Information on the processing of personal data

 

Pursuant to articles 13 and 14 of the Regulation (EU) 2016/679, General Data Protection Regulation  (hereafter “GDPR”), with regard to personal data which it will acquire as Data Controller, Due Esse Christmas s.r.l. provides the following information:

 

1. Personal data
   According to art. 4 n. 1) of the GDPR, personal data provided by the Customer will be processed in accordance with this information and in any case in compliance with current legislation on the protection of personal data.
2. Purpose
   a. The data will be processed for purely commercial purposes related to the activity of Due Esse Christmas s.r.l. and therefore for purposes strictly connected to the management of the contractual relationship the processing of which is necessary for the execution of the business relationship whose person concerned is a part (Article 6 letter b) of the GDPR) and for the prosecution of a legitimate interest of the Controller ( Article 6 letter f) of the GDPR). This legitimate interest is constituted by the economic activity of Due Esse Christmas s.r.l.
   b. for the fulfillment of the obligations established by laws or by regulations to which the Data Controller is subject (Article 6 letter c) of the GDPR) (legal obligations);
   c. to communicate and / or send, even with automated methods, advertising and information material, and commercial information through telephone channels, SMS, e-mail, fax, whose legal basis resides in the explicit consent of the interested party (Article 6 letter a) of the GDPR) (direct marketing purposes);
3. Data communication
   The data will be eventually communicated by Due Esse Christmas s.r.l. to the persons responsible for the activities inherent to the completion of the commercial relationship and therefore to third parties indispensable for the commercial activity (for example banks, trucking companies, business partners) for the purposes of protecting the credit risk and transport of goods, to guarantee the delivery of the same and provide the necessary operational support. This communication is necessary for the conclusion of the contract and for the fulfillment of the contract. The scope of data communication will be that strictly necessary for the completion of the commercial activity from the order until its conclusion. Furthermore, Due Esse Christmas s.r.l., after a specific request, communicates the data to the competent Authorities for the fulfillment of the obligations imposed by law. Due Esse Christmas s.r.l. provided for the necessary designations and appointments according to the provisions of the GDPR.
4. Nature of the provision of data
   The consent to the processing of data for the purposes described in the previous letter 2.a) and 2.b) is not necessary pursuant to art. 6 of the GDPR. The consent to the processing of data for the purposes stated in lett. 2.c) ,instead, is optional and any refusal will prevent Due Esse Christmas s.r.l. sending commercial communications, profiling or communicating with its partners about commercial purposes of third parties.
5. Methods of data processing
   The data will be processed either in paper form or electronically and / or automated, directly and / or through third parties mentioned above. The data may be processed and organized in databases, processed for the time strictly necessary for contractual and / or commercial obligations.
6. Retention period
   It coincides with the duration of the contractual relationship, while that related to the fulfillment of legal obligations is prescribed by law.
7. Data Controller and Data Protection Officer
   Due Esse Christmas s.r.l. with registered office in via Mottola Z.I. Km. 2,200 74015 Martina Franca (Ta); for any communication regarding the protection of personal data, the email box is available: info@dueessechristmas.it. The Data Protection Officer is the same company in the person of its administrator.
8. Rights of persons concerned

At any time the Customer can exercise his rights towards the Data Controller, pursuant to art. 15 and ss. of the GDPR. In particular, each person concerned has the right to access to personal data, to correct or cancel data or to limit the processing of data concerning him or to oppose their processing, in addition to the right to data portability.
The Customer also has the right to lodge a complaint with the Guarantor for the Protection of Personal Data.