General Data Protection Regulation (EU) 2016/679

For the purposes of the above Regulation, ‘personal data’ means any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person;
Personal data, whether already held by us or that will be communicated to us, are and will be processed according to the principles of lawfulness, fairness and transparency; collected for specified, explicit and legitimate purposes and further processed in a manner that is not incompatible with those purposes; adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed; accurate and, where necessary, kept up to date; kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest; processed in a manner that ensures appropriate security of the personal data, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage, using appropriate technical or organisational measures.
Eugenio Tocchet, data controller for this company, herewith informs you that personal data will be processed for the following purposes:
– for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
– where processing is necessary for compliance with a legal obligation to which the controller is subject;
– the personal data of the data subject shall be removed as soon as the contract is performed and the relevant invoice is issued;
‘Processing’ means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;
Pursuant to Regulation (EU) 2016/679, the data subject has the following rights:
• art. 12 Transparent information, communication and modalities for the exercise of the rights of the data subject
• art. 13 Information to be provided where personal data are collected from the data subject
• art. 14 Information to be provided where personal data have not been obtained from the data subject
• art. 15 Right of access by the data subject
• art. 16 Right to rectification
• art. 17 Right to erasure (‘right to be forgotten’)
• art. 18 Right to restriction of processing
• art. 19 Notification obligation regarding rectification or erasure of personal data or restrictions of processing
• art. 20 Right to data portability
• art. 21 Right to object and automated individual decision-making