguard, including contractual ones, including the stipulation of standard contractual clauses (a copy of the commitments undertaken by third parties in the context of these clauses may be requested by request to be sent to the Data Protection Officer).
- Marketing and profiling
With the consent of the interested party or in any other cases that may be permitted by the legislation on the protection of personal data, the data may be processed by Digital Solution Srl also for the following purposes:
a) the sending via e-mail and with automatic messages or by telephone, of offers and commercial initiatives relating to products or services of the companies of the Digital Solution Group as well as the conduct of market research or other customer satisfaction initiatives promoted by Digital Solution rl If the provision of any data for this purpose is requested, this provision will be optional. The consent can be revoked at any time, freely in the ways indicated in the following point 7 or through the cancellation link available in each electronic communication. Failure to issue or revoke consent does not in any way prejudice the execution of the Contract;
b) the interested party's analysis of the habits of use of the products and services of the Digital Solution Group on the basis of what may be considered of interest to him in order to improve his products and services with functionalities that may result of greater interest to customers both to offer the interested party products that could respond more precisely to their needs. If the provision of any data for this purpose is requested, this provision will be optional. Any use of information relating to the use of products or services attributable to the client a legal person may be carried out by Digital Solution Srl even in the absence of specific consent, unless otherwise required by law. Consent may be revoked at any time freely in the ways indicated in point 7 below; any failure to release or revoke consent does not in any way prejudice the execution of the Contract.
The Owner reserves the right to use the Customer's email address provided in the context of the stipulation and management of the Contract for the sending of communications for the direct marketing of the Company's products or services similar to those covered by the Contract to which the this information, without prejudice to the right of the interested party to oppose at any time the receipt of such communications by ticking the appropriate checkbox or writing to the Licensor, at the addresses below.
With the consent of the interested party, in order to receive promotions and commercial initiatives, Digital Solution may also communicate the Data to the companies of the Digital Solution Group as well as to partner companies for the sending of promotions and commercial initiatives by them.
Without prejudice to the hypothesis of exercising the data cancellation rights and the rights of opposition and limitation of the processing referred to in point 7 of this information, the data processed for the purposes referred to in this point will be stored and processed in compliance with the applicable legislation for the protection of personal data for the entire period of time necessary to fulfill the aforementioned purposes to the maximum extent of 24 months or the maximum maximum period allowed by law for the profiling referred to in letter a) of this point; otherwise, for the purposes referred to in letter b) of this point, the processing will be carried out until the interested party withdraws consent.
- What are the rights of the interested party
The interested party may exercise, in relation to the processing of the data described therein, the rights provided for by the GDPR (articles 15-21), including:
- receive confirmation of the existence of the Data and access its content (access rights);
- update, modify and / or correct the Data (right of rectification);
- request the cancellation or limitation of the processing of data processed in violation of the law including those whose retention is unnecessary for the purposes for which the data were collected or otherwise processed (right to be forgotten and right to limitation);
- oppose the treatment (right of opposition);
- withdraw consent, where given, without prejudice to the lawfulness of the treatment based on the consent given before the revocation;
- propose a complaint to the Supervisory Authority (Guarantor for the protection of personal data www.garanteprivacy.it) in case of violation of the regulation on the protection of personal data;
- receive a copy in electronic format of the Data concerning him as an Interested Party, when such Data have been made in the context of the contract and request that such Data be transmitted to another data controller (right to data portability).
To exercise these rights, the interested party can contact the Data Protection Officer by sending his request to [email protected], or by sending communication by mail to:
Digital Solution Srl
Via Archimede, 207
00197 Rome
ca: Data Protection Officer
When contacting us, the interested party must make sure to include his name, email / postal address and / or telephone number (s) to be sure that his request can be handled correctly.