Object

Information on the processing of personal data pursuant to articles 12 and following. of Regulation (EU) 2016/679 (GDPR).

 

Premise

Regulation (EU) 2016/679 ("General Data Protection Regulation", hereinafter GDPR) provides for the protection of natural persons with reference to the processing of personal data. According to this legislation, the processing of personal data referring to a subject, specifically to be defined as an "interested party", is based on principles of correctness, lawfulness and transparency, as well as the protection of privacy and the rights of the interested party.

This is to inform you, in compliance with the aforementioned rule, that in relation to the relationship or relationship that you have with our structure, as a customer, our organization is in possession of some data relating to you, which have been acquired, even verbally , directly or through third parties who carry out operations concerning you or who, to satisfy your request, acquire and provide us with information.

Pursuant to the GDPR, being such data information that refers to you, they must qualify as "personal data", and must therefore benefit from the protection provided by these provisions. Specifically, according to said legislation, you are the interested party who benefits from the rights established to protect your personal data.

Pursuant to articles 12 et seq GDPR our structure, in quality  of Controller, will process the personal data you provide in compliance with the law, with the utmost care, implementing effective management procedures and processes to protection of the processing of your personal data. To this end, the writer, using material and management procedures to safeguard the data collected, undertakes to protect the information communicated, in order to avoid unauthorized access or disclosure, as well as to maintain accuracy of the data and also to guarantee the use appropriate of the same.

In accordance with this premise, the following information is provided.

 

Personal data collected

The writer, as Owner, uses your personal data to operate at best in the exercise of its business.

The following data may be requested, even only partially:

• personal data, tax code, VAT number, name, registered office, residence and domicile and contact details;

• data relating to the contractual relationship describing the type of contract, as well as information relating to its execution and necessary for the fulfillment of the contract itself;

• accounting data relating to the economic relationship, the sums due and payments, their periodic trend, the summary of the accounting status of the relationship;

• data to make the relationship with our structure more defined and our collaboration and operational efficiency more effective;

• data relating to: your employees and/or collaborators, information on your profession or your company.

Storage times for your data

The data collected will be kept for the entire duration of the relationship or collaboration with our organization and for 10 years from the date of termination of the relationship. If, during the contractual relationship, data not inherent to the related administrative and accounting obligations are processed, such data will be kept for the time necessary to achieve the purpose for which they were collected and then cancelled. The retention times of such data will be communicated to you when such data will be collected with specific information.

 

Mandatory or optional nature of the provision of data

and the consequences of any refusal

The essential data for the performance of the contractual relationship must be given to the writer, as well as the data necessary to fulfill the obligations established by laws, regulations, community regulations, or by provisions of Authorities legitimated to do so by law and by supervisory bodies and control.

Non-essential data for the performance of the contractual relationship must be qualified and considered supplementary information and their provision, if requested, is optional. Your refusal to provide such data, however, will determine less efficiency of our structure in carrying out relations with third parties.

In the event that sensitive data or the processing of which presents specific risks for the performance of the relationship or for the performance of specific services as well as legal obligations are essential, the provision of such data will be mandatory and since their processing is permitted only with prior written consent of the interested party (pursuant to articles 9 and 10 of the GDPR), you must also consent to their treatment.

 

Processing methods

Pursuant to and for the purposes of art. 12 and following. of the GDPR, we wish to inform you that the personal data you communicated to us will be recorded, processed and stored in our paper and electronic archives, in compliance with the appropriate technical and organizational measures pursuant to art. 32 of the GDPR. The processing of your personal data may consist of any operation or set of operations among those indicated in art. 4, paragraph 1, point 2 of the GDPR.

The processing of personal data will take place through the use of tools and procedures suitable for guaranteeing their security and confidentiality and may be carried out, directly and/or through delegated third parties, either manually using paper supports, or with the aid of IT means or electronic tools. For the purpose of correct management of the relationship and fulfillment of legal obligations, the data may be entered in the internal documentation of the Data Controller and, if necessary, also in the records and registers required by law.

 

Activities that may be outsourced

Transfer of personal data abroad – The data you provide will be processed only in Italy. If, during the contractual relationship, your data is processed in a state that does not belong to the EU, the rights attributed to you by the Community legislation will be guaranteed and you will be promptly notified.

 

Purpose of the processing for which the personal data are intended

The main purpose of the processing of your personal data that the writer intends to carry out is to allow a regular establishment and/or evolution, as well as a correct administration of the relationship specified in the introduction.

In particular, the purposes of the processing are as follows:

• Fulfillment of tax or accounting obligations;

• Customer management (customer administration; administration of contracts, orders, shipments and invoices; creditworthiness and solvency control);

• Management of litigation (breach of contract; warnings; transactions; debt collection; arbitration; legal disputes);

• Internal control services (of safety, productivity, quality of services, integrity of assets);

• Activities related to the request for contact with our company, made using the form provided on the institutional website;

• Management of commercial activities Marketing (analysis and market surveys);

• promotional activities;

• Measurement of the degree of customer satisfaction.

Personal data will be processed for the fulfillment of legal obligations, as well as to fulfill administrative, insurance and tax obligations established by current legislation and also to satisfy accounting and commercial purposes, or even to be able to regularly fulfill contractual and legal obligations arising from the legal relationship existing with the interested party.

Furthermore, the data provided may possibly also be used to contact the interested party in the context of market research regarding products or services or in the context of commercial offers or campaigns.

In any case, the interested party can freely choose not to give his consent for these purposes and also indicate the ways in which to be contacted or with which to receive commercial information.

Your data may be communicated by the writer:

• to subjects who can access the data by virtue of the law, regulation or community legislation, within the limits set by these rules;

• to subjects who need to access your data for purposes auxiliary to the relationship between you and us, within the limits strictly necessary to carry out the auxiliary tasks (credit institutions and shippers are mentioned as an indication);

• to our consultants and/or professionals, within the limits necessary to carry out their duties at our or their organization, subject to our appointment as manager who imposes the duty of confidentiality and security.

• In any case, your data will not be communicated except to operators for the execution of acts concerning the fulfillment of relationships that may intervene with the interested parties to whom the data refers.

 

Spread

The undersigned will not disseminate your data indiscriminately, or in other words, will not disclose it to indeterminate subjects, even by making it available or consulting it.

 

Trust and confidentiality

The undersigned considers the trust shown by the interested parties who have consented to the processing of their personal data to be precious and therefore undertakes not to sell, rent or lease personal information to others.

 

Rights referred to in articles 15 et seq. GDPR

Pursuant to art. 15 GDPR You have the right to obtain confirmation of the existence or not of a processing of personal data concerning you, even if not yet registered. The exercise of the rights is subordinated to the verification of the identity of the interested party, by delivery of the identity document, which will not be kept by the writer, but only consulted for the purpose of verifying the legitimacy of the request.

You have the right to access your personal data and the following information:

a) the purposes of the processing;

b) the categories of personal data being processed;

c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients from third countries or international organizations;

d) when possible, the envisaged retention period for personal data or, if this is not possible, the criteria used to determine this period;

e) if the data are not collected from the interested party, all the information available on their origin;

f) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and envisaged consequences of such processing for the interested party

If the data is transferred to a third country or to an international organisation, you have the right to be informed on the existence of adequate guarantees pursuant to art. 46 of the GDPR.

You have the right to ask the data controller to rectify or cancel, even partially, personal data or limit the processing of personal data concerning you or to object, in whole or in part, to their treatment.

 

To exercise these rights, you can contact our Structure "Owner of the processing of personal data" at the addressstudio@mirkopignotti.com. The Data Controller will reply to you within 30 days of receiving your formal request.

We remind you that in the event of a violation of your personal data, you can lodge a complaint with the competent authority: Guarantor for the protection of personal data”.

 

Data controller

The data controller is the writer: Architect Mirko Pignotti, with registered office in via Posillipo, 4 – 63074 San Benedetto del Tronto (AP); certified email: mirko.pignotti@archiworldpec.it; e-mail:studio@mirkopignotti.com

Responsible for the treatment

The role of Data Processors is held by external companies with which a contractual relationship has been established and which, in order to fulfill these agreements, need to receive your personal data.

To find out who is in charge of the treatment, if they are appointed, each interested party can send a letter of request to the owner of the treatment of personal data, at the above address.

It is intended to specify that the Data Processors do not deal with processing requests to exercise the rights of the interested parties pursuant to articles 15 et seq. of the GDPR. This activity is carried out exclusively by the undersigned as Data Controller.

 

Representative established in the territory of the State

We inform you that, our organization pursuant to art. 4 paragraph 1 point 17 GDPR as no circumstance envisaged by the aforementioned Regulation applies, which requires this appointment, has not appointed any Representative established in the territory of the State for the purposes of applying the regulations on the processing of personal data.

 

Treatments without the need for the consent of the interested party

It should be noted that the writer, even in the absence of your consent, will be entitled to process your personal data if this is necessary to:

• fulfill an obligation established by law, by a regulation or by community legislation;

• perform obligations deriving from a contract of which you are a part or to fulfil, before the conclusion of the contract, your specific requests.

 

Your express coFurthermore, consent is not required when the treatment:

a) concerns data from public registers, lists, deeds or documents that can be known by anyone, without prejudice to the limits and methods that the laws, regulations or community legislation establish for the knowledge and publicity of data or data relating to the performance of activities economic, treated in compliance with current legislation on corporate and industrial secrecy;

b) it is necessary to safeguard the life or physical integrity of a third party (in this case, the owner is required to inform the interested party of the processing of personal data through the information notice, even after the processing itself, but without delay. In this hypothesis, therefore, the consent is expressed following the presentation of the information);

c) with the exclusion of diffusion, it becomes necessary for the purpose of carrying out the defensive investigations pursuant to the law of 7 December 2000, n. 397, or, in any case, to assert or defend a right in court, provided that the data are processed exclusively for these purposes and for the period strictly necessary for their pursuit, in compliance with current legislation on corporate and industrial secrecy;

d) with the exclusion of dissemination, it is necessary, in the cases identified by the Guarantor on the basis of the principles established by law, to pursue a legitimate interest of the owner or of a third party recipient of the data, also with reference to the activity of banking groups and companies subsidiaries or affiliates, if the fundamental rights and freedoms, the dignity or a legitimate interest of the interested party do not prevail.

 

 

The OWNER of the processing of personal data

Architect Mirko Pignotti