privacy policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA CUSTOMERS (OR POTENTIAL CUSTOMERS)

By virtue of the principles of fairness, lawfulness, transparency, protection of confidentiality and the rights of the data subject regarding the processing of their data, pursuant to Article 13 of EU Regulation 2016/679, the following information is provided.

1. DATA CONTROLLER

The data controller is AREADERMA S.R.L., in the person of its legal representative pro tempore, with registered office in Via per Trento, 16 – Tressilla 38042 Baselga di Pinè (TN). Telephone +39 0461/534883, e-mail: amministrazione@areaderma.it, PEC: areaderma@pec.it.

2. PURPOSE AND LEGAL BASIS OF PROCESSING

The personal data provided may be processed for the following purposes:

  • implementation of the requested service;
  • management of the contractual relationship established and related tasks;
  • administrative-accounting;
  • marketing by sending communications by e-mail (newsletter) and/or by sms with promotional and/or commercial content;
  • conducting market surveys by means of questionnaires;
  • fulfilment of obligations under the law, the relevant regulations, and/or an order of the Authority;
  • exercise of the data controller’s rights (e.g. right of defence in court).

The legal basis for the processing is the implementation of the contract and related fulfilments, Art. 130(4) of Legislative Decree 196/2003, the legitimate interest of the data controller and, where necessary, the consent of the data subject.

3. MODE OF DATA PROCESSING AND DECISION-MAKING OR PROFILING

The processing will also be carried out with the aid of electronic and/or automated tools and, in compliance with the provisions of the relevant legislation in force, all appropriate security measures will be taken to ensure the confidentiality, integrity and accuracy of the data.
The owner does not use any decision-making processes aimed at profiling personal data in any way.

4. RECIPIENTS AND CATEGORIES OF RECIPIENTS OF PERSONAL DATA

The data will be processed by employees and other persons authorised to process the data that the Data Controller uses to carry out its activities and by third parties carrying out outsourcing activities o n behalf of the Data Controller as external data processors.

5. PLACE OF DATA PROCESSING

Personal data will generally be processed within the European Union. Certain applications of the services used by the Controller, however, may involve the transfer of personal data to the United States. The aforementioned processing is legitimised under Article 45 of EU Reg. 2016/679, by virtue of an adequacy decision adopted by the European Commission. Should it become necessary, the Data Controller will be entitled to move the location of its IT archives to other non-European countries, ensuring from the outset that the transfer of non-EU data will only be carried out to States that are able to offer a level of protection adequate to the standards provided for by the regulations in force on the subject, in compliance w i t h Articles 45, 46 and 49 of EU Reg. 2016/679.

6. NATURE OF CONTRIBUTION

The provision of data is optional, however, failure to provide the data required to perform the contract or service requested will m a k e it impossible to implement the Service.

7. SHELF LIFE

The data will be processed for the period necessary to implement the above-mentioned purposes and in accordance with specific regulations for 10 years after the termination of the relationship. With reference t o marketing purposes, contact data will be processed, unless revoked, for a maximum of 3 years after the last relationship with the person concerned.

8. RIGHTS OF THE DATA SUBJECT WITH REGARD TO DATA PROCESSING

Pursuant to Articles 15, 16, 17, 18, 19, 20, 21, and 77 of the EU Regulation, the Data Subject is hereby informed that

  • has the right to request access to, rectification, deletion or restriction of the processing of personal data concerning him or her, or to object to their processing, and the transfer of his or her data to another data controller in the cases provided for;
  • any rectification or cancellation or restriction of processing carried out at the request of the data subject – unless this proves impossible or involves a disproportionate effort – will be communicated by the writer to each of the persons responsible to whom the personal data have been transmitted;
  • has the right to lodge a complaint with the Garante per la protezione dei dati personali, following the procedures and indications published on the Authority’s official website at www.garanteprivacy.it.

The exercise of rights is not subject to any formal constraints and is free of charge. Information updated to 05/10/2023

The data controller.
Morelli Tullio,
legal representative Areaderma S.r.l.