Processing methods

The Data Controller adopts the appropriate security measures to prevent unauthorized access, disclosure, modification or destruction of Personal Data.
The treatment is carried out using IT and / or telematic tools, with methods organizational and with logic strictly related to the purposes indicated. In addition to the Data Controller, in some cases, other subjects involved in the organization of this Website (administrative, commercial, marketing, legal, system administrators) or external subjects (such as third party technical service providers, postal couriers) may have access to the Data. , hosting provider, IT companies, communication agencies) also appointed, if necessary, Data Processors by the Owner. The updated list of Managers can always be requested from the Data Controller.

Legal basis of the processing

The Data Controller processes Personal Data relating to the User if one of the following conditions exists:

• the User has given consent for one or more specific purposes; Note: in some systems, the Data Controller may be authorized to process Personal Data without the User’s consent or another of the legal bases specified below, as long as the User does not object (“opt-out”). to such treatment. This however is not applicable if the processing of Personal Data is regulated by European legislation on the protection of Personal Data;
• processing is necessary for the execution of a contract with the User and / or for the execution of pre-contractual measures;
• processing is necessary to fulfill a legal obligation to which the Data Controller is subject;
• processing is necessary for the performance of a public interest task or for the exercise of public powers with which the Data Controller is invested;
• the processing is necessary for the pursuit of the legitimate interest of the owner or third parties.

In any case, it is always possible to request the Data Controller to clarify the concrete legal basis of each treatment and in particular to specify whether the treatment is based on the law, envisaged by a contract or necessary to conclude a contract.

Location

The Data are processed at the Data Controller’s operating offices and in any other place where the parties involved in the processing are located. For further information, contact the Data Controller.

The User’s Personal Data may be transferred to a country other than the one in which the User is located. To obtain further information on the place of treatment, the User can refer to the section relating to the details on the processing of Personal Data.

The User has the right to obtain information regarding the legal basis for the transfer of Data outside the European Union or to an international organization under public international law or consisting of two or more countries, such as the UN, as well as regarding the security measures adopted by the Data Controller to protect the Data.

The User can verify whether one of the transfers described above takes place by examining the section of this document relating to the details on the processing of Personal Data or ask the Owner for information by contacting him at the contact details indicated at the beginning.

Retention period

The data are processed and stored for the time required by the purposes for which they were collected.

Therefore:

• Personal Data collected for purposes related to the execution of a contract between the Owner and the User will be retained until the execution of this contract is completed.
• Personal Data collected for purposes related to the legitimate interest of the Data Controller will be retained until this interest is satisfied. The User can obtain further information regarding the legitimate interest pursued by the Data Controller in the relevant sections of this document or by contacting the Data Controller.

When the treatment is based on the User’s consent, the Data Controller can keep Personal Data longer until such consent is revoked. In addition, the Data Controller may be obliged to keep Personal Data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, Personal Data will be deleted. Therefore, at the end of this term, the right of access, cancellation, rectification and the right to data portability can no longer be exercised.