This information is provided in accordance with Article 13 of Regulation 2016/679 (GDPR), pursuant to Article 13 of Legislative Decree No. 196/2003 (Code on the Protection of Personal Data) and relates to all personal data processed in the manner set out below.
THE DATA CONTROLLER
The Data Controller of the personal data collected is Alter Eco Soc. Coop. Piazza V. Emanuele 19, Fivizzano (MS) CF/P.IVA 00681060455
Data of a personal nature provided may be disclosed to appropriately appointed recipients who will process the data as data processors and/or as appointees in order to comply with contracts or related purposes.
The full list of data controllers and data processors can be obtained by sending a request to segreteria@lunigianasostenibile.it
DATA TRANSFER
In the event that personal data is transferred outside the European Union, for technical operational purposes and to ensure a high continuity of service, the Data Controller shall ensure that the transfer is based on an adequacy decision of the Commission, in order to ensure that the level of protection of natural persons guaranteed by the applicable legislation and in particular by the EU Regulation 2016/679 is not affected.
DATA COLLECTED.
The personal data processed are collected as they are provided directly by the data subject or collected automatically.
Data provided directly by the data subject are all personal data that are provided to the Data Controller in any manner, directly by the data subject.
The data collected automatically are navigation data. This data, while not collected for the purpose of being associated with the identity of the user, may indirectly, through processing and associations with data collected by the Owner, allow the user to be identified.
Following the sending of newsletters, the platform used allows for the detection of the opening of a message and the clicks made within the newsletter itself, along with details regarding the ip and browser/device used . The collection of this data is essential for the operation of the implicit renewal systems of the treatment (see the heading Modes of Treatment) and an integral part of the operation of the sending platform.
PURPOSE OF PROCESSING
The provision of personal data has as its legal basis for processing contractual or pre-contractual requirements or the fulfillment of legal obligations to which the Data Controller is subject. For this reason, any refusal to process or the failure, inexact or partial provision of data could result in the impossibility of proper provision of the service or the impossibility for the Data Controller to respond to requests for information sent by the interested party.
The provision of data for the purposes of sending newsletters for promotional, informative commercial or research purposes is optional and refusal to give consent to the relevant Processing will result in the impossibility of being updated about commercial initiatives and/or promotional campaigns, receiving offers or other promotional material.
WITHDRAWAL OF CONSENT
Data subjects may withdraw their consent to receive promotional and commercial communications immediately by sending a request to segreteria@lunigianasostenibile.it or by clicking on the appropriate unsubscribe link that can be found in the footer of each promotional and commercial email received.
RECIPIENTS
Data of a personal nature provided may be disclosed to appropriately appointed recipients who will process the data as data processors and/or as appointees.
The Data Controller does not disclose any of the data subjects’ information to third parties without their consent, except where required by law. In any case, the dissemination of processed personal data is excluded. The complete list of data processors, co-owners and persons in charge of the processing of personal data can be requested by sending a special request to the email address segreteria@lunigianasostenibile.it
MODE OF TREATMENT
Personal data are processed by automated means for as long as is strictly necessary to achieve the purposes for which they were collected, providing in each case for the annual verification of the data stored in order to delete those considered obsolete, unless the law provides for archiving obligations.
Data processing is usually carried out at the Data Controller’s premises, by staff or external collaborators duly designated as data processors. The full list of data processors and Data Processors can be obtained by sending a special request to the email address segreteria@lunigianasostenibile.it
Specific security measures are observed to prevent data loss, illegal or incorrect use, and unauthorized access.
Subscription and related processing are considered valid until unsubscribed by the user, present in each email, or after 12 months from the last communication for which they have evidence of direct interaction (click, open, reply).
RIGHTS OF THE DATA SUBJECT
Under Articles 15 – 21 of EU Regulation 2016/679 each data subject is granted a number of rights.
– Right of Access: the data subject, in accordance with Article 15, has the right to obtain confirmation that personal data concerning him or her is being processed and, where appropriate, to obtain a copy of that data. He or she also has the right to obtain access to the personal data concerning him or her and to further information such as the purpose of the processing, the categories of recipients, the period of data retention, and the rights that can be exercised.
– Right of rectification: the person concerned, in accordance with Article 16, has the right to obtain the rectification of inaccurate personal data concerning him or her or the integration of the same.
– Right to deletion: the data subject has the right to obtain the deletion of personal data concerning him or her, without undue delay, if any of the grounds provided for in Art. 17.
– Right to restriction of processing: the data subject has the right, in the cases provided for in Article 18 of Regulation 2016/679, to obtain restriction of processing.
– Right to data portability: the data subject has the right to receive in a structured, commonly used, machine-readable format personal data concerning him or her and has the right to transmit such data to another data controller without hindrance, in accordance with Article 20 of Regulation 2016/679;
– Right to object to processing: the data subject has the right to object to the processing of personal data concerning him or her in accordance with Art. 21 of Regulation 2016/679.
– The data subject also has the right to file a complaint with the competent supervisory authority, the Privacy Guarantor.
Requests under the above points should be addressed in writing to the Data Controller. The Data Controller will, within the time limits established by current regulations, provide timely responses to requests to exercise the rights of data subjects.
Any elucidation or request for clarification can be addressed in writing to the Data Controller.
UPDATES AND CHANGES
The Data Controller reserves the right to amend, supplement or update this Policy periodically in accordance with applicable legislation or measures adopted by the Data Protection Authority.
These changes or additions will be brought to the attention of those concerned. We encourage users to review the Privacy Policy on a regular basis to check the updated Policy and decide whether or not to continue using the services offered.
