Before transmitting any personal data, we invite you to carefully read this Information prepared pursuant to articles 13 et seq. of EU Regulation 2016/679 (hereinafter also GDPR): it contains important information on the processing of your Personal Data. The data controller informs that he will process your personal data in compliance with the Privacy legislation and the principles of lawfulness, correctness, transparency, limitation of purposes and storage, data minimization, accuracy, integrity, confidentiality. Therefore, in relation to the above, the controller provides the following information.
1. DATA CONTROLLER
The data controller is ControlloCasa S.r.l. (Tel.: (+39) 06 94804820, P.I. 14933521008, Whatsapp: (+39) 3517700301, Mail: info@controllocasa.it), in the person of the legal representative.
2. PURPOSE AND LEGAL BASIS OF THE PROCESSING
Your personal data will be processed for the following purposes:
a. Browsing the website. Art. 6, par. 1, lett. f and recital 47 of the GDPR: processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject which require protection of personal data do not prevail, taking into account the reasonable expectations of the data subject based on his or her relationship with the data controller. Activities strictly necessary for the functioning of the website and the provision of the navigation service on the platform, therefore, the provision is necessary.
b. Contact request. Art. 6, par. 1, lett. b GDPR: processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures adopted at the request of the same. The provision of personal data necessary for the purposes of providing the services requested by the Data Subject is necessary. Any failure to provide the data will make it impossible to obtain what has been requested or to use the services of the data controller
c. Organizational management of the contractual relationship, including payments and invoicing. Art. 6, par. 1, lett. b GDPR: the performance of a contract to which the data subject is party.
d. Fulfill legal, accounting, administrative and tax obligations. Art. 6, par. 1, lett. c GDPR: the fulfillment of legal obligations to which the controller is subject.
e. For the performance of the Soft-spam activity. In the context of a purchase through the Website, to allow the direct offer by the Data Controller of products similar to those already purchased, provided that you do not object to such processing in the manner provided for in this information notice. The legal basis of the processing is the legitimate interest of the Data Controller which can be considered equivalent to the interest of the interested party in receiving "soft-spam" communications pursuant to art. 130, paragraph 4, Legislative Decree 196/2003 and subsequent amendments.
f. For the performance of the Newsletter activity. Art. 6, paragraph 1, letter a and recital 47 of the GDPR: the interested party has given consent to the processing of his/her personal data. Consent can be revoked at any time (without prejudice to the processing carried out up to the intervention of such revocation). The provision is optional and does not preclude processing for other purposes.
g. For the performance of Marketing activities. Art. 6, par. 1, lett. a and recital 47 of the GDPR: the interested party has given consent to the processing of his/her personal data. Consent can be revoked at any time (without prejudice to the processing carried out up to the intervention of such revocation). The provision is optional and does not preclude processing for other purposes.
3. DATA RECIPIENTS
The personal data processed by the data controller will not be disclosed. In any case, your personal data may be disclosed to:
a) persons who can access the data pursuant to legal provisions established by the national law of the State to which the data controller belongs and by Community law;
b) any persons authorised to process data duly appointed pursuant to art. 29 GDPR and art. 2-quaterdecies Legislative Decree 196/2003 and subsequent amendments;
c) persons who process data on behalf of the data controller who have been appointed, through a contract or other legal act, as data controllers pursuant to art. 28 GDPR.
4. DATA TRANSFER
The management and storage of personal data will take place on servers located within the European Union and, therefore, your personal data will not be transferred to countries outside the European Economic Area. However, if it is necessary to move the location of the servers, the owner ensures that the transfer of data outside the European Economic Area will take place in accordance with the provisions of the law and by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses provided by the European Commission.
5. DATA RETENTION PERIOD
Personal data will be processed by the owner only to the extent necessary to achieve the purposes for which they were collected (specifically, your data will be retained until your consent is revoked). Specifically, they will be processed for a period of time equal to the minimum necessary pursuant to Recital 39 of the GDPR, without prejudice to a further retention period that may be imposed by law pursuant to Recital 65 of the GDPR.
6. RIGHTS OF THE INTERESTED PARTY, COMPLAINT, JUDICIAL APPEAL
With regard to the personal data above, the interested party, or a person delegated in writing, may exercise the following rights:
a) the right of access pursuant to art. 15 of EU Reg. 2016/679;
b) the right of rectification pursuant to art. 16 of EU Reg. 2016/679;
c) the right to be forgotten pursuant to art. 17 of EU Reg. 2016/679;
d) the right to limit processing when one of the hypotheses provided for by art. 18 of EU Reg. 2016/679 applies;
e) the right to request certification that the operations carried out pursuant to articles 16, 17 and 18 of EU Reg. 2016/679 have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected;
f) the right to data portability provided for by art. 20 of EU Reg. 2016/679;
g) the right to object to the processing of personal data provided for by art. 21 of EU Reg. 2016/679;
h) the right to withdraw consent at any time, as established by art. 7 of EU Reg. 2016/679;
i) the right to lodge a complaint pursuant to art. 77 GDPR;
l) the right to lodge a judicial appeal pursuant to art. 79 GDPR.
If you wish to exercise your rights, you may contact the data controller at the contact points indicated in this information notice drawn up in accordance with the Privacy legislation currently in force. Furthermore, the list of data controllers is available at the owner's office and you may request it from one of the contacts listed in point 1 of the information notice called "DATA CONTROLLER". In any case, the data controller is always available for any need for clarification and, in the event that the processing should be modified with respect to what is described in this document, the data controller will immediately provide a specific updated information notice.
1. DATA CONTROLLER
The data controller is ControlloCasa S.r.l. (Tel.: (+39) 06 94804820, P.I. 14933521008, Whatsapp: (+39) 3517700301, Mail: info@controllocasa.it), in the person of the legal representative.
2. PURPOSE AND LEGAL BASIS OF THE PROCESSING
Your personal data will be processed for the following purposes:
a. Browsing the website. Art. 6, par. 1, lett. f and recital 47 of the GDPR: processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject which require protection of personal data do not prevail, taking into account the reasonable expectations of the data subject based on his or her relationship with the data controller. Activities strictly necessary for the functioning of the website and the provision of the navigation service on the platform, therefore, the provision is necessary.
b. Contact request. Art. 6, par. 1, lett. b GDPR: processing is necessary for the performance of a contract to which the data subject is party or for the implementation of pre-contractual measures adopted at the request of the same. The provision of personal data necessary for the purposes of providing the services requested by the Data Subject is necessary. Any failure to provide the data will make it impossible to obtain what has been requested or to use the services of the data controller
c. Organizational management of the contractual relationship, including payments and invoicing. Art. 6, par. 1, lett. b GDPR: the performance of a contract to which the data subject is party.
d. Fulfill legal, accounting, administrative and tax obligations. Art. 6, par. 1, lett. c GDPR: the fulfillment of legal obligations to which the controller is subject.
e. For the performance of the Soft-spam activity. In the context of a purchase through the Website, to allow the direct offer by the Data Controller of products similar to those already purchased, provided that you do not object to such processing in the manner provided for in this information notice. The legal basis of the processing is the legitimate interest of the Data Controller which can be considered equivalent to the interest of the interested party in receiving "soft-spam" communications pursuant to art. 130, paragraph 4, Legislative Decree 196/2003 and subsequent amendments.
f. For the performance of the Newsletter activity. Art. 6, paragraph 1, letter a and recital 47 of the GDPR: the interested party has given consent to the processing of his/her personal data. Consent can be revoked at any time (without prejudice to the processing carried out up to the intervention of such revocation). The provision is optional and does not preclude processing for other purposes.
g. For the performance of Marketing activities. Art. 6, par. 1, lett. a and recital 47 of the GDPR: the interested party has given consent to the processing of his/her personal data. Consent can be revoked at any time (without prejudice to the processing carried out up to the intervention of such revocation). The provision is optional and does not preclude processing for other purposes.
3. DATA RECIPIENTS
The personal data processed by the data controller will not be disclosed. In any case, your personal data may be disclosed to:
a) persons who can access the data pursuant to legal provisions established by the national law of the State to which the data controller belongs and by Community law;
b) any persons authorised to process data duly appointed pursuant to art. 29 GDPR and art. 2-quaterdecies Legislative Decree 196/2003 and subsequent amendments;
c) persons who process data on behalf of the data controller who have been appointed, through a contract or other legal act, as data controllers pursuant to art. 28 GDPR.
4. DATA TRANSFER
The management and storage of personal data will take place on servers located within the European Union and, therefore, your personal data will not be transferred to countries outside the European Economic Area. However, if it is necessary to move the location of the servers, the owner ensures that the transfer of data outside the European Economic Area will take place in accordance with the provisions of the law and by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses provided by the European Commission.
5. DATA RETENTION PERIOD
Personal data will be processed by the owner only to the extent necessary to achieve the purposes for which they were collected (specifically, your data will be retained until your consent is revoked). Specifically, they will be processed for a period of time equal to the minimum necessary pursuant to Recital 39 of the GDPR, without prejudice to a further retention period that may be imposed by law pursuant to Recital 65 of the GDPR.
6. RIGHTS OF THE INTERESTED PARTY, COMPLAINT, JUDICIAL APPEAL
With regard to the personal data above, the interested party, or a person delegated in writing, may exercise the following rights:
a) the right of access pursuant to art. 15 of EU Reg. 2016/679;
b) the right of rectification pursuant to art. 16 of EU Reg. 2016/679;
c) the right to be forgotten pursuant to art. 17 of EU Reg. 2016/679;
d) the right to limit processing when one of the hypotheses provided for by art. 18 of EU Reg. 2016/679 applies;
e) the right to request certification that the operations carried out pursuant to articles 16, 17 and 18 of EU Reg. 2016/679 have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment proves impossible or involves the use of means manifestly disproportionate to the right protected;
f) the right to data portability provided for by art. 20 of EU Reg. 2016/679;
g) the right to object to the processing of personal data provided for by art. 21 of EU Reg. 2016/679;
h) the right to withdraw consent at any time, as established by art. 7 of EU Reg. 2016/679;
i) the right to lodge a complaint pursuant to art. 77 GDPR;
l) the right to lodge a judicial appeal pursuant to art. 79 GDPR.
If you wish to exercise your rights, you may contact the data controller at the contact points indicated in this information notice drawn up in accordance with the Privacy legislation currently in force. Furthermore, the list of data controllers is available at the owner's office and you may request it from one of the contacts listed in point 1 of the information notice called "DATA CONTROLLER". In any case, the data controller is always available for any need for clarification and, in the event that the processing should be modified with respect to what is described in this document, the data controller will immediately provide a specific updated information notice.
