The Company Giliola Spattini & C – Società traProfessionisti, via Ducale 1101 – Frazione Saltino 41048 Prignano sulla Secchia (MO) Italia P. IVA 03787680366 (the “Company”), owner of the brand Diagnostic Mindset, in the performance of its services, processes the personal data freely provided by the interested parties pursuant to articles 4, n. 7) and 24 of EU Regulation 2016/679 of 27 April 2016, relating to the protection of individuals with regard to the processing of personal data (“Regulation”), as well as in accordance with current Italian legislation.
Processing of personal data means any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, even if not recorded in a database, such as collection, registration, organization, structuring, storage, processing, selection, blocking, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction.
The Company will therefore proceed, pursuant to articles 13 and 14 of the Regulation and the Italian legislation in force, to the relative processing for the purposes listed below manually and / or with the support of IT or telematic means.
1. PURPOSE AND LEGAL BASIS OF THE PROCESSING
The data are acquired and processed in compliance with the rules established by the Regulation and by the Italian legislation in force and may be processed for the following purposes with the consent of the interested party or to implement the contract or because the law requires it:
- provision of the Service (hereinafter “Primary Purposes”)
- marketing (see point 3.2 below)
- profiling (see point 3.3 below.
- communication/transfer of data to third parties (see points 3.2 and 3.3 below.
2. COMMUNICATION AND DISSEMINATION OF PERSONAL DATA FOR THE PURSUIT OF THE PRIMARY PURPOSES OF THE PROCESSING
The data may be disclosed to third parties when the communication is mandatory by law, including the scope of prevention / repression of any illegal activity.
With reference to Article 13, paragraph 1, letter (e) of the Regulation and to the Italian legislation in force, the data may be communicated, exclusively for the pursuit of the Primary Purposes, to the employees / collaborators / consultants of the Company, as well as to third-party companies whose collaboration the Company collaborates with. makes use of the Primary Purposes for the pursuit of the Primary Purposes, the updated list of which is available at the Company’s headquarters.
The data will not be disclosed to an indeterminate number of subjects.
3. DATA PROCESSING PURPOSES
3.1. Primary Purposes
Any refusal to provide such mandatory data could force the Company to learn them from third parties (where lawfully possible) or result in the failure to perform the Service. Any refusal to provide data for which there is no obligation to provide according to the law, but strictly functional to the execution of the Service, does not entail any consequence in relation to the relationships in progress, except for any impossibility of following up the operations related to such data or the impossibility of performing the Service.
The provision of data to the Company is mandatory only for data for which there is a regulatory obligation in this regard.
3.2. Marketing Purposes
To proceed with the processing for marketing purposes it is mandatory to acquire a specific, separate, express, documented, preventive and completely optional consent.
By providing consent to the processing for marketing purposes, the interested party specifically acknowledges the promotional, commercial, and marketing purposes in the broad sense of the processing (including the consequent management and administrative activities) and expressly authorizes such processing pursuant to Article 6, paragraph 1, letter (a) of the Regulation and in accordance with current Italian legislation.
Where the interested party does not intend to give consent to the processing for marketing purposes, the consequence will be the impossibility for theCompany to proceed with the related treatments. Failure to provide consent to the processing for marketing purposes, will not result in any interference and / or consequence on any other contractual, contractual, or other relationships in place with the user.
The interested party is free to give consent to further communication / transfer
to third parties who in turn want to proceed with the processing for marketing purposes. Where the interested party does not intend to give consent to the communication of his data to third parties, the consequence will be that there will be no communication from the Company and the data will be processed only and exclusively by the Company, where the interested party has given consent to the processing for marketing purposes.
3.3. Profiling purposes
It is possible that for marketing purposes and improvement of services the Company proceeds to the processing of so-called “profiling” data. For these treatments, and for the purpose of complete information, reference is made to the definition referred to in art. 4, paragraph 1, n. (4) of the Regulation: “any form of automated processing of personal data consisting in the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning the professional performance, economic situation, health, personal preferences, interests, reliability, behavior, location or movements of said natural person”.
To proceed with a profiling treatment, it is mandatory to acquire a specific and separate consent.
If the interested party does not intend to give consent to the processing for profiling purposes, the consequence will be the impossibility for theCompany to proceed with the related treatments. The interested party is free to give consent to the processing for marketing purposes and not to provide it for further consent to the processing for profiling purposes and / or communication to third parties who in turn want to proceed with the processing for profiling purposes. Where the interested party does not intend to give consent to the processing for profiling purposes and / or communication to third parties who in turn want to proceed with the processing for profiling purposes, the consequence will be that there will be no profiling by the Company and no communication to third parties and the data collected will be processed only and exclusively by the Company , where the interested party has given consent to the processing for marketing purposes. The data subject to profiling processing and the related authorized profiles will not be disseminated.
3.4. Withdrawal of consent
In any case, even where the interested party has given consent to authorize theCompany to pursue all the purposes mentioned in the points above, he will still be free at any time to revoke it. We inform you specifically and separately, as required by art. 21 of the Regulation, where applicable, that the interested party has the right to object at any time to the processing of personal data concerning him carried out for these purposes and that if the interested party opposes the processing, the personal data can no longer be processed for these purposes.
4. TRANSFER OF PERSONAL DATA TO COUNTRIES OUTSIDE THE EUROPEAN UNION
The data collected and processed are not transferred to companies or other entities outside the EU.
5. DATA RETENTION TIMES
With reference to the personal data being processed, they will be kept in compliance with the principle of proportionality and in any case until the individual purposes of the processing have been pursued.
6. DATA CONTROLLER
The Data Controller is the Company, by this meaning Giliola Spattini & C – Società tra Professionisti, via Ducale 1101 – Frazione Saltino 41048 Prignano sulla Secchia (MO) Italy P. IVA 3787680366.
7. DATA PROTECTION OFFICER (DPO)
It is possible to contact the Company for the exercise of the rights of the interested parties pursuant to articles 15-22 of the Regulation, by sending an email to the address firstname.lastname@example.org.
8. RIGHTS OF THE INTERESTED PARTY
In relation to the processing of data, it is the right of the interested party to exercise the rights referred to in articles 15 to 22 of the European Regulation 2016/679, reproduced in reduced form in Annex A to this statement.
The exercise of rights is not subject to any form constraint and is free of charge.
technical cookies: these are those used for the sole purpose of transmitting a communication over an electronic communications network, as they are strictly necessary to provide the service. They are not used for purposes other than indicated and are normally installed directly by the owner or operator of the website. They are divided into navigation cookies and session cookies, which guarantee navigation and use of the Site (allowing, for example, the authentication of restricted areas or the purchase); analytical cookies, similar to technical cookies when used directly by the Site administrator to collect aggregate information on the number of users and how they visit the Site; functionality cookies, which allow users to navigate the Site according to selected criteria (for example, language, products selected for purchase) to optimize the user’s browsing experience. For the installation of these cookies no consent is required from users;
profiling cookies: they are used to create profiles relating to users and to send advertising messages in line with the preferences expressed by the same party, in the context of surfing the net. The Site, directly or through third parties, may collect this type of cookie;
third-party cookies: these cookies allow the user to create an anonymous user profile based on their browsing experience on this and all other sites. In this way, the user can receive targeted advertising on their interests instead of generic advertising. These cookies are not managed by the Company.
Please note: with the first access and navigation of the Site, the user consents to the collection of cookies, as specified in this notice.
It is still possible to access the Site without cookies, although in this case some parts of the Site may not work as intended or not work at all. Most browsers automatically accept cookies. The user can then change the browser settings so that cookies are deleted or not saved on the computer or mobile device without their explicit consent. The automatic registration of cookies can be avoided by selecting the “do not accept cookies” option among those proposed by the Site or by managing the browser settings. Since each browser has slightly different functionality, the user must check the “Help” menu of the browser to check how to correctly change the cookie settings.