Information on the processing of personal data pursuant to art. 13-14 of the GDPR 2016/679

 

We inform you that, in relation to the execution of contractual relations, IMS INFORMATICA Srl as Data Controller is obliged to process and protect your data in accordance with the provisions of the GDPR 2016/679 and Legislative Decree 196/2003 and subsequent amendments.

1.      Interested

Data subject means the natural person who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity

The data controller has identified the following types of data subjects

a)          Natural persons benefiting from the content and services related to the Application

2.      Legal bases of processing

The Controller processes Personal Data if one of the following conditions is met:

received consent for one or more specific purposes. Note: in some jurisdictions, the Controller may be authorised to process Personal Data without the Data Subject's consent or another of the legal bases specified below, until the Data Subject objects ("opt-out") to such processing. However, this does not apply where the processing of Data is governed by European data protection legislation;

processing is necessary for the performance of a contract and/or the execution of pre-contractual measures;

processing is necessary for the provision of the requested service;

processing is necessary for the performance of a legal obligation to which the Controller is subject;;

processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Controller;

processing is necessary for the pursuit of the legitimate interest of the Controller or of third parties.

The processing will be based on principles of correctness, lawfulness, transparency and protection of your privacy and rights..

3.      Data processing

The processing of personal data may consist, in addition to their collection, in their registration, storage, modification, communication, deletion in automated or semi-automated form and their storage will be in electronic/computerised form.

4.      Data subject of processing

The processing carried out by the data controller will relate to the following datai:

a)       First name

b)       Surname

c)       Nickname

d)       Nationality

e)       Date of birth

f)        Billing data

g)       photo (if this option is chosen by the data subject)

h)       biometric data (fingerprint) associated with the device

The provision of the data referred to in points a), b) c), d), e) and f) is compulsory (in the absence thereof, the contractual relationship cannot be continued).

The provision of the data in points g) and h) is optional and left to the free will of the person concerned. Even in the absence of the aforementioned data, it is possible to continue the contractual relationship.

5.      Purpose of processing

Your personal data will be processed for the purpose of managing contractual relations. In particular, the purposes of the processing concern:

a)          Authentication of the data subject

b)         Recording and feeding statistics

c)          Creation of events

d)         Invoicing management

e)         Management of collections or payments

The data may be used for the purpose of sending newsletters only with the consent of the person concerned.

6.      Modalities of processing

The processing will be carried out using computer and telematic tools with organisational and processing logics strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data themselves in compliance with the organisational, physical and logical measures laid down by the provisions in force.

7.      Security Measures

All personal data processed by IMS INFORMATICA srl are protected by appropriate security measures, as required by law.

8.      Periodo di conservazione

I dati sono trattati per il tempo necessario allo svolgimento del servizio erogato dal Titolare e in funzione degli obblighi legali di conservazione degli stessi. Il Titolare si impegna ad una periodica revisione dei tempi di conservazione dei dati ed effettua periodicamente la loro cancellazione.

9.      Retention Period

The personal data collected may be communicated, to the extent of their specific competence, to:

1.       Company personnel in charge of managing the activities

2.       External companies in charge of owning payment management platforms

3.       Persons in charge of bookkeeping

4.    Law firms and tax and administrative consultants

5.    Public authorities for legal compliance

6.    Third parties for input aimed at feeding statistics, authorised by the data subject

Personal data will not be disseminated in any case..

10.  Transfer of data abroad

To the extent strictly necessary for the performance of the contractual relationship, your personal data may be disclosed to third parties, located both within the European Union and outside the European Union in accordance with the adequacy decisions of the European Commission.

11.  Rights of the data subject

Pursuant to, within the limits and in the manner provided for by the European and national provisions in force, the data subject may, exercise the following rights (provided for by art. 16 to art.21 of the European Regulation 2016/679):

-          obtain information on which data are processed by the data controller (right to information);;

-          request and obtain in an intelligible form the data held by the data controller (right of access);

-          obtain the updating or rectification of the data provided;

-          obtain the deletion of data held by the data controller;

-          exercise opposition to the processing in whole or in part;

-          withdraw consent at any time;

-          object to automated processing and not to be subjected to processing based solely on automated decisions, including profiling;

-          request and obtain transformation of data into anonymous form;

-          equest and obtain the blocking or restriction of data processed in breach of the law and data whose storage is no longer necessary in relation to the purposes of processing;

-          portability of data;

-          lodge a complaint with the Supervisory Authority.

12.  Procedures for exercising rights

You may exercise your rights at any time by sending an email to: privacy@imsinformatica.it.

13.  Right of revocation

The data subject has the right to revoke his or her consent at any time. Revocation of consent shall not affect the lawfulness of the processing based on the consent before revocation. With reference to the newsletter service, revocation of consent must be made using the specific link in the email received.

14.  Data controller

The data controller is IMS INFORMATICA Srl, in the person of its legal representative.

IMS INFORMATICA srl can always be reached, for clarification, at the e-mail address: privacy@imsinformatica.it