In compliance with the provisions of EU Reg. 2016/679 (European Regulation on the protection of personal data) please find here all relevant information on the processing of the personal data provided while browsing this web site. This policy is not applicable to other websites linked to the Data Controller’s domain and the Data Controller waives all and any responsibility for third-party internet sites. This policy is drafted in compliance with art. 13 of EU Reg. 2016/679 (European Regulation on the protection of personal data)
Personal data: any information relating to a natural person (‘data subject’), with particular regard to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person - see art. 4 par. 1 no. 1 GDPR.
Personal data processing means: “any operation or set of operations which is performed with regard to personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”.
The data subject is: “an identified or identifiable natural person”.
The Data Controller pursuant to articles 4 and 24 of EU Reg. 2016/679 is Casati Flock Srl, Via Cesare Battisti, 8 - 20838 Renate in the person of its pro tempore Legal Representative email firstname.lastname@example.org.
Personal data shall be processed lawfully, in compliance with the provisions of art. 6 EU Reg. 2016/679, for the following purposes:
a) browsing this internet site –.( Art 6 lett f Activities strictly necessary for the better functioning of the web site and for the web surfing on our platform)
b) contact request by contact form or email (art 6 lett b)
Personal data will be communicated to recipients, who will process the data as processors (art. 28 of EU Reg. 2016/679) or as natural persons acting under the authority of the Data Controller and Data Processor (art. 29 of EU Reg. 2016/679), for the purposes listed above in paragraph 2.
Subjects belonging to the abovementioned categories shall become the Data Processors, or shall operate in a completely autonomous way, as Data Controllers in their own right. The list of designated Data Processors is constantly updated and is available at the company main offices.
No transfer of personal data abroad to European Union or non-European Union Countries shall occur. Should the Data Controller transfer data outside the European Union, he shall do so only with prior notice to the data subject in compliance with articles 44 and ff of EU Regulation 2016/679 “General principle for transfers”.
Data shall be processed automatically and/or manually, in a manner and with tools that ensure maximum security and confidentiality, by specifically appointed subjects.
In compliance with the provisions of art. 5 par. 1 lett. e) of EU Reg. 2016/679, the collected personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed.
- contact requests (max. 1 year);
Criteria of storage period can be requested to the Controller.
With the exception of the browsing data, the user is free to decide whether to provide any personal data. Provision of personal data for purpose b) is discretionary but any failure to provide data shall entail the impossibility to obtain satisfaction of the user’s requests and enjoy the services offered by the data controller.
You shall be able to exercise your rights under articles 15, 16, 17, 18, 20, 21 and 22 of EU Regulation 2016/679 by writing to the Data Controller at the following address: email@example.com. You shall have the right to obtain, at any moment, from the controller, access to your personal data, and their rectification or erasure, as well as the restriction of their processing. Moreover, you have the right to object at any time to the processing of your data (including automated processing, such as, for instance, profiling art 21) and to receive the personal data concerning you. Without prejudice for any other administrative and jurisdictional recourse, if you believe that the processing of your personal data violates the provisions of EU Reg. 2016/679, you have the right, pursuant to art. 15 letter f) of said EU Reg. 2016/679, to lodge a complaint with the Data Protection Authority and, pursuant to art. 6 paragraph 1 letter a) and to art. 9 paragraph 2 letter a), to revoke your consent to the processing at any time. In case of a request for data portability, the Data Controller shall provide your personal data to you in a structured, commonly used and machine-readable format, without prejudice for the provisions of paragraphs 3 and 4 of art. 20 of EU Reg. 2016/679.