Privacy

Privacy Notice pursuant to Art. 13 of Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree No. 196/2003, as amended by Law No. 101/2018

In accordance with the provisions of the new Regulation (EU) 2016/679 (GDPR) on the protection of personal data, the following is communicated. Data processing is based on the principles of correctness, lawfulness, and transparency, thereby protecting the confidentiality and rights of users.

Purpose of Processing

The data provided to europacco.com by OMEST SRL of Stampfer Patrick within the framework of contractual relationships are processed for the purposes of:

a) compliance with civil, tax, and accounting regulations; management of the contractual relationship; fulfillment of contractual obligations; support and information regarding the services you have acquired;

The data referred to in point a) are processed by our employees, team members, and our external consultants, provided they are engaged in the execution of the mandate given to us. We highlight that consent to the processing of data for the specified purposes is mandatory and essential for the execution of the mandate given to us. The company ensures that data processing carried out with or without the aid of electronic or automated means will take place using suitable instruments to ensure their security and confidentiality. It may include - within the limits and conditions set by the Regulation (EU) 2016/679 (GDPR) and Italian Legislative Decree No. 196/2003, as amended by Law No. 101/2018 - one or more of the following data operations: collection, registration, organization, storage, processing, modification, extraction, comparison, use, interconnection, blocking, communication, deletion, destruction.

Rights of Data Subjects

Against the data controller, the rights mentioned in Articles 2-bis to 2-sexiesdecies of Italian Legislative Decree No. 101/2018 can always be exercised, which are fully listed here:

Article 2-bis (Principles applicable to the processing of personal data)

The processing of personal data for the performance of a task carried out in the public interest or in the exercise of official authority must be in accordance with the principles of Article 5 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016.

The processing of personal data for purposes other than those for which the data were collected is only allowed if it is compatible with those purposes, in accordance with the conditions of Article 6 paragraph 4 of Regulation (EU) 2016/679 and the provisions of Italian Legislative Decree No. 196 of 30 June 2003, as amended by this legislative decree.

Article 2-ter (Legal basis for the processing of personal data)

The legal basis for the processing of personal data is constituted by the law or an equivalent regulatory act that specifies the purposes of the processing.

If the processing of personal data is necessary for the execution of a contract to which the data subject is a party or for the implementation of pre-contractual measures taken at the data subject's request, the legal basis for the processing is constituted by the necessity of such execution.

Article 2-quater (Limits to data processing)

The processing of personal data may be restricted by a measure of the Data Protection Authority, within the limits and conditions of Article 23 of Regulation (EU) 2016/679.

Article 2-quinquies (Processing of personal data of minors)

The processing of personal data of minors under fourteen years of age is lawful if the consent is given or authorized by the holder of parental responsibility.

Article 2-sexies (Processing of genetic, biometric, and health-related data)

The processing of genetic, biometric, and health-related data is permitted in accordance with the protective measures of Article 2-septies.

Article 2-septies (Protective measures for the processing of genetic, biometric, and health-related data)

The protective measures of Article 2-sexies are adopted by the Data Protection Authority, after consulting the Ministry of Health, and are aimed at ensuring the protection of the rights, fundamental freedoms, and legitimate interests of the data subject.

Article 2-octies (Processing of data relating to criminal convictions and offenses)

The processing of data relating to criminal convictions and offenses is only permitted if authorized by a legal provision or, in the cases provided by law, by a regulation.

Article 2-decies (Rights of the data subject)

Against the data controller, the data subject may exercise the rights provided for in Articles 15 to 22 of Regulation (EU) 2016/679.

Article 2-undecies (Right of access)

The data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, access to the personal data and the information provided for in Article 15 of Regulation (EU) 2016/679.

Article 2-duodecies (Right to erasure)

The data subject has the right to obtain from the data controller the erasure of personal data concerning him or her without undue delay, where the grounds provided for in Article 17 of Regulation (EU) 2016/679 apply.

Article 2-terdecies (Right to restriction of processing)

The data subject has the right to obtain from the data controller the restriction of processing in the cases provided for in Article 18 of Regulation (EU) 2016/679.

Article 2-quaterdecies (Right to data portability)

The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a data controller, in a structured, commonly used and machine-readable format, and has the right to transmit those data to another data controller, where the conditions provided for in Article 20 of Regulation (EU) 2016/679 apply.

Article 2-quinquiesdecies (Right to object)

The data subject has the right to object, on grounds relating to his or her particular situation, at any time to the processing of personal data concerning him or her, where the grounds provided for in Article 21 of Regulation (EU) 2016/679 apply.

Article 2-sexiesdecies (Right not to be subject to automated decision-making)

The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, where the grounds provided for in Article 22 of Regulation (EU) 2016/679 apply.

Data Controller

The data controller is europacco.com by OMEST SRL of Stampfer Patrick, VAT ID no. and Tax ID IT02495790210, who will use the data for the above-mentioned purposes.