Pursuant to and for the purposes of Article 13 of European Regulation 2016/679 (hereinafter the “GDPR”), which sets out provisions on the protection of personal data, LUANO CAMP S.r.l., owner of the website https://www.rimor.it (hereinafter the “Website”), in its capacity as Data Controller (hereinafter the “Controller”), hereby informs you that the data you provide, or which is otherwise collected, will be processed in accordance with the aforementioned legislation.
The processing of personal data will be carried out in a lawful, fair and transparent manner in relation to the data subject.
By ‘processing of personal data’ we mean any operation or set of operations, carried out even without the aid of electronic means, concerning the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, deletion and destruction of data, even if not recorded in a database.
Any services offered via the Website are reserved for persons who have reached the age of 18. The Data Controller therefore does not collect personal data relating to persons under the age of 18. Upon request by Users, the Data Controller will promptly delete all personal data unintentionally collected and relating to persons under the age of 18.
DATA CONTROLLER
The Data Controller is the undersigned LUANO CAMP S.r.l., (VAT No. 01375420526), in the person of its current legal representative, with registered office at Via Piemonte, 3 – 53036 - Poggibonsi (SI); PEC: luanocampsrl@legalmail.it e-mail: info@rimor.it Tel: +39 0577 98851.
DATA PROTECTION OFFICER (DPO)
Clementina Baroni, Solicitor (VAT No. 02001880356 and Tax Code BRNCMN73T50L826B), acting as DPO on an ad hoc basis, with registered office at , Via Domenico Francesco Cecati, 1/1, 42123 Reggio nell'Emilia (RE) , contact details: dpo@studiolegaleavvbaroni.it - Certified clementina.baroni@ordineavvocatireggioemilia.it – Tel. 0522506307.
CATEGORIES OF DATA PROCESSED##:
The data subject to this processing are as follows:
• in the case of a natural person, these will be personal identification data such as first name, surname, place and date of birth, telephone number and email address;
• in the case of a legal entity, the data will be the company name or the name of the company’s owner/contact person, email address, first name, surname, place and date of birth, and any contact persons and/or representatives of the Client company.
PURPOSE OF PROCESSING AND LEGAL BASIS
A. COMPLIANCE WITH ANY PRE-CONTRACTUAL, CONTRACTUAL OR FISCAL OBLIGATIONS ARISING FROM REGISTRATION TO DOWNLOAD THE CATALOGUE, which includes, by way of example but not limited to: pre-contractual activities, the conclusion of a contract for the performance thereof, payments, and the management and organisation of the provision of services.
Legal basis: the legal basis for the processing is governed by Article 6(b) of the GDPR, specifically the fulfilment of pre-contractual obligations relating to the download of the catalogue.
Recipients of the data: the data may be disclosed to public bodies and service providers or other private entities involved in the management of such activities, to persons appointed/authorised by the Data Controller, to data processors designated pursuant to Article 28 of EU Regulation 2016/679, and to IT consultants/system administrators.
The updated list of data processors and persons in charge of processing is kept at the Data Controller’s premises and you may access it at any time by sending a specific request to the addresses listed below.
Duration of Processing: the data collected in relation to the aforementioned purpose will be retained until the termination, for any reason, of the assignment and until the expiry of the limitation periods for the exercise of the Data Controller’s rights, within the limits provided for by the relevant civil and tax regulations.
Failure to provide data: the provision of the data necessary for the pursuit of the aforementioned purpose is a contractual obligation which the data subject is required to fulfil. Failure on your part to provide such data will make it impossible to finalise the assignment.
B. PURPOSES RELATED TO THE PERFORMANCE OF OTHER ACTIVITIES FOR WHICH THE PROVISION OF DATA REQUIRES THE DATA SUBJECT’S CONSENT.
B1. CREATION OF A USER PROFILE: analysis of the data subject’s preferences, interests and behaviour, in order to offer personalised content, services and communications in line with their needs.
B2. COMMERCIAL AND OPERATIONAL PURPOSES RELATED TO THE DATA CONTROLLER’S ACTIVITIES CONCERNING GOODS/SERVICES: ‘marketing’ communications to inform about promotions, discounts and particularly advantageous offer terms.
Legal basis for processing: the processing of the data collected is justified by the data subject’s consent (Article 6(a) of the GDPR). Processing will therefore only take place following receipt of explicit consent to processing, which will be provided via the method set out below.
Recipients of the data: the data collected in relation to the stated purpose may be disclosed to persons appointed/authorised by the Data Controller, to data processors designated pursuant to Article 28 of EU Regulation 2016/679, and to IT consultants/system administrators.
The updated list of data processors and persons in charge of processing is kept at the Data Controller’s premises and you may access it at any time by making a specific request to the addresses listed below.
Duration of processing: the data collected in relation to the aforementioned purpose will be retained for the time necessary to fulfil the purposes described above and, in any event, no longer than until the data subject withdraws their consent.
Withdrawal of consent to processing: Pursuant to EU Regulation 2016/679, the data subject has the right to withdraw their consent at any time. Upon completion of the requested operation, your personal data will be removed from the Data Controller’s records as soon as possible, without prejudice to the lawfulness of the processing based on the consent given prior to withdrawal.
With reference to points A and B of this notice, the Data Controller also provides the following information:
Methods of processing: data processing for the purposes set out above is carried out using electronic, IT or paper-based means, in compliance with the confidentiality and security rules laid down by the regulations referred to above and by other regulations arising therefrom. Data is also processed, on behalf of the Data Controller, by professionals and/or companies appointed to carry out technical, development, management and administrative-accounting activities.
Transfer of data abroad: data collected in relation to the aforementioned purpose are not transferred to countries outside the EU.
The data controller, however, reserves the right to use cloud services; in such cases, service providers will be selected from among those offering adequate safeguards, as provided for in Article 46 of the GDPR 2016/679.
Automated decision-making: the data collected for the aforementioned purpose is not subject to automated decision-making.
Rights of the data subject: pursuant to EU Regulation 2016/679, the data subject has the right to
- access personal data to ascertain (‘reactive transparency’) the purposes of the processing, the categories of personal data collected, the recipients of the data, in particular if recipients are in third countries or international organisations, and the envisaged data retention period (Article 15);
- obtain rectification (Art. 16);
- the right to have personal data erased, where such data are no longer necessary in relation to the purposes for which they were collected and where there are no further legal grounds for retention (Article 17 of the GDPR);
- request restriction of processing (Art. 18);
- request data portability (Art. 20);
- the right to object to processing on grounds relating to your particular situation (Article 21 of the GDPR). In such cases, we will refrain from further processing your data unless we demonstrate compelling legitimate grounds for the processing (e.g. to defend our rights in court).
- not to be subject to automated decision-making, including profiling (Art. 22);
- to withdraw consent at any time without prejudice to the lawfulness of processing based on consent given prior to withdrawal (Article 7).
Finally, the data subject shall have the right to lodge a complaint with the Supervisory Authority pursuant to Article 13(2)(d) of the aforementioned Regulation and pursuant to Article 77 of the Regulation.
How to exercise your rights: the data subject may at any time exercise their rights in accordance with the provisions of Article 12 of EU Regulation 2016/679 by sending a:
Having read and received the privacy policy, the undersigned acknowledges the above regarding the processing of data for the purposes indicated.
