Notice regarding article 13 of Legislative decree no. 196/2003

Under Legislative decree no. 196/2003 (code on the handling of personal data), your data will be handled in compliance with fundamental rights and freedoms, without impinging on your privacy or dignity, by adopting principles inspired by correctness, legality and transparency, and will be used solely for the purposes for which the data was obtained.
Pursuant to article 13 of Legislative decree no. 196/2003, we wish to inform you of the following:

1. Aims of data handling

Data handling is used for purposes of taxation, administration, revenue and/or associated topics, and for the preparation, conclusion, management and execution of commercial contracts, and dealings with credit institutions and financing offices.
Data may be used for the promotion and marketing of products or services, as well as for surveys about the quality of received services.

2. Means of data handling

Data is processed using operations or a series of operations in compliance with article 4, paragraph 1, section a), of Legislative decree no. 196/2003: collection, recording and organisation, storage, consultation, processing, changing, extraction, comparison, use, communication, and cancellation.
Data is also handled using electronic, computerised tools and is stored on both computer and paper supports and on any other support suitable for respecting the minimum security rules under the technical instructions for security measures, Annex B of Legislative decree no. 196/2003.
The data is processed directly by the owner’s organisation and by external parties authorised by the owner or by the person in charge, except in the case of the communication or distribution of data requested, under law, by police forces, judicial authorities, information and security organisations or by other public organisations for the purpose of defence or State security, or for the prevention, investigation and repression of crime.

3. Provision of data

Notwithstanding the personal autonomy of the person concerned, the provision of personal data may be mandatory, based on law, regulations or community standards; strictly necessary for completing new agreements or for managing or executing existing agreements; or optional for the purpose of conducting promotional and marketing activities for products and services, as well as for surveys about satisfaction with the quality of received services.

4. Refusal to provide data

Should the person concerned refuse to provide his/her personal data:
it may be impossible to conclude or implement relative contracts, in cases where the refusal involves mandatory or strictly necessary data.
it may not have any influence on existing legal relationships, but may make it impossible to conduct promotional and marketing activities for products and services, and surveys about satisfaction with the quality of services received, if the refusal involves optional data.

5.   Data disclosure

Data may be disclosed to public or private organisations for which data disclosure is mandatory or required, according to their respective, specific interests, for the purposes of correctly fulfilling administrative or contractual requirements or obligations required by law, by regulation or by community standards.

6.   Data distribution

Personal data is not subject to distribution.

7.   Rights of the person concerned

The person concerned may, at any time, exercise his rights with regard to the data owner, under article 7 of Legislative decree no. 196/2003, which for your convenience we have reproduced in full.
Article 7 of Legislative decree no. 196/2003 – Right of access to personal data and other rights
1. The person concerned has the right to obtain confirmation of the existence of personal data and information regarding him/her, even if not recorded yet, and their disclosure in an intelligible form.

2. The person concerned is entitled to be informed of:
a) the origin of personal data and information;
b) data handling purposes and methods;
c) the logic followed in the event of data handling using electronic tools;
d) details for identification of the owner, the persons in charge and the representative appointed under article 5, paragraph 2;
e) the people or groups of people to whom personal data and information can be disclosed or who may come to know them in their capacity as representative appointed in the State territory or persons in charge.

3. The person concerned has the right to obtain:
a) updating, correction or, where appropriate, inclusion of data;
b) cancellation, conversion into anonymous data or blocking of data handled in violation of the law, including data and information that need not be kept in relation to the purposes for which the data was collected or subsequently handled;
c) a certificate stating that the operations under sub-paragraphs a) and b) – including their content – have been communicated to those to whom data and information were provided or disclosed, except in the case where this proves to be impossible or entails the use of means which are overtly incommensurate with the right which is protected.

4. The person concerned has the right to wholly or partially refuse:
a) treatment of personal data and information regarding him/her, for legitimate reasons, even though the data is relevant to the aim of collection;
b) treatment of personal data regarding him/her for the purposes of sending advertising material or direct selling or for the conduct of market research studies or commercial communications.

 8.  Owner and person in charge of data handling

      The owner of the data handled is:

in the person of its legal representative.