Information on the processing of personal data
Dear Sir / Madam,We wish to inform you that the EU Regulation 2016/679 (hereinafter also “GDPR”) provides for the protection of persons and other subjects regarding the processing of personal data. The purpose of this document is therefore to provide you, in a simple and intuitive manner, with all the useful and necessary information to enable you to provide your Personal Data in an informed and informed manner and, where necessary, request and obtain clarifications and / or corrections the latter.
According to the law, this treatment will be based on principles of correctness, lawfulness and transparency and protection of your privacy and your rights. According to article 13 of the GDPR, therefore, we provide you with the following information:
1. The data you provide will be processed to establish a contact, in case of interest and there will be no other processing purposes at this stage
2. The treatment will be carried out with manual and computerized methods
3. The provision of data is optional and any refusal to provide such data could only lead to failure to contact, in case of interest
4. The data will not be disclosed to other subjects, nor will it be disseminated
5. The data controller is Clonwerk Srl., In the person of its legal representative, Stefano Letterini, with registered office in Via Parenzo, 2 – 20143, Milan (MI) – VAT: 05036550969
6. In your capacity as an interested party, pursuant to art. 15 of the GDPR, in relation to the aforementioned processing, you may access your Personal Data, request its correction and update, if incomplete or erroneous, request its cancellation if the collection has occurred in violation of a law or regulation, as well as opposing the processing for legitimate and specific reasons.
In particular, we report below all of your rights that you may exercise at any time against the Data Controller:
Right of access: will have the right, according to the art. 15, paragraph 1, GDPR, to obtain from the Data Controller confirmation that a Personal Data Processing is being processed and in this case, to obtain access to such Personal Data and to the following information: a) the purposes of the treatment; b) the categories of Personal Data in question; c) Recipients or categories of Recipients to whom your Personal Data have been or will be communicated, in particular if Recipients of third countries or international organizations; d) whenever possible, the retention period of the Personal Data provided or, if not possible, the criteria used to determine this period; e) the existence of the right of the interested party to request the Data Controller to rectify or delete Personal Data or limit the processing of personal data concerning him or to oppose their processing; f) the right to lodge a complaint with a supervisory authority; g) if the Personal Data are not collected from the Data Subject, all information available on their origin; h) the existence of an automated decision-making process, including profiling pursuant to art. 22, paragraphs 1 and 4, GDPR and, at least in such cases, significant information on the logic used, as well as the importance and the expected consequences of such treatment for the interested party. All this information can be found in this information that will always be available to you within the Contact section of the site.
Right of rectification: may obtain, pursuant to art. 16 GDPR, the correction of your Personal Data that are incorrect. Taking into account the purposes of the processing, moreover, you can obtain the integration of your Personal Data that are incomplete, also by providing an additional declaration.
Right to cancellation: may obtain, pursuant to art. 17, paragraph 1, GDPR, the cancellation of your Personal Data without unjustified delay and the Data Controller will have the obligation to delete your Personal Data, if there is even one of the following reasons: a) Personal Data are no longer required with respect to the purposes for which they were collected or otherwise processed; b) has revoked the consent on which the processing of your Personal Data is based and there is no other legal basis for their processing; c) has objected to the Treatment pursuant to Article 21, Paragraph 1 or 2 of the GDPR and there is no longer any legitimate overriding reason to proceed with the processing of your Personal Data; d) your Personal Data has been processed unlawfully; e) it is necessary to delete your Personal Data in order to comply with a legal obligation provided for by a community or national law. In some cases, as foreseen by art. 17, paragraph 3 of the GDPR, the Data Controller is entitled not to provide for the cancellation of his Personal Data if their processing is necessary, for example, for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, for purposes of archiving in the public interest, scientific or historical research or for statistical purposes, for the assessment, exercise or defense of a right in court.
Right to limit the processing: will be able to obtain the limitation of the treatment, according to the art. 18 GDPR, in the event that one of the following hypotheses occurs: a) has contested the accuracy of your Personal Data (the limitation will continue for the period necessary to the Data Controller to verify the accuracy of such Personal Data); b) the processing is illegal but has opposed the cancellation of his Personal Data asking instead that its use is limited; c) although the Data Controller no longer needs it for the purposes of processing, its Personal Data are used for the assessment, exercise or defense of a right in court; d) he opposed the treatment pursuant to art. 21, paragraph 1, GDPR and is awaiting verification of the possible prevalence of the legitimate reasons of the Data Controller with respect to its own. In case of limitation of treatment, your Personal Data will be processed, except for storage, only with your consent or for the assessment, exercise or defense of a right in court or to protect the rights of a other natural or legal person or for reasons of significant public interest. We will inform you in any case before this limitation is revoked.
Right to data portability: may, at any time, request and receive, pursuant to art. 20, paragraph 1 of the GDPR, all of your Personal Data processed by the Data Controller in a structured format, in common and legible use or request transmission to another data controller without impediment. In this case, it will be his responsibility to provide us with all the exact details of the new data controller to whom he intends to transfer his Personal Data by providing written authorization.
Right to object: pursuant to art. 21, paragraph 2 of the GDPR and as also reiterated by Recital 70, may oppose, at any time, the processing of your Personal Data if these are processed for direct marketing purposes, including profiling in so far as it is related to such direct marketing.
Right to lodge a complaint with the supervisory authority: without prejudice to its right to appeal to any other administrative or jurisdictional office, if it considers that the processing of its Personal Data conducted by the Data Controller is in violation of the GDPR and/or of the law applicable, may propose a complaint to the competent authority for the protection of personal data.
To exercise all your rights as identified above, simply contact the Data Controller in the following ways: