Privacy disclaimer
WP Sas Allestimenti Fieristici Full Service Via Rovereto 17 - 37126 Verona - Italy VAT number 03648650236, informs you, pursuant to art. 13 of EU Reg. 2016/679 (Reg. relating to the protection of personal data, from now on only "GDPR"), regarding the essential elements of the processing carried out and illustrated below.
The categories of personal data processed
We use personal, identifying and non-sensitive data provided by you (such as: name, surname, tax code, tax data, contact details, billing address).
Purposes and legal bases of the processing
The personal data provided by you allows us to carry out all the activities covered by the contract, satisfying your requests, as well as carrying out all the activities related to the fulfillment of our obligations, such as, for example, administrative, fiscal and accounting activities.
Specifically, your personal data is processed for the following purposes and legal bases:
respond to your requests for information/and/or contact.
other activities in compliance with legal obligations/authority orders (such as communication to third parties); the legal basis is identified in the legal obligation (art. 6.1, letter c, GDPR).
We do not carry out processing with automated decision-making processes or profiling.
We inform you that your consent may however be revoked at any time by contacting the Data Controller at the contact details indicated in this information;
Data retention times
Your personal data will be kept for the time strictly necessary to carry out the purposes illustrated above and to fulfill the obligations established by law. In particular, for activities related to the execution of the contract of which you are a party (including the pre-contractual phase), your personal data will be kept for the entire duration of the contractual relationship and, once the relationship is concluded, they will be kept for needs for ascertaining/exercising/defending a right and for archiving, for marketing activities (including direct), your personal data will be kept for a period of 24 months, without prejudice to further storage for the needs of ascertainment/ exercise/defence of a right and archiving, for activities related to the assessment and/or exercise and/or defense of rights, your personal data will be kept for 10 years, as provided for by the ordinary limitation period (art. 2946 cc), subject to further conservation in the event of interruption of the prescription; for activities related to legal retention, your personal data will be retained for 10 years for mandatory archiving purposes pursuant to law (articles 2220 of the Civil Code; 22, paragraphs 2 and 3 of Presidential Decree 29.9.1973, n. 600), unless further conservation in the event of interruption of the prescription; for other activities in compliance with legal obligations/Authority orders, referring to personal data we have for the other purposes indicated in this information, the retention times coincide with those identified from time to time for the aforementioned purposes.
Consent and optional/mandatory nature of provision.
The processing of your personal data, for purposes related to the execution of the contract (including the pre-contractual phase), for purposes related to the assessment and/or exercise and/or defense of rights, for the conservation of accounting records, as well as for other activities in compliance with legal obligations/Authority orders, may be carried out without your consent. The provision of your data is mandatory based on the contractual obligation, legal obligations and/or regulations and also constitutes a necessary requirement for the conclusion of the contract. Failure to provide your personal data for the aforementioned purposes will therefore make it impossible for us to execute contracts and other related obligations, as well as correctly manage mutual commercial relations. The processing of your personal data for direct marketing purposes may be carried out without your consent (always without prejudice to your right to object); the processing of your data for the other marketing purposes described in this information may, however, be carried out subject to your consent. The provision of your data for the aforementioned purposes is optional and does not constitute a necessary requirement for the conclusion of the contract. Failure to provide your personal data for the aforementioned purposes will not, therefore, prevent the execution of contracts and other related obligations, as well as the correct management of mutual commercial relations.
Categories of data recipients
Your personal data may be communicated to third parties, for technical and operational needs strictly connected to the purposes set out above and in particular to the following categories of subjects:
a) entities, professionals, companies or other structures appointed by us for processing related to the fulfillment of administrative, accounting, insurance and management obligations linked to the ordinary performance of our economic activity, also for credit recovery purposes;
b) to public authorities and administrations for purposes related to the fulfillment of legal obligations or to subjects entitled to access them pursuant to provisions of law, regulations, community legislation;
c) banks, financial institutions or other subjects to whom the transfer of the aforementioned data is necessary for the performance of our company's activity in relation to the fulfillment, on our part, of the contractual obligations assumed towards you;
d) suppliers of installation, assistance and maintenance services of IT and telematic systems and systems and of all services functionally connected and necessary for the fulfillment of the services covered by the contract;
e) people authorized by us to process the data who are committed to confidentiality or have an adequate legal obligation of confidentiality (e.g. employees and collaborators).
Transfers abroad
The Data Controller does not transfer personal data outside the European Economic Area. The Owner, however, reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees in compliance with the applicable legislation in force.
Treatment methods
The processing of your personal data will take place both in electronic and paper format.
The processing will, however, be carried out mainly with IT tools and in any case with compliance with the minimum precautionary measures of data security and confidentiality. In particular, technical, IT, organisational, logistical and procedural security measures have been implemented in order to prevent the loss, illicit or irrelevant use of the data and access to the same without authorisation.
Rights of the interested party and complaint to the Guarantor
We inform you that regarding the processing of your personal data you can exercise the following rights:
a) Right to obtain access to your personal data (art. 15 GDPR): you can contact us to find out if your personal data is being processed and the legal information on the processing;
b)Right of rectification (art. 16 GDPR): obtain the correction of your inaccurate personal data or the integration of incomplete ones;
c) Right to cancellation/oblivion (art. 17 GDPR): obtain the cancellation of your personal data, in the cases provided for by law;
d)Right to limit processing (art. 18 GDPR): obtain the submission of your personal data to storage only, with the exclusion of other activities, in the cases provided for by law;
e) Right to portability
f) Right to object (art. 21 GDPR): right to cease further processing of personal data for reasons related to your particular situation, unless our compelling legitimate reasons prevail, in the cases provided for by law;
g) Right to revoke consent (art. 7.3 GDPR): right to revoke consent at any time for cases in which the processing is based on consent.
To exercise the aforementioned rights you can use the Owner's contact details provided in this information.
The exercise of rights is not subject to any formal constraints and is free.
We also inform you of your right to lodge a complaint before the competent Personal Data Protection Authority. We remind you that the complaint, pursuant to art. 77.1 GDPR, can be promoted by the interested party to the Authority of the place where the interested party usually resides, where he works or where the alleged violation occurred.
Right to object for direct marketing activity
We remind you that, at any time, you can object and no longer receive communications (specifying the channel through which you no longer wish to be contacted) sent to you for direct marketing activities via e-mail, fax, text message) and/or traditional (paper mail) to your contact details communicated to us.
To exercise the right of opposition you can use the Data Controller's contact details provided in this information. The exercise of rights is not subject to any formal constraints and is free.
Data controller
The data controller is WP Sas,
Satyagraha onlus contact details:
- email: info@wpverona.it
- telephone:
- paper mail: Via Rovereto 17 - 37126 Verona - Italy
Changes
This information is in force from 25 May 2018. We reserve the right to modify or simply update its content, in part or completely, also due to changes in applicable legislation. We will inform you of these changes as soon as they are introduced.
Date 05/25/2018