Data protection – privacy notice

GDPR and cookie law

DATA PROTECTION – PRIVACY NOTICE

In accordance with and for the purposes of Article 12 and 13 of the European Regulation of 27 April 2016, no. 679 (also known as “GDPR”), the Data Controller wishes to provide its users / customers with the following information related to the data provided by the data subject, also through the website www.tabulaex.com (hereinafter also the “Website”)

  1. Details and contact information for the Joint Data Controllers.

TABULAEX S.R.L., with Registered Office in Via Carducci n. 32, Milan, Phone number +39 02 30462609, e-mail address amministrazione@tabulaex.com,  pec: tabulaex@legalmail.it.

  1. Contact details of the Data Protection Officer.

There is currently no provision for the appointment of a Data Protection Officer.

  1. Purpose and legal basis of data processing.

The data provided by the data subject through the operations that the Customer will carry out on the Website or provided by the Customer or by the user of the Website to the owner of the Website will be treated as provided by the GDPR in order to respond to the request for contact and for subsequent fulfilments of a management nature, in order to verify the needs of the data subject and offer and manage the services required, for operations of an administrative nature, as well as to fulfil specific obligations or follow specific tasks required by law. The data may also be used for receiving newsletters or information, including commercial and promotional information, related to the activities of TABULAEX S.R.L., without prejudice to the right of the user of the Website to communicate at any time his desire to no longer wish to receive such communications.

The legal basis of the data processing described above consists of the execution of the contract to which the data subject is party and of legal obligations. The request for an expression of consent will be used for promotional purposes.

  1. Recipients or categories of recipients to whom the personal data may be communicated.

The data will not be disclosed unless contractually or legally required to do so, and may be disclosed to third parties who operate in conjunction with and on behalf of the Data Controller, to business partners and parent companies or companies connected to the Data Controller, only in the performance of the service requested, for the execution and management of the relationship and for the activities and purposes described above, including promotional ones, for operations of an administrative nature, legal and contractual advice, or for legal obligations. The data may be made available to the staff of the Data Controller and those responsible for the management and maintenance of the processing systems. The communication to the above-mentioned natural persons will in any case take place with an assurance that the rights of the data subject will be protected as provided for in the GDPR. Your name may be entered in the Data Controller’s e-mail directories and you may receive periodic and reserved communications in electronic or paper form. The list of possible data processors is available from the Data Controller.

  1. Possible transfer of personal data to another country or international organisation with information regarding any privacy guarantees.

There are no plans to transfer data outside the EU or to international organisations. In any case, the Data Controller will carry out the transfer in compliance with the binding corporate rules and, should the need arise, it shall verify whether or not there is a decision on its suitability by the EU Commission that guarantees an adequate level of data protection.

  1. Retention period for personal data or criteria used to determine such period.

The data will be stored in a form that allows the identification of data subjects and retained for no longer than is necessary for the purpose it was obtained for, consistent with other legal obligations. The Data Controller has a data retention procedure in place: in addition, for professional reasons the minimum retention period is currently 10 years.

  1. Rights of the data subject

The Data Controller informs you of the following rights:

  1. right of access, rectification, cancellation, restriction, object:

the data subject may access his/her data at any time, request its rectification if incorrect, request the cancellation of excessive data but not those required by law by the Data Controller, and may limit access to the data to certain persons;

  1. right to data portability:

The data subject has the right to receive his or her personal data provided to a data controller in a structured, commonly used and machine-readable format from an automatic device, and has the right to transmit such data to another data controller without hindrance by the data controller to whom he has provided them exclusively in the cases laid down in Article 20 of the GDPR;

  1. right to withdraw the consent at any time:

the data subject may withdraw his/her consent at any time, understanding the consequences (including interruption of the professional assignment), without prejudice to the obligation for the Data Controller to continue to hold the personal data for processing when it is necessary to fulfil a legal obligation of the Data Controller or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the Data Controller.

  1. The right to lodge a complaint with a privacy supervisory authority.
  2. Mandatory or optional nature of the provision.

The provision of data is optional.

  1. Consequences of refusal to reply.

No consequence is foreseen for failure to provide the requested data, given the optional nature of the same.

  1. Existence of profiling activities or automated decision-making processes, criteria employed and consequences for the data subject.

No profiling activities shall be carried out with regard to the data subject or any form of automated processing of personal data consisting of the use of such personal data relating to an individual, in particular to analyse or predict, for example, his or her financial circumstances, health, personal preferences, interests, reliability, behaviour, location or movements.

 

TABULAEX S.R.L.