Information on the Processing of Personal Data (former Article 13 of Regulation (EU) 2016/679)

 

This page describes the management methods of the website www.ladysaraservizi.it (hereinafter the Site) with reference to the processing of personal data of users who access the Site.

This is information provided pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data (hereinafter Regulation) to those who interact with the web services of the Site. According to the rules of the Regulation, the processing carried out will be based on the principles of lawfulness, fairness, transparency, purpose and storage limitation, data minimization, accuracy, integrity and confidentiality.

Pursuant to Article 13 of the Regulation, we inform you that:

1. Identity and contact details of the Data Controller

The Data Controller is Lady Sara Servizi S.R.L. a Socio Unico, with registered office at Via delle Ortensie 13 – 00040 Rocca Priora (RM); email: amministrazione@ladysaraservizi.it.

2. Purpose of processing and legal basis

2.a The data are processed for the exchange of information at your request (Regulation art. 6 paragraph 1, letter b) by sending requests for information to the email addresses published on the Site or by filling out the contact form on the Site. The legal basis for processing is the performance of pre-contractual measures taken at the request of the data subject (art. 6 paragraph 1, letter b of the Regulation);

2.b The collected data may also be used for Site security management, for statistics on Site visits, and for the management of any legal disputes and controversies between the parties. The legal basis for processing is the pursuit of the legitimate interest of the data controller (Regulation art. 6 paragraph 1, letter f).

3. Categories of personal data subject to processing

Processing of personal data means any operation or set of operations, carried out with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or any other form of making available, alignment or combination, restriction, erasure or destruction.

In particular, the personal data processed through the Site are the data voluntarily provided by the data subject by filling in the forms present on the site and browsing data.

Browsing data are data that the computer systems and software procedures used for the operation of the Site acquire during their normal operation and whose transmission is implicit in the use of Internet communication protocols. These are pieces of information that are not collected to be associated with identified data subjects, but which by their very nature could, through processing and association with data held by third parties, allow users to be identified. This category of data includes the IP addresses or domain names of the computers used by users connecting to the Site, the time of the request, the method used to submit the request to the web server, the size of the file obtained in response, etc. More information on the acquisition of browsing data is available in the cookie policy.

4. Processing methods

The processing of your data will take place in compliance with the principles of fairness, lawfulness and transparency, will be carried out mainly using electronic and IT tools, and the data may be stored both on computer media and paper media. The processing of data for the aforementioned purpose will take place using both automated and non-automated methods and in compliance with the confidentiality and security rules provided for by current legislation.

5. Recipients or categories of recipients of personal data – Disclosure and dissemination

The Data Controller will not disclose your personal data to unspecified parties in any way, including by making them available or allowing consultation of them.

The Data Controller may communicate your personal data to one or more specified parties, as detailed below:

  • to parties who may access the data by virtue of legal provisions, regulations or EU law, within the limits provided for by such rules;
  • to parties who need to access your data for auxiliary activities related to the performance of the processing purposes described in the section “Purpose of processing and legal basis”, within the strictly necessary limits to carry out such purposes (including, by way of non-exhaustive example: legal consulting firms, IT service providers, payment service providers, etc.).

6. Personal data retention period

The data collected for the above purpose will be retained according to the following methods:

Purpose 2.a: the data are retained for the time strictly necessary to carry out the purpose. In any case, they will be deleted by the end of the calendar year in which 12 months have expired since the last processing performed on them.

Purpose 2.b: they will be retained until the legitimate interest of the data controller has been achieved.

7. Rights of the data subject

The data subject, pursuant to Article 15 of the Regulation, has the right to obtain confirmation as to whether or not personal data concerning him or her are being processed and, if so, has the right to obtain a copy of the data and access to the data and the following information:

  • the purposes of processing;
  • the categories of personal data concerned;
  • the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients in third countries or international organizations;
  • where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
  • all available information as to the source of the data where they are not collected from the data subject;
  • the existence of automated decision-making, including profiling.

The data subject also has the right to:

  • obtain from the data controller the rectification of inaccurate personal data concerning him or her without undue delay (art. 16 of the Regulation);
  • obtain from the data controller the erasure (“right to be forgotten”) of personal data concerning him or her without undue delay (art. 17 of the Regulation);
  • obtain from the data controller restriction of processing (art. 18 of the Regulation);
  • receive, where applicable, in a structured, commonly used and machine-readable format, the personal data concerning him or her (art. 20 of the Regulation);
  • object at any time, on grounds relating to his or her particular situation, to the processing of personal data (art. 21 of the Regulation);
  • withdraw consent at any time without affecting the lawfulness of processing based on consent before its withdrawal (art. 7 of the Regulation);
  • be informed of the existence of appropriate safeguards where personal data are transferred to a third country or an international organization (art. 46 of the Regulation);
  • lodge a complaint with a supervisory authority (art. 77 of the Regulation).

To exercise these rights, you may contact the Data Controller at the contact details indicated in the section “Identity of the Data Controller”.

8. Obligation or optional provision of data

The Site provides visitors with a range of services without the need to request any personal data or information. However, some services require the mandatory provision of data for the exchange of information. Failure to provide such data makes it impossible to establish or continue the relationship, to the extent that such data are necessary for carrying out the exchange of information.

9. Transfer of personal data to third countries

The personal data voluntarily provided by the data subject and processed by the Data Controller are not transferred to international organizations or to companies operating in countries outside the European Union.