The EU Regulation 2016/679 on the protection of Personal Data (hereinafter the "Regulation") concerns the rules on the protection of the Personal Data of individuals, as well as the rules on the free circulation of such data.
This document sets out the circumstances and purposes of the processing of Personal Data by Assist Group S.r.l, with its registered office in San Polo d’Enza (RE-42020), Via Conti n. 7, which is the company "Controller" of the data processing (hereinafter the "Data Controller") pursuant to art. 26 of the Regulation, as well as any further information required pursuant to the Regulation.
The user should read this information carefully in order to fully understand the basis on which the Personal Data are collected, how they are used, stored and to whom they are disclosed.
In light of the above, pursuant to art. 4 of the Regulation, it should be noticed that:
1. PURPOSE OF TREATMENT
The Personal Data are provided by the Data Subject as part of the relationship with the Data Controller.
Personal Data may include name, address, place of residence, gender, date and place of birth, e-mail address, landline and mobile number, other contact details, information provided by the Data Subject regarding their habits, job, the methods of use of the site, including the information collected through cookies.
The Personal Data provided are processed by the Data Controller for contractual purposes, ancillary to the performance of the agreement, for legal and / or regulatory compliance and for other purposes as specified in detail below:
a) Establishment and execution of the contractual agreements and consequent obligations
The Data Controller may process the contact data for the purpose of establishing and executing contractual agreements, providing the requested services, responding to reports and complaints and to provide information relating to the service.
b) Management for access to the website
Contact data and website usage data are collected to allow access and management of the Personal Area.
The Data Controller may process the Data for marketing and advertising communication purposes such as:
d) Purpose of profiling
The Data Controller may process the Data for the creation of profiles and for the analysis of the consumer habits or choices of the Data Subject in connection with the purchases details as well as the data provided directly by the Data Subject.
2. TREATEMENT METHODS
In accordance with the provisions of art. 5 of the Regulation, the Personal Data will be processed lawfully and correctly; with transparency and clarity towards the Data Subject; collected and recorded for specific, explicit and legitimate purposes, and subsequently processed in accordance with these purposes, adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed; they will be accurately reported and, if necessary, updated.
Personal Data will be processed by the Data Controller with automated and non-automated methods according to the aforementioned purposes and, in any case, in order to guarantee the security and confidentiality of the data.
Persons in charge of processing specifically appointed by the Data Controller may have access to Personal Data for the purposes referred to in art. 1.
3. PROVISION OF PERSONAL DATA
The provision of Personal Data is mandatory to manage the contractual agreement and to respond to requests for information. Any denial by the Data Subject prevents the achievement of the purposes referred to in point no. 1 letters a) and b).
The provision of Personal Data for the purposes referred to in letters c) and d) - Marketing, profiling and third party marketing purposes - is optional.
Pursuant to Article 6, letter a) of the Regulation, the Data Controller will process the data provided for each individual purpose only if expressly and specifically authorized by the Data Subject. Any refusal or any incorrect and/or incomplete information provided could prevent the progress of the activities mentioned therein, but it will not prevent the performance of the contractual agreement and it will not affect the lawfulness of the treatment based on the consent given before any revocation of the treatment.
For the purposes stated above, when necessary, consent for the processing of Personal Data may be requested and expressed by specific checkmark.
Consent can be withdrawn at any time.
4. STORAGE OF PERSONAL DATA
In compliance with the provisions of art. 5 of the Regulation, the Personal Data processed are stored in order to allow the identification of the Data Subject for the time necessary for the performance of the contract and in compliance with the time limit stated by the applicable laws and regulations.
It remains understood that, once the purpose of treatment has been finished or in case of opposition to the data processing or in case of revocation of the consent, the Controller is in any case entitled to keep the Personal Data processed for a maximum time of 10 years from the termination of the relationship for contractual and legal purposes, if any, in order to verify any pending, including accounting documents.
The data provided and processed for the sole purposes of profiling, marketing and third party marketing referred to in paragraph 1 lett. c) and d) will be stored until the Data Subject requests to withdraw the consent related to the aforementioned purposes and in any case no later than 24 months from the date of the last consent.
After this period, the data will be deleted and/or made anonymous so as not to allow, even indirectly or by connecting other databases, to identify the data subjects.
The electronic storage of Personal Data takes place on servers located within the European Union that can guarantee an adequate level of security. Specific security measures are adopted in order to prevent data loss, illicit or incorrect use and unauthorized access.
5. DISSEMINATION OF PERSONAL DATA
Personal Data shall not be disclosed to third parties without the express consent of the Data Subject.
6. DATA SUBJECT RIGHTS
At any time, the Data Subject can exercise all the rights that are expressly recognized by the Regulation, as indicated below:
7. CONTROLLER AND PROCESSOR OF THE TREATMENT
The Data Controller is Assist Group S.r.l, based in San Polo d’Enza (RE-42020), Via Conti n. 7 (VAT number 00760650358) PEC: firstname.lastname@example.org.
8. DATA SUBJECT’S EXERCISE OF THE RIGHTS AND COMMUNICATIONS
In order to exercise the rights referred to in paragraph 6, the Data Subject may contact the internal data processor at any time, by sending either: