Personal Data Processing Policy
This information is provided pursuant to art. 13 of EU Regulation 679/2016 of ARISOL Srl with headquarters in Via Gladegne, 13 – Cercivento (UD) as Data Controller to those who access the ARISOL Srl website and fill out the “contact” form authorizing the same to the processing of your personal data. The provision of personal data is optional. Refusal to provide the data makes it impossible to process and follow through with the requests received.
Purposes of processing
Personal data provided by users is used only to process and respond to their requests.
The personal data provided by users is legally processed to carry out pre-contractual measures or contractual obligations (Art. 6 (1)(b) of Regulation No. 679/2016), requested by the users themselves (request sent by completing the form).
Personal data provided by users will in no way be disclosed to third parties. It may be communicated to employees and collaborators of the Data Controller who will process it in accordance with the instructions given by the Data Controller administrators.
In case of need, for activities related to the maintenance of the technological part of the site, the personal data provided can be processed by company officers.
Users’ personal data will be processed for the time necessary to fulfill the indicated purposes.
Rights of Data Subjects
Pursuant to Articles 13, (2) and 15 to 21 of the Regulation, we inform you that in relation to the processing of your personal data, you may exercise the following rights:
a) Right to obtain access to personal data and the following information:
- confirmation that your personal data is being processed;
- the purposes of the processing;
- the categories of personal data;
- the Recipients or categories of Recipients to whom the Personal Data has been or will be communicated to;
- if the personal data is not collected from the Data Subject, any available information regarding its source;
- the existence of an automated decision-making process, including profiling;
- a copy of the personal data being processed.
b) Right of rectification and integration of personal data;
c) Right to data deletion (“right to be forgotten”) if one of the following reasons exists:
1. personal data is no longer necessary with respect to the purposes for which they were collected or otherwise processed;
2. the interested party revokes consent to the processing of data and there is no other legal basis for the processing;
3. the interested party opposes the treatment and there is no prevailing legitimate reason to proceed with the treatment;
4. personal data have been unlawfully processed;
5. personal data must be erased to fulfill a legal obligation under Union or Member State law to which the data controller is subject to.
If the Data Controller has made personal data public and is obliged to delete it, the same must inform any other data controllers of the request to delete any link, copy or reproduction of such data.
d) Right to limitation of processing if:
1. the interested party disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
2. the treatment is illegal and the interested party opposes the cancellation of personal data and instead requests that their use be limited;
3. although the data controller no longer needs it for processing purposes, personal data is necessary for the interested party to ascertain, exercise or defend a right in court;
4. the interested party has opposed the treatment, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
e) lodge a complaint with the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority for Italy, on www.garanteprivacy.it.
f) Right to portability of the data subject or the right to receive the personal data concerning him / her provided to a data controller in a structured format, commonly used and readable by an automatic device and possibly transmit them to another data controller, if the treatment is based on consent or on a contract and is carried out by automated means.
Where technically possible, the data subject has the right to obtain direct transmission of the data from one data controller to another.
g) The right to object to the processing of personal data at any time, including profiling, in particular if:
1. the processing takes place on the basis of the legitimate interest of the owner, subject to an explanation of the reasons for the opposition;
2. personal data are processed for direct marketing purposes.
h) The right not to be subjected to a decision based solely on automated processing, including profiling, except where the decision: is necessary for the conclusion or execution of a contract between the data subject and a data controller, is authorized by Union or Member State law to which the controller is subject or based on the explicit consent of the data subject.
i) Right to withdraw consent at any time; the data, if they do not rest on another legal basis (including, compliance with a legal obligation or performance of a contract) must be canceled by the owner. The exercise of the rights is not subject to any formal constraint and is free of charge.
Procedures for the exercise of rights
You can exercise your rights at any time by sending:
- a registered letter with return receipt to ARISOL Srl – Via Gladegne, 13 – Cercivento (UD) Italy;
- an e-mail firstname.lastname@example.org.
The Data Controller is ARISOL Srl. Contact details: Via Gladegne, 13 – Cercivento (UD) Italy – Tel. +39 0433 778035.