Privacy Policy

INFORMATION ON THE PROCESSING OF PERSONAL DATA PURSUANT TO ARTICLES 12 AND 13 OF EU REGULATION NO. 2016/679

Preamble

EU Regulation no. 2016/679 (hereinafter also GDPR) and Legislative Decree 196/2003 and subsequent amendments (Privacy Code), establish rules relating to the protection of natural persons regarding the processing of personal data, as well as rules relating to the free movement of the same. To protect the fundamental rights and freedoms of natural persons, the legislation on privacy imposes on data controllers the obligation to provide interested parties with information regarding the processing of personal data collected online and offline through various channels.

*****
1) Data Controller

The data controller is ITSME SRLS, with registered office located in Via Roero n. 43, 14100 Asti (AT), Italy, tax code Fisc. and VAT number:
01746990058.

2) Personal data processed

The Data Controller informs you that, for the purposes of this information, personal data means any information concerning you, suitable to identify you directly and/or indirectly, such as:

  • Personal data: name, surname, date of birth, tax code;

  • Contact details: address, telephone number, email;

  • Data on the use of the website www.itsmeinternational.com, including information collected via cookies, (the information for which can be found in the Cookie Policy section).

The Data Controller will not process special data. If necessary, the Data Controller will process them in compliance with current legislation.

Your data will be collected through the request for information sent to the contacts of the Data Controller.

3) Purpose of processing and legal basis

Your data, as described above, will be processed by the Data Controller for the following purposes:
a) to follow up on the specific requests you have made to the Data Controller via the Website;
b) for informative communications relating to the services of the Data Controller, following your request for information;
c) to execute contractual agreements;
d) to comply with current administrative, accounting and tax obligations.

4) Recipients of the data collected.

Your personal data will be processed by the Data Controller for the purposes described above, through subjects who have access to your data to fulfill their work duties. These subjects have been specifically authorized with a letter of assignment.

In carrying out its activities, the Data Controller uses external subjects and/or categories of subjects, who process the data as independent data controllers or data processors (in the latter case, regularly appointed by the Data Controller).

In no case will your data be transferred to third parties. The list of data controllers can be requested from the data controller in the manner provided for in the following point 7.

5) Transfer of data to third countries.

The Data Controller, in processing the data collected for the purposes described above, does not make transfers to Third Countries.

6) Data retention period.

We inform you that, pursuant to art. 5 of the GDPR, in compliance with the principles of lawfulness, limitation of purposes and retention and data minimization, the data collected for the purposes referred to in points a), b), c) and d), will be processed according to the law and for the time necessary to carry out the activities referred to in the purposes indicated above, and subsequently stored for the necessary time imposed by legal obligations.

7) Rights of the interested party.

L’interessato, in riferimento al trattamento dei propri dati, può esercitare nei confronti del Titolare del Trattamento i seguenti diritti:

  • Right of Access and Rectification
    Pursuant to art. 15 of the GDPR, in your capacity as Data Subject, you have the right to obtain from the Data Controller confirmation of the existence or otherwise of processing of personal data concerning you, to obtain access to them and to all the information referred to in the same art. 15, paragraph 1, letters from (a) to (h), by issuing a copy of the data being processed in a structured, commonly used, machine-readable and interoperable format.
    Pursuant to art. 16 of the GDPR, in your capacity as Data Subject, you have the right to obtain from the Data Controller the rectification and/or integration of the data being processed if they are not updated and/or inaccurate and/or incomplete.

  • Right to erasure and Right to Limtation
    Pursuant to art. 17 of the GDPR, in your capacity as Data Subject, you have the right to obtain, without undue delay, from the Data Controller, exclusively in the cases referred to in art. 17, paragraph 1, letters from (a) to (f), of the GDPR, the deletion of data concerning you – with the exception of the cases specifically provided for in art. 17 paragraph 3.
    Pursuant to art. 18 paragraph 1, letters from (a) to (d), of the GDPR, in your capacity as Data Subject, you have the right to request and obtain from the Data Controller, the limitation of the processing of your personal data, or that such data are not subjected to further processing and can no longer be modified. The Data Controller ensures that the limitation of processing is implemented using appropriate technical devices that guarantee their inaccessibility and unchangeability.

  • Right to Portability
    Pursuant to art. 20 of the GDPR, in your capacity as Data Subject, you have the right to receive from the Data Controller the personal data concerning you, the processing of which is carried out by automated means, in a structured, commonly used and machine-readable format, and you also have the right to transmit such data to another data controller, or to obtain from the Data Controller, where technically feasible, the direct transmission of such data to another specifically identified Data Controller.

  • Right to Object
    Pursuant to art. 21 of the GDPR, in your capacity as Data Subject, you have the right to object at any time to the processing of personal data concerning you, for reasons connected to your particular situation, in cases where the processing of your data is necessary (1) for the performance of a task of public interest and/or connected to the exercise of public authority vested in the Data Controller; (2) for the pursuit of a legitimate interest of the Data Controller or of a third party; (3) for profiling activities, if carried out by the Data Controller, on the basis of the previous points. You also have the right to object to the processing of your personal data for reasons related to your particular situation if they are processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1 of the GDPR, unless the processing is necessary for the performance of a task of public interest.

  • Revocation of consent
    If the data processing is based on the consent of the interested party, he may revoke it at any time. The processing carried out in the period prior to the revocation of the same is to be considered carried out legitimately.

  • Right to complain
    Pursuant to art. 77 GDPR, in your capacity as interested party you have the right to lodge a complaint with a supervisory authority according to the methods indicated in the same article.

The rights listed above by sending a request to the registered office address or by writing to the following PEC address: itsme_srls@pec.it.
We will confirm receipt of your request and provide you with information relating to the communication received within 1 (one) month of receiving the request. If necessary, and taking into account the complexity and number of requests, this period may be extended by 2 (two) months, subject to a reasoned communication to be sent within 1 (one) month of receiving the request.
Any rectification, cancellation, limitation or opposition will be communicated to all recipients, as identified by art. 4, paragraph 1, no. 9 of the GDPR, to whom such data have been transmitted, unless this proves impossible and/or involves a disproportionate effort.
Following the sending of your request for rectification, cancellation, limitation or opposition, if the Data Controller has reasonable doubts about your identity, he will request further information to confirm it. These communications will be sent by email.
In the event that the Data Controller does not comply with your request within 1 (one) month of receiving the request, the latter will inform you of the reasons for non-compliance, informing you from now on of your right to lodge a complaint with the Supervisory Authority (Guarantor for the protection of personal data), as specified pursuant to art. 13, paragraph 2, letter (d) and governed by articles 77 et seq. of the GDPR.

8) Automated decision-making process

The Data Controller informs you that, for the purposes of processing your personal data, it does not use automated decision-making processes, i.e. those aimed at making decisions based solely on technological means according to predetermined criteria (i.e. without human involvement).
Asti, 21/11/2024