More information for users

The legal basis of the processing

The Holder processes Personal Data relating to you in case there is one of the following conditions:

• the User has given consent for one or more specific purposes; Note: in some jurisdictions the Owner may be allowed to process Personal Data without the need to be the User's consent or another legal basis specified below, as long as the User does not object (“opt-out”) to such treatment. However, this is not applicable if the processing of Personal Data is regulated by european legislation regarding the protection of Personal Data;
• the processing is necessary for the performance of a contract with the User and/or the execution of pre-contractual measures;
• the processing is necessary for compliance with a legal obligation to which is subject to the Holder;
• the processing is necessary for the performance of a task in the public interest or for the exercise of public authority vested in the Owner;
• the processing is necessary for the purposes of the legitimate interest of the data controller or third parties.

It is always possible to ask the data controller to clarify the concrete legal basis of each treatment and in particular to specify if the treatment is based on the law, provided for by a contract or necessary to conclude a contract.

More information on the storage time

If not stated otherwise in this document, Personal Data shall be processed and stored for the time required by the purposes for which they were collected and may be stored for a longer period of time, due to any legal obligations or on the basis of the consent of the Users.

Therefore:

• The Personal Data collected for purposes related to the performance of a contract between the Owner and the User shall be retained until completion of the execution of this agreement.
• The Personal Data collected for purposes related to the legitimate interest of the data controller will be retained until fulfillment of such interest. The User can obtain further information regarding the legitimate interest pursued by the Owner in the relevant sections of this document or by contacting the Owner.

When the treatment is based on the consent of the User, the Owner may keep the Personal Data longer until such consent is not withdrawn. Furthermore, the Owner may be obliged to retain Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period the Personal Data will be deleted. Therefore, at the expiration of this term the right of access, cancellation, rectification and the right to portability of the Data cannot be exercised.

User's rights

Users can exercise certain rights with reference to the Data processed by the Owner.

In particular, within the limits provided by the law, the User has the right to:

• revocare il consenso in ogni momento. L’Utente può revocare il consenso al trattamento dei propri Dati Personali precedentemente espresso.
• object to the processing of their Data. The User can object to the processing of their Data when it takes place by virtue of a legal basis other than consent.
• access their Data. The User has the right to obtain information on the Data processed by the data controller, on certain aspects of the processing and to receive a copy of the processed Data.
• verify and seek rectification. The User can verify the correctness of his Data and request its updating or correction.
• obtain the restriction of the processing. The User can request the limitation of the processing of their Data. In this case, the Owner will not process their Data for any purpose other than their conservation.
• obtain the cancellation or removal of their Personal Data. The User can request the cancellation of their Data by the Owner.
• receive their Data or have them transferred to another data controller. The User has the right to receive their Data in a structured format, of common use and readable by automatic device and, where technically feasible, to obtain its transfer without obstacles to another holder.
• lodge a complaint. The User can lodge a complaint to the supervisory authority of personal data protection authority or act in court.

Users have the right to obtain information regarding the legal basis for the transfer of Data abroad, including to any international organization governed by international law or constituted by two or more countries, such as the UN, and about the security measures taken by the Owner to safeguard their Data.

Details on the opposition right

When Personal Data is processed in the public interest, in the exercise of public authority vested in the Owner or for the pursuit of a legitimate interest of the data controller, Users have the right to object to the processing for reasons related to their particular situation.

Please note to our Users when their Data were treated with direct marketing purposes, they can object to the processing at any time, free of charge and without giving any reason. If Users object to the processing for direct marketing purposes, the Personal Data are no longer processed for these purposes. To find out if the Holder handle Data with direct marketing purposes, Users may refer to the respective sections of this document.

How you can exercise your rights

To exercise their rights, Users can address a request to the contact details of the Owner indicated in this document. The request can be filed free of charge and the Owner will reply as soon as possible, in any case within one month, giving the User all the information required by law. Any adjustments, cancellations or limitations of the treatment will be disclosed by the Owner to each of the recipients, if any, which have been transmitted to the Personal Data, unless this proves impossible or involves a disproportionate effort. The Owner will inform you of these recipients if you so request.