This page describes how to manage the site in relation to the processing of personal data of users who consult it. This is an information that is also provided pursuant to art. 13 of the EU General Regulation 2016/679 (hereafter "RGDP") on the protection of personal data to those who interact with web services accessible by telematic means from the address http://www.promosspa.it in reference to PROMOS S.p.A
The information is provided only for the site in question and not for other websites that may be consulted by the user through links. The information is also based on Resolution no. 13 of 1 March 2007 "on the Internet and e-mail" of the Privacy Authority, to identify some minimum requirements for the collection of personal data online, and, in particular, the methods, timing and nature of the information that the owners of the processing must provide users when they connect to web pages, regardless of the purpose of the link.
The processing of personal information concerning you will be based on principles of correctness, lawfulness and transparency and protection of your privacy and your rights. The legislation in question provides above all that anyone who carries out processing of personal data is required to inform the data subject on which data are processed and for what purpose, therefore, in accordance with the provisions of art. 13 of the RGDP 2016/679, we provide you with the following information:
Following consultation of this site, data relating to identified or identifiable persons may be processed. Please note that the Data Controller is Promos SpA with registered office in Frazione Villa Lempa, - 64010 - Civitella del Tronto (TE), in the person of the Legal Representative pro-tempore, electively domiciled at the office of the writer, to which they must be forwarded communications for the exercise of the rights granted to the data subject referred to in Articles 15 to 23 of the RGDP by registered letter, PEC or e-mail where the complete list of persons to whom the data can be communicated is also available .
The processing operations connected to the web services of this site take place at the Registered Office of the writer and are only handled by technical staff in charge of processing, or by persons in charge of occasional maintenance operations. The hosting servers are located at ARUBA S.p.A which is responsible for the processing of data, processing the data on behalf of the holder, is located in the European Economic Area and acts in accordance with European standards; Privacy Information: http://web-whois.nic.it/privacy (privacy policy - https://www.aruba.it/informativa_arubaspa.pdf)
No data deriving from the web service is communicated or disseminated. The personal data provided by users who forward requests for information or to subscribe to the site's mailing list, are used only to perform the service or provision requested.
Data provided voluntarily by the user.
We only treat / process your personal data, and will be used only to perform the service or the requested service.
Limited to the information provided on this site, Personal data that can be classified as sensitive or judicial "Details" will not be processed.
The optional, explicit and voluntary sending of e-mails to the addresses indicated on this site entails the subsequent acquisition of the sender's address, necessary to reply
to requests, as well as any other personal data included in the message. Specific summary information will be progressively reported or displayed on the pages of the site prepared for particular services on request.
In the case of data processing of minors, consent must be obtained from parents or parental authorities if the person under 16 is under age.
The data are collected by us with the exclusive purpose of following up requests for information in relation to the proper conduct of our business, namely:
a. provision of services based on web interface (registration of users registry);
b. provision of information related to your specific request on the services and products of the writer;
c. purposes connected to the obligations established by laws, regulations, community legislation and provisions issued by authorities legitimated by the law;
The processing of personal data for the purposes set out above does not require your express consent (Article 24, letters a) and b) of the Code and art. 6 lett. b) and e) of the RGPD).
The legal basis of the processing is based on the legitimate interest of the Data Controller to perform the services on the basis of a specific request;
You will always have the right to freely and freely oppose, in whole or in part, to the processing of your data for said purposes, for example by excluding the automated methods of contact and expressing your desire to receive commercial and promotional communications exclusively through traditional ways of contact.
Apart from that specified for navigation data, the user is free to provide personal data contained in the application forms or indicated in contacts for information on the real estate offers by the writer, or to request registration in the mailing list of the site, or sending requested information.
The data required for the purposes referred to in letters a), b) and c) above must be provided for the execution of the services or information requested. Therefore your eventual refusal, even partial, to provide such data would make it impossible to establish and manage the relationship itself and provide the requested service.
We retain your personal data only for the time necessary to achieve the purposes for which they were collected or for any other legitimate related purpose.
Furthermore, we limit access to your personal data only to those who need to use it for relevant purposes.
Your personal data that are no longer needed, or for which there is no longer a legal requirement for its preservation, are irreversibly anonymised (and thus can be stored) or destroyed securely.
The processing of data takes place / will occur through the use of electronic tools through our. computer system, and in this case will be recorded on protected computer media, or manually and the relative paper documentation will be correctly maintained and protected for as long as necessary for processing through procedures that guarantee security and confidentiality to prevent loss of data. data in compliance with the security measures pursuant to art. 32 of the GDPR 2016/679, from illicit or incorrect use and unauthorized access and may be carried out either by paper means, or through the use of automated electronic tools for the time strictly necessary to achieve the purposes for which they were collected.
Your data will not be "disseminated" by us, with this term being intended to give it knowledge to indeterminate subjects in any way, including by making available or consulting, unless specifically authorized by the interested party with a separate deed.
Your data may instead be "communicated" by us, with this term meaning to give it information to one or more specific subjects, in the following terms:
The management and storage of data will take place on servers located within the European Union of third-party companies appointed and duly appointed as Data Processors. The data will not be transferred to outside the European Union. In any case it is understood that, where necessary, we will have the right to move the server location to Italy and / or the European Union and / or non-EU countries. In this case, the holder ensures from now on that the transfer of non-EU data will take place in accordance with the applicable legal provisions, stipulating, if necessary, agreements that guarantee an adequate level of protection and / or adopting the standard contractual clauses provided for European Commission.
We inform you that in your capacity as an interested party, you have under Articles 15 to 23 of the RGDP 2016/679, the rights listed below that you can assert by asking a specific request to the Data Controller and / or to the controller, in addition the right to lodge a complaint with a supervisory authority:
Art. 15 - Right of access
The interested party has the right to obtain from the data controller confirmation that it is or is not undergoing treatment of personal data concerning him and in this case, to obtain access to personal data and information concerning the treatment.
Art. 16 - Right of rectification
The data subject has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing an additional declaration.
Art. 17 - Right to cancellation (right to be forgotten)
The data subject has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay.
Art. 18 - Right to limit the processing
The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;
c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in court;
d) the interested party has opposed the treatment pursuant to Article 21 (1), pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
Art. 20 - Right to data portability
The data subject has the right to receive, in a structured, commonly used and automatically readable form, the personal data concerning him / her provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller who supplied them.
In exercising its rights relating to the portability of data in accordance with paragraph 1, the data subject shall have the right to obtain direct transmission of personal data from one controller to another, if technically feasible.
Art. 21 - Opposition right
The interested party has the right to oppose at any time, for reasons connected with his particular situation, to the processing of his personal data pursuant to Article 6, paragraph 1, letters e) of), including profiling on the basis of these provisions.
Art. 22 - Right not to be subjected to automated decision making, including profiling
The data subject has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person.
How to exercise rights
You may at any time exercise your rights or withdraw your consent by sending a notice to the addresses and in the manner specified on phone: 0861 919123
fax: 0861 919119 - e-mail: info@promosspa.it - PEC: promosspa@legalmail.it
This privacy policy is updated as of June 12, 2018 Rev 00