Ugo Palumbo, Data Controller, informs you pursuant to the applicable national legislation and the European Privacy Regulation no. 679/2016 ("GDPR") about the purposes and methods of processing your data. Please read this notice carefully. By using our services, you transmit or share with us some information that in some cases allows us to provide the service, in other cases to meet your needs and improve ourselves. In this document, I would like to explain:
1. what data I use;
2. why and on what legal basis I collect your data;
3. how your data is used;
4. how long your data is kept;
5. who can access your data;
6. to whom your data may be disclosed;
7. where your data may be transferred;
8. what your rights are;
9. who is the Data Controller of your data
1. What data do I use?
The Data Controller uses various personal data of yours (hereinafter "personal data" or "data"), namely:
- the data you provide, identifying and non-sensitive such as: name, surname, tax code, address, email, phone number. These are the data you provided when requesting to use our services (for example: web design and graphics);
2. Why and on what legal basis do I collect your data?
The data you provide allows me to carry out all administrative activities related to your service requests. Specifically, your personal data is processed for the following purposes and legal bases:
a) without your prior consent for service purposes and in particular for:
- the execution of the contract or the fulfillment of pre-contractual commitments;
- The pursuit of a legitimate interest of the Data Controller:
- manage any complaints and disputes;
- exercise the rights and protect the legitimate interests of the Data Controller or Third Party Controllers, for example the right of defense in court;
- send you communications about updates to tax regulations or other useful information aimed at improving the consulting service, to the email address you provided or via SMS or any instant messaging system. You have the right to request the suspension of such reminders by following the procedures indicated in point 8)
- the fulfillment of legal obligations:
- comply with and fulfill the obligations provided for by laws, regulations, EU legislation, orders and prescriptions of the competent authorities, for example tax obligations.
b) The Data Controller will not ask for your consent as your data will not be used for other non-service purposes (for example: marketing, profiling, preference analysis, etc.)
3. How is your data used?
Your personal data is used for collection, registration, organization, storage, consultation. Your personal data is processed on paper, electronically and automatically and stored in databases.
4. How long is your data kept?
The Data Controller keeps and uses your personal data for no more than 10 years and in any case for the limitation period provided by law.
5. Who can access your data?
Your privacy is very important and I do everything to protect it. For this reason, I share your data only when strictly necessary. Your data is accessible to:
- employees and/or collaborators of the Data Controller in their capacity as persons in charge and/or internal managers of the processing and/or system administrators;
- Professionals appointed by the Data Controller to fulfill legal obligations (for example legal consultants).
6. To whom may your data be disclosed?
The Data Controller may disclose your data without your express consent for service purposes to:
- Judicial authorities, upon their request;
- Professionals appointed by the Data Controller to whom it is necessary to communicate them, for compliance with legal requirements or to other public administration offices (for example INAIL, INPS, Revenue Agency)
7. Where may your data be transferred?
Your data will not be transferred outside the European Union.
8. What are your rights?
So far I have explained how I process your data and how I behave; now I will illustrate your rights, so that you always have control over your privacy and your information. If the limitations provided by law do not apply, you have the right to:
- obtain confirmation of the existence or not of your personal data, even if not yet registered, and request that such data be made available to you in a clear and understandable way;
- request information and, if necessary, a copy:
a) of the origin and category of your personal data;
b) of the logic of use, if your information is processed with electronic tools;
c) of the purposes and methods of processing;
d) of the identification details of the Data Controller and managers;
e) of the subjects or categories of subjects to whom your personal data may be communicated or who may become aware of it;
f) of the period in which your data is kept or the criteria used to determine such period, when possible;
- obtain, without unjustified delay, the updating, modification, rectification of your incorrect data or the integration of your incomplete data, if you are interested;
- obtain the deletion, blocking of your data or, where possible, transformation into anonymous form;
- obtain the limitation of processing in the case of:
a) contestation of the accuracy of personal data, if you have not preferred to request the modification, updating, modification or rectification of your data;
b) unlawful processing by the Data Controller, to prevent deletion;
c) exercise of your right in court;
d) verification of the possible prevalence of the legitimate reasons of the Data Controller over those of the data subject;
- receive, if the processing is carried out by automated means, without hindrance and in a structured, commonly used and readable format, the personal data concerning you that you have provided us with prior consent or on contract to transmit them to another Data Controller or – if technically feasible – to obtain direct transmission from the Data Controller to another Data Controller;
- object at any time, in whole or in part, for legitimate and prevailing reasons related to your particular situation, to the processing of personal data concerning you
For all the above cases, if necessary, the third parties to whom your personal data is communicated will be informed of the possible exercise of your rights, except for specific cases (e.g. when such fulfillment proves impossible or involves a manifestly disproportionate use of means with respect to the protected right). You can at any time modify and revoke the consents given and exercise your rights in various ways: by sending a request to Ugo Palumbo via LinkedIn.
9. Who is the Data Controller of your data?
Remember, for any need, that the Data Controller of your personal data is Ugo Palumbo. The Data Controller is solely responsible for the processing of data. This notice may be subject to changes.