Privacy Policy

PRIVACY INFORMATION MODEL pursuant to and for the purposes of art. 13, of EU Regulation 2016/679 relating to the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data and repealing Directive 95/46 / EC

We wish to inform you that the European Regulation n. 679 of 27 April 2016 on the processing of personal data provides for the protection of individuals with regard to the processing of personal data. Pursuant to article 13 of the REG. EU 2016/679, we therefore invite you to take note of the information and to express your consent to the processing of data, by signing and returning the attached form.

1. Identification details of the Data Controller (and any other subjects)
The Data Controller is the company FONIA NAZIONALE.IT SRL VAT number 09542050969 with headquarters in Via Trento, 68 cap 20821 MEDA (MB)

2. Purpose of the processing
The processing of the personal data provided is aimed solely at

• Execution of the contract.
• Fulfillment of legal obligations related to the contractual relationship.
• Contract management.
• Protection of contractual rights;

The legal basis of the processing is the contract, as well as the explicit consent.

3. Processing methods
Personal data will be processed in paper, computerized and telematic form and inserted in the relevant databases which can be accessed by the persons in charge of data processing. The processing may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary for the achievement of the aforementioned purposes.
All data processing operations are implemented in such a way as to ensure the integrity, confidentiality and availability of personal data.

4. Data retention period
The data provided will be kept for the entire duration of the contractual relationship and for the subsequent periods provided for by the law on the conservation of fiscal and administrative data.

5. Scope of communication and dissemination of data
In relation to the purposes indicated in point 2, the data may be disclosed to the following subjects:

• Banks for the management of receipts and payments;
• Companies and law firms for the protection of contractual rights;
• Accounting firms for accounting;
• Third-party suppliers for the activation of services;

6. Rights referred to in Articles 15, 16, 17 18, 20, 21 and 22 of the REG. EU 2016/679
We inform you that, as an interested party, you have, in addition to the right to lodge a complaint with the Supervisory Authority, the rights listed below, which you can assert by making a specific request to the Data Controller and / or to the Data Processor, as indicated in point 1.

Art. 15-Right of access
The interested party has the right to obtain from the data controller confirmation as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and information regarding the processing.

Art. 16 - Right of rectification
The interested party has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing an additional declaration. 3

Art. 17 - Right to cancellation (right to be forgotten)
The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without undue delay and the data controller has the obligation to cancel the personal data without undue delay.

Art. 18 - Right to limit the processing
The interested party has the right to obtain from the data controller the limitation of the processing when one of the following hypotheses occurs:

• The interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
• The processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;
• Although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
• The interested party opposed the processing pursuant to Article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

Art. 20 - Right to data portability
The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller to whom he provided them.
In exercising their rights relating to data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.

Art. 21 - Right to object
The interested party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.

Art. 22 - Right not to be subjected to automated decision-making, including profiling
The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way.