INFORMATION PURSUANT TO ARTS. 12 AND 13 OF EU REGULATION N. 679/2016 AND CONSENT TO THE PROCESSING OF PERSONAL DATA
Preamble
In line with EU Regulation no. 679/2016 (hereinafter also GDPR), which establishes rules relating to the protection of individuals with regard to the processing of personal data, as well as rules relating to the free circulation of the same, LAGOR S.R.L. has modified its Privacy Policy to offer its users the possibility of being informed in a clear and transparent way pursuant to articles 12, 13 and 14.
The rights of the interested party are also listed, provided for by articles 15 to 22 of the GDPR.
Information pursuant to art. 13, par. 1
A) Data Controller and contacts
The data controller is LAGOR S.R.L., with headquarters located in Via Pio La Torre, 48 - 14030 Cerro Tanaro (Asti) – VAT number 00254520067, – Tel: +39 0141 403711
The Data Controller informs you that your personal data will be processed:
– pursuant to articles 12 and 13 of EU Regulation no. 679/2016 (General Data Protection Regulation, hereinafter referred to as "GDPR"), by specifically authorized subjects, limited to the purposes and with the methods that will be specified below with reference to the functions of the web portal www.lagor.com </ div>
We also inform you that the Data Controller makes use of data processors to carry out its activities in compliance with the provisions of the GDPR 679/2016.
The list of data processors can be requested from the data controller with a specific request also sent by email.
B) Object, purpose of the processing
The Data Controller informs you that when you use our services you accept that your personal data will be processed.
Personal data means any data that can be related to your person such as:
Name and surname
Email
Your data, as described above, will be processed in the ways and forms prescribed by the GDPR. The processing of the data provided in the appropriate sections relating to the contact between the owner and the end user will be carried out for the following purposes:
follow up your requests for information or reservations.
Refer to the appropriate Cookie Policy for further information.
C) Legal basis of the processing
Apart from what is specified in the Cookie Policy for navigation data, the communication by you to the Data Controller of the personal data better specified above, has as a basis for the lawfulness of the treatment: the legitimate interest of the data controller provided that it is not in contrast with the rights and freedoms of the interested party, the fulfillment of the contractual and/or pre-contractual obligations assumed with you, your consent to the processing of data for marketing purposes. The treatment carried out on the personal data of users is based on the art. 6 of EU Regulation 679/2016 letters: A, B, C, F.
In particular, the provision of data for the purposes referred to in point a) is mandatory, failure to provide it will make it impossible to use the services offered by the Data Controller. For the purposes referred to in points b) and c), the conferment is optional, the treatment can be carried out only with your consent. The consent may be revoked at any time by the interested party, without this making the previously carried out processing unlawful.
D) recipients and categories of recipients of the data collected
In relation to the purposes indicated above, the data could be communicated to the following subjects and/or the categories of subjects indicated below, or they could be communicated to companies and/or individuals, who provide services, including external ones, on behalf of the Data Controller. Among these, for greater clarity, by way of example but not limited to: subjects - internal or external to the company - who provide IT and telematic services for the management of the information system used by the Data Controller and of the telecommunications networks, subjects who in the eventuality, the Data Controller reserves the right to appoint data processors; financial administrations and other companies or public bodies in fulfillment of regulatory obligations; competent authorities and/or Supervisory Bodies for the fulfillment of legal obligations; companies connected, controlled or contractually linked to the Owner.
Information pursuant to art. 13, par. 2
A) data retention period
We point out that, pursuant to art. 5 of GDPR, in compliance with the principles of lawfulness, purpose limitation and data retention and minimization, your data will be kept according to the law and for the time necessary to carry out the activities referred to in the aforementioned purposes in compliance with the terms of the law. For the period corresponding to fiscal, accounting, administrative needs and to document our activity and also to respond to your data recovery needs as well as for the time necessary to ensure the defense in court.
B) rights of the interested party
– Right of Access and Rectification
Pursuant to art. 15 of the GDPR, in your capacity as an interested party you have the right to obtain from the Data Controller confirmation of the existence or otherwise of a processing of personal data concerning you, to obtain access to them and to all the information referred to in the same art . 15, paragraph 1, letters from (a) to (h), by issuing a copy of the data being processed in a structured format, commonly used, readable by an automatic and interoperable device.
Pursuant to art. 16 of the GDPR, in your capacity as an interested party you have the right to obtain from the Data Controller the rectification and/or integration of the data being processed if they are out of date and/or inaccurate and/or incomplete.
– Right of Cancellation and Right of Limitation
Pursuant to art. 17 of the GDPR, in your capacity as an interested party you have the right to obtain, without unjustified delay, from the Data Controller, exclusively in the cases referred to in art. 17, paragraph 1, letters from (a) to (f), of the GDPR, the cancellation of data concerning you - with the exception of the cases specifically provided for by art. 17 paragraph 3.
Pursuant to art. 18 paragraph 1, letters from (a) to (d), of the GDPR, in your capacity as an interested party you have the right to request and obtain from the Data Controller, the limitation of the processing of your personal data, or that such data are not subjected to further treatments and can no longer be modified. The Data Controller ensures that the limitation of the treatment is implemented through adequate technical devices that guarantee its inaccessibility and unchangeability.
– Right to Portability
Pursuant to art. 20 of the GDPR, in your capacity as an interested party you have the right to receive from the Data Controller the personal data concerning you, the processing of which is carried out by automated means, in a structured format, commonly used and readable by an automatic device, and you also have the right to transmit such data to another data controller, or to obtain from the Data Controller, where technically feasible, the direct transmission of such data to another specifically identified data controller.
– Right of Opposition
Pursuant to art. 21 of the GDPR, in your capacity as an interested party you have the right to object at any time to the processing of personal data concerning you, for reasons connected to your particular situation, in cases where the processing of your data is necessary (1) for the execution of a task of public interest and/or connected to the exercise of public powers vested in the Data Controller; (2) for the pursuit of a legitimate interest of the Data Controller or of a third party; (3) for the profiling activity, if performed by the Data Controller, on the basis of the previous points. You also have the right to object to the processing of your personal data for reasons related to your particular situation if they are processed for scientific or historical research purposes or for statistical purposes pursuant to article 89, paragraph 1 of the GDPR, except in the case where the processing is necessary for the performance of a task in the public interest.
how to exercise the above rights
You may exercise the rights listed above by sending a request to the registered office address or by contacting the owner at the number indicated above;
We will confirm receipt of your request and provide you with the information relating to the communication received within 1 (one) month of receipt of the request. If necessary, and taking into account the complexity and number of requests, this term may be extended by 2 (two) months, subject to reasoned communication to be sent within 1 (one) month of receipt of the request.
Any rectification, cancellation, limitation of opposition will be communicated to all recipients, as identified by art. 4, paragraph 1, no. 9 of the GDPR, to which such data have been transmitted, unless this proves impossible and/or involves a disproportionate effort.
Following the sending of your request for rectification, cancellation, limitation of opposition, such as If the Data Controller has reasonable doubts about your identity, he will request further information to confirm it. These communications will be sent by email.
In the event that the Data Controller does not comply with your request within the term of 1 (one) month from receipt of the request, the latter will inform you of the reasons for the non-compliance, informing you right now of your right to lodge a complaint to the Supervisory Authority (Guarantor for the protection of personal data), as specified pursuant to art. 13, paragraph 2, letter (d) and governed by articles 77 et seq. of the GDPR.
C) right to complain
Pursuant to art. 77 of the GDPR, in your capacity as an interested party you have the right to lodge a complaint with a supervisory authority according to the methods indicated in the article itself.
D) Automated decision making and profiling
The Data Controller informs you that, for the purposes of processing your personal data, it does not make use of automated decision-making processes, or those aimed at making decisions based solely on technological means on the basis of predetermined criteria (i.e. without human involvement). The owner directly carries out profiling activities, i.e. those aimed at using your personal data to analyze or predict aspects concerning professional performance, economic situation, health, personal preferences, interests, reliability, behaviour, location or movements, etc., for more information, please refer to the specific Cookie Policy present on the site.