DATA CONTROLLER
CITISLAB S.R.L.
Via Cefalonia, 55 – 25124 Brescia (BS)
Phone: 3759421229
Mail: info@citislab.it
Purposes of the processing:
Your personal data, freely communicated and acquired as a result of the activity carried out by the owner, will be processed lawfully and fairly for the following purposes:
⋅ contractual;
⋅ accounting and tax;
⋅ informational, commercial and marketing.
The data processed (which may be both common and identifying in nature) are up-to-date, relevant, complete and not excessive in relation to the purposes listed above for which they are collected and subsequently processed.
Method of processing:
The data will be processed, in compliance with the necessary security and confidentiality, through the following methods: collection of data from the data subject, collected and recorded for specific, explicit and legitimate purposes and used in further processing operations in terms compatible with these purposes, processing carried out with the help of manual, electronic tools.
Legal basis for processing:
The legal basis for the processing of your personal data is based on the performance of contractual functions for accounting, tax, information and commercial purposes.
Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in the processing of data is given by having to respect and honor the contractual obligations entered into between the parties and develop its social purposes. The lawfulness of the processing is based on the manifestly expressed consent of the data subject, documented in written or manifest form.
Compulsory or optional nature of data provision and consequences of refusal to respond
The nature of your data provision is compulsory in order for the Data Controller to provide the contractual services requested for contractual, accounting and tax purposes. In case of refusal, the Controller will not be able to fulfill the contractual obligations.
The nature of provision for informational, commercial and marketing purposes is optional.
Disclosure of data to third parties
Your personal data will be processed by the Data Controller, by any Data Processors appointed by him/her and by any strictly authorized data processors. Your data may be communicated as a result of inspections or audits (if requested), to all inspection bodies in charge of audits and controls inherent to the regularity of legal compliance.
Your data may also be communicated to external professional companies/studies providing assistance and labor consulting or to the data controller’s collaborators in accounting, administrative, fiscal, tax and financial matters, to public administrations for the performance of institutional functions within the limits established by law or regulations. Your personal data are not subject to dissemination.
Retention Times
The Owner will process personal data for as long as necessary to fulfill contractual, accounting, and tax purposes.
Your personal identifying information will be processed until you revoke it.
Existence of an automated decision-making process
There is no automated decision-making process.
Security
The Data Controller has taken appropriate security measures to protect your data against the risk of loss, misuse or alteration.
Intention of the Data Controller Personal Data
The Data Controller will not transfer your personal data to a third country or international organization.
Rights of the data subject:
The data subject has the right to:
1) obtain confirmation of the existence or non-existence of personal data concerning him/her, even if not
yet registered, and their communication in an intelligible form;
2) obtain indication of:
a) the origin of the personal data;
b) the purposes and methods of processing;
c) the logic applied in case of processing carried out with the aid of
electronic instruments;
d) the identification details of the data controller, the data processor and the
representative designated under Art. 5, para. 2, Privacy Code and art. 3, para.
1, GDPR;
e) of the subjects or categories of subjects to whom the personal data may be
communicated or who may become aware of it in their capacity as designated representative
in the territory of the State, managers or appointees;
3) obtain:
a) the updating, rectification, or, when interested, the integration of data;
b) the cancellation, transformation into anonymous form or blocking of data processed in
violation of the law, including those that do not need to be kept in relation
to the purposes for which the data were collected or subsequently processed;
c) certification to the effect that the operations as per letters a) and b) have been brought to the attention,
also as regards their content, of those to whom the data have been
communicated or disseminated, except where this proves impossible or
entails the use of means manifestly disproportionate to the right
protected;
4) object in whole or in part:
a) on legitimate grounds to the processing of personal data concerning him/her, even if
relevant to the purpose of collection;
b) to the processing of personal data concerning him/her for the purpose of sending advertising
material or direct sales or for carrying out market research or
commercial communication.
In particular, the data subject may at any time request from the Data Controller access to and rectification or erasure of personal data or restriction of processing concerning him or her or object to its processing, as well as the right to data portability. The data subject has the right to revoke consent at any time without affecting the lawfulness of the processing based on the consent given before revocation and has the right to lodge a complaint with a supervisory authority.
Ways of exercising rights
The data subject may, at any time, exercise the rights reserved to him or her, enshrined in Article 15 of EU Regulation 2016/679 – Right of access to personal data.
The exercise of rights may be exercised by writing to the email address: info@cisitislab.it
The full text of EU Regulation 2016/679 is available at www.garanteprivacy.it.