(Articles 13 e 14 EUROPEAN REGULATION N. 679/2016)

The undersigned FRANCO GONZATO MODA, with registered office in Via Ca’ Pajella, 19 – 36016 Thiene (VI), Tax Code GNZFNC57T28L157K VAT No. 01236380240, in its capacity as “Data Controller” hereby informs you, pursuant to Articles 13 and 14 of European Regulation No. 679/2016 (hereinafter “EU Regulation”), that your data will be processed as indicated below:

Subject of the Processing

The Data Controller informs you that personal data, identification data (e.g., name, surname, company name, address, telephone number, email address, bank and/or payment details, etc.), hereinafter referred to as “personal data” or simply “data,” relating to you, acquired verbally, directly or through third parties in the past, as well as those that will be collected in the future, may be processed in full compliance with EU regulations. The Data Controller processes the data lawfully, specifically for the performance of a contract to which you are a party or for the performance of pre-contractual measures (e.g., preparation of an offer, etc.) requested by you (Article 6 of the EU Regulation). Data processing means any operation or set of operations concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, and destruction of the data itself.

Legal basis and purpose of the treatment

Legal base: EU Regulation n. 679/2016

2A) without its express consent (art. 6 lett. B), c), e) of the EU regulation), for the following purposes:

– fulfill the pre -contractual, contractual and tax obligations deriving from relationships with her;
– fulfill the obligations provided for by the law, by a regulation, by the Community legislation or by an order of the authority (such as on anti -money laundering);
– exercise the rights of the data controller, for example the right of defense in court;
– for the holding of the general accounting;
– for management purposes (invoicing, possible document management, etc.);
– for the management of credits;
– for statistical and quality control analyzes;
– for insurance management;
– for technical assistance.

In particular, your data will be processed for purposes related to the implementation of the following obligations, relating to legislative or contractual obligations:

– technical and functional access to the site no data is held after the browser closes;
– evolved navigation purposes or management of personalized content;
– Statistical and navigation and users’ analysis.

2b) only upon its specific and distinct consent (art. 7 of EU Regulation), for the following commercial and/or marketing and/or profiling purposes:

-send by e-mail, mail and/or SMS and/or telephone contacts of newsletters, commercial communications and/or advertising material on products or services offered by the data controller and/or detection of the degree of satisfaction on the quality of what has been carried out at his request;
-send by e-mail, mail and/or sms and/or telephone contacts of commercial and/or promotional communications of third parties (for example, business partner).

Methods of treatment

The processing of your personal data is carried out by means of the operations indicated in art. 4 n. 2) of the EU regulation and precisely: collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction, blocking. Your personal data are subjected to both paper and electronic and/or automated processing (however suitable for guaranteeing the security and confidentiality of the data).

Data storage times and other information.

The owner will draw the personal data for the time necessary to fulfill the aforementioned purposes and in any case for no later than the terms of the law from the termination of the relationship for the purposes referred to in the existing relationship. With reference to the personal data subject to processing for marketing and commercial purposes, the same will be kept in compliance with the principle of proportionality and in any case until the purposes of the treatment have been pursued or until the revocation of the specific consent by the interested party intervenes. Specifically, the data controller will process the data for no more than 3 years from the data collection.

The personal data you provide will be processed “in a lawful way, according to correctness and transparency” by protecting her confidentiality and rights.

The interested party undertakes not to insert or transmit any material from the site:

that it is intimidating, defamatory, obscene, indecent, seditious, offensive, pornographic, abusive, such as to incite to racial, discriminatory or discriminatory hatred, threatening, scandalous, inciting, blasphemous, harmful of obligations of secrecy, harmful to privacy or that can in any way produce annoyance or damage; or that represents or encourages behaviors that could be considered forms of crime, which can generate the responsibility of anyone, who are in any way contrary to the law, public order or morality or that they harm third party rights in the world; Or that cause damage (including, without any limitation, computer viruses, Logic Bombs, Trojan Horses, Worms, defective components, corrupt data or other software with a harmful content or able to damage). The user cannot abuse the site (including, by way of example, the performance of hacked activities).

Access to data

Your data may be made accessible for the purposes referred to in previous points 2.a) and 2.b):

– to members, employees and collaborators of the data controller in Italy and abroad, in their capacity of in charge and/or internal data processors and/or system administrators;
– to third -party companies or other subjects who carry out outsourcing activities on behalf of the data controller, in their capacity as external data processors (as an indicative qualification: associated studies, lawyers, data processing companies, certifying bodies, accounting/tax consultant and in general to all bodies in charge of checks and checks regarding the correct fulfillment of the purposes indicated above, credit institutions, professional studies, consultants, insurance companies, insurance companies, insurance companies, For the provision of insurance services, financial offices, municipal bodies and/or municipal offices, consultants and service companies and for safety on the jobs, which in turn will be able to communicate the data, or grant access to them as part of their members participating, users and related related to specific market research. information systems, transporters, shippers and customs agents).

For brevity, the detailed list of these figures is available at our office and is at your disposal.

Data communication

Without the need for an express consent (art. 6 letter b) and c) of the EU Regulation), the data controller may communicate his data for the purposes referred to in point 2.a) to supervisory bodies, judicial authorities, to insurance companies for the provision of insurance services, as well as to those subjects to whom communication is mandatory by law for the completion of the purposes indicated above.

These subjects will draw the data in their capacity of autonomous data controllers.

During and after navigation his data may be communicated to third parties, in particular to:

– Google: advertising service, advertising target, analytical/measurement, customization of content, optimization;
– Google Adwords: advertising service, advertising target, analytical/measurement, customization of content, optimization;
– Google Analytics anonymized: advertising target, analytical/measurement, optimization.
– AddThis: Social buttons sharing articles. Analytical/measurement, optimization.

Your data will not be disseminated.

Data transer:

Personal data are stored on devices located taken by the headquarters of the data controller or at Provider, within the European Union. In any case, it is understood that the data controller, where it is necessary, will have the right to move the data also to non-EU countries. In this case, the Data Controller ensures that the transfer of non-EU data will take place in accordance with the applicable law provisions, after stipulating the contractual clauses and standard checks provided by the European Commission.

Both as regards the data on its devices, and for any data present at Provider, the data controller has implemented adequate technical and organizational measures to guarantee an suitable level of security, in full compliance with what is indicated in art. 32 of the EU Regulation.

Navigation: its navigation data can also be transferred, limited to the purposes above, in the following states: – EU countries, – United States.

Cookies management: in the event that you have doubts or concerns about the use of cookies, you can always intervene to prevent their setting and reading, for example by changing the privacy settings within your browser in order to block certain types.

Since each browser, and often different versions of the same browser, also differ significantly from each other if he prefers to act independently through the preferences of his browser can find detailed information on the procedure necessary in the guidance of his browser.

Nature of the provision of data and consequences of the refusal to respond

The provision of data for the purposes referred to in point 2.a) is mandatory. In their absence, we will not be able to guarantee the services of what is indicated in 2.a).

The provision of the data for the purposes referred to in point 2.b) is optional. It may therefore decide not to confer any data or subsequently deny the possibility of processing data already provided: in this case, it will not be able to receive newsletters, commercial communications and advertising material and/or anything else related to the services offered by the data controller.

However, it will continue to be entitled to the services referred to in point 2.a).

Data protection

The personal data provided by the interested party will be protected through technical and organizational security measures so that they are inaccessible to unauthorized third parties. These security measures are adapted and improved continuously with the development of new technologies to allow to adapt the information with the appropriate methods. The interior engraved ns are trained in the methods appropriate to the various data treatments managed by our

Data violation

The data that deals with our risks “for the rights and freedoms of people” linked to online payment activities by means of the management of external e-commerce platforms and related payment activities. When the interested party will upload his financial data he will already enter into external payment platforms (e.g. credit card management, Paypal) and will fall within our website at the time of the conclusion of the operation. Any violation that involved damage to the interested party will be managed as indicated in art. 33 for the purposes of communicating the violation (Data Breach) to the competent bodies. In any case, we foresee that, in the event of a violation, the extent of the damage on the data will be assessed and consequently the appropriate measures will be taken both against the competent bodies and of the interested party himself.

Rights of the interested party

In its capacity as interested, it has the rights referred to in art. 15 of the EU Regulation reported below and precisely:

He has the right to obtain from the data controller confirms that it is a processing of personal data that concern him or not and in this case, to obtain access to personal data and the following information:

a) the purposes of the treatment;
b) the categories of personal data in question:
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations;
d) when possible, the period of conservation of personal data provided or, if not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to request the data controller for the correction or cancellation of personal data or the limitation of the processing of personal data concerning him or to oppose their processing;
f) the right to propose a complaint to a control authority (the Guarantor for the protection of personal data);
g) if the data is not collected at the interested party, all the information available on their origin;
h) the existence of an automated decision -making process, including the profiling referred to in art. 22, paragraphs 1 and 4 of EU Regulation, and, at least in such cases, significant information on the logic used, as well as the importance and consequences of this treatment for the interested party.

2. When your personal data are transferred to a third country or to an international organization, you have the right to be informed of the existence of adequate guarantees pursuant to art. 46 of the EU Regulation relating to the transfer.

3. The data controller will provide you with a copy of your personal data subject to processing if you request it.

If you ask for further copies, the data controller can charge a reasonable expenses based on administrative costs. If you submit the request by electronic means, and except in your different indication, the information will be provided in an electronic format of common use.

4. The right to obtain a copy referred to in paragraph 3 must not damage the rights and freedoms of others.

Furthermore, where applicable, you can enjoy the rights referred to in articles 16 to 21 of the EU Regulation and precisely has:

– the right to rectify personal data;
– the right to oblivion (right to cancellation);
– the right of limitation of treatment;
– the right to data portability;
– the right of opposition;
– the right to complain to the Guarantor Authority.

You also have the right to revoke at any time a possible consensus already given without prejudice to the lawfulness of the treatment based on the consent given before the revocation.

Personal data not obtained at the interested party

It may happen that the writer is not the data controller to whom she has given her personal data, but it is to be co-entitled of the processing or responsible for the processing in the outside and that therefore your data reached the writer in the second place due to a contract that regulates the parties. In this case, it should be noted that the writer will do everything possible to make sure that she has been informed and has given consent to the processing.

Owner and in charge

Here are some information that it is necessary to bring to your knowledge, not only to comply with the legal obligations, but also because transparency and correctness towards the people who visit our website is a fundamental part of our business.

The data controller. The owner of the processing of your personal data is Franco Gonzato Moda who can contact for any information or request to the following contact details:

e-mail: gonzato.moda@artigiani.vi.it