Information sheet pursuant to Artt. 13 and 14 Reg. (EU) 2016/679 – GDPR concerning the protection of natural persons with regard to the processing of personal data and the free movement of personal data.
The European Regulation n. 679 of 27 April 2016 on the processing of personal data, which repeals Directive 95/46 / EC, provides for the protection of individuals with regarding to the processing of personal data, and the free movement of the same. Pursuant to articles 13 and 14 of the REG. EU 2016/679, we invite you, therefore, to take note of this Information.
1. Extreme identification of the Data Controller
The Data Controller is the company Tracking4Fun s.r.l., in person of the legal representative pro-tempore, (P.I. IT06816820481), with registered office in – 50141 – Florence, via delle Panche n. 140; pec: firstname.lastname@example.org; e-mail: email@example.com.
2. Purposes of the processing
The processing of personal data (e.g. personal data, contact data …) and sensitive and particular data (e.g. genetic data, biometric data, data concerning health, racial or ethnic origin …), provided is aimed at:
a) execution of the contract;
b) fulfillment of obligations established by laws related to the contractual relationship;
c) ISO certification;
d) after-sales assistance;
e) contract management, for example relationships with agents, representatives, clients and / or contractors;
f) any external professional collaborations for the fulfillment of legal obligations;
g) any external professional collaborations to improve the functionality of the product covered by the contract;
h) management of litigation;
i) protection of contractual rights;
l) internal statistical analysis;
m) marketing activities by sending promotional and advertising material relating to products or services like those in the current commercial relationship;
n) newsletter subscription.
The legal basis of the processing is the performance of a contract to which the data subject is party or the explicit consent of the data subject. If the data subject is a child, it’s supposed that consent to the processing of personal data relating to him or her is given or authorised by the holder of parental responsibility over the child.
3. Methods of processing
Personal data will be processed in paper form, computerized and telematic and inserted in the relevant databases that will be accessible to the persons in charge of data processing. The processing may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary to achieve the aforementioned purposes. All data processing operations are carried out in such a way as to guarantee the integrity, confidentiality and availability of personal data.
4. Data stored period
Personal data will be kept for no longer than is necessary for the purposes for which the personal data are processed. Personal data may be stored for longer periods insofar as the personal data will be processed solely for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes. In accordance with the provisions on the retention of documents for accounting purposes and the general rules relating to the ordinary limitation period for contractual actions, we will no longer have the obligation to retain data relating to the contractual relationship after the 10-year term required by italian law.
5. Recipients of the personal data
In relation to the purposes indicated in point 2, the data may be provided to the following subjects (by way of example):
– research institutes;
– banks for the management of receipts and payments;
– financial administrations or public institutions in fulfillment of regulatory obligations;
– companies and law firms for the protection of contractual rights;
– sports clubs;
– agents, representatives;
– customer and / or contractor in the context of the procurement contract / subcontract (also to perform
the charges deriving from joint liability pursuant to art. 29 of Legislative Decree n. 276/2003).
6. Automated individual decision-making, and profiling
The T4F company uses automated decision-making processes, including profiling.
7. Right of access by the data subject
Pursuant to Article 15, the data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed, and, where that is the case, access to the personal data and the information of processing.
8. Right to rectification
Pursuant to Article 16, the data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, including by means of providing a supplementary statement.
9. Right to erasure (‘right to be forgotten’)
Pursuant to Article 17, the data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without undue delay.
10. Right to restriction of processing
Pursuant to Article 18, the data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:
a) the accuracy of the personal data is contested by the data subject, for a period enabling the controller to verify the accuracy of the personal data;
b) the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;
c) the controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
d) the data subject has objected to processing pursuant to Article 21 pending the verification whether the legitimate grounds of the controller override those of the data subject.
11. Right to lodge a complaint with a supervisory authority
In any case, the data subject is always entitled to lodge a complaint with the competent supervisory authority (Personal Data Protection Authority – available at: www.garanteprivacy.it), pursuant to Article 77, if the data subject considers that the processing of personal data relating to him or her infringes this Regulation.
12. Right to data portability
Pursuant to Article 20, the data subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided.
In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
13. Right to object
Pursuant to Article 21, the data subject shall have the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point e) or f) of Article 6, including profiling based on those provisions.
14. Automated individual decision-making, including profiling
Pursuant to Article 22, the data subject shall have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or similarly significantly affects him or her, unless the decision is necessary for the conclusion or execution of the contract, is authorized by the law of the Union or of the Member State to which the controller is subject, it is based on the consent of the data subject.
15. Right of withdrawal of consent
Pursuant to Article 7, the data subject shall have the right to withdraw his or her consent at any time.
16. Contacts and more
For any requests for information and for the exercise of your rights you can contact the Data Controller at the following addresses:
• Email address: firstname.lastname@example.org
• PEC address: email@example.com
• by mail writing to: Tracking4Fun s.r.l., via delle Panche 140/3, 50141 Firenze (FI)