Information provided pursuant to Articles 13-14 of the GDPR (General Data Protection Regulation) 2016/679

We inform you that, for the establishment and execution of ongoing contractual relationships with you, our organization possesses your data, acquired verbally, directly, or through third parties, classified as personal data under Regulation (EU) 2016/679 (GDPR). In accordance with the aforementioned legislation, this processing will be based on principles of fairness, lawfulness, transparency, and protection of your privacy and rights.

Pursuant to Article 13 of GDPR 2016/679, we therefore provide you with the following information:

Nature of the data processed:

We process your personal, tax, and financial data necessary for the performance of existing or future contractual relationships with your company, as well as to effectively manage our business relationships. The data is processed without your express consent (Article 24, letters a, b, and c, of the Privacy Code and Article 6, letters b, and e, of the GDPR), solely and exclusively for the following Service Purposes: fulfilling pre-contractual, contractual, and tax obligations arising from existing relationships with you; fulfilling obligations established by law, regulation, EU legislation, or an order from the Authority; exercising the Data Controller's rights, such as the right to defense in court. We do not possess any of your data that could be classified as sensitive or of a judicial nature (Articles 9 and 10 of the GDPR).

Purpose of the processing and duration:

Your data will be processed for the entire duration of the contractual relationship and subsequently, for contractual requirements and related legal and tax compliance, and for the effective management of financial and commercial relationships, as indicated in Article 4 of the Privacy Code and Article 4(2) of the GDPR. The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no longer than 10 years from the termination of the relationship for Service Purposes.

Treatment methods:

The processing will be carried out using manual and/or computerized and electronic tools, with organizational and processing logic strictly related to the purposes themselves and in any case in a way that guarantees the security, integrity, and confidentiality of the data in compliance with the organizational, physical, and logical measures required by current legislation.

Obligation or option to provide data:

Regarding the data we are required to disclose in order to fulfill legal obligations, your failure to provide such data will make it impossible to establish or continue the relationship, to the extent such data is necessary for its execution. Scope of access to your data: The following categories of individuals may become aware of your data, in their capacity as data processors or persons in charge of data processing, appointed by the undersigned company, the data controller: managers, directors, and auditors; internal secretarial staff; accounting and invoicing staff; service marketing staff; agents and representatives.

Communication and dissemination:

We will not disclose your data to unspecified parties by making it available or consulting it. We may disclose your data, within their respective and specific jurisdiction, to organizations and, in general, to any public or private entity to which we have an obligation (or right recognized by law or secondary or EU legislation) or need to disclose it, as well as to our consultants, to the extent necessary to carry out their duties within our organization, subject to our prior letter of engagement imposing a duty of confidentiality and security.

Your rights:

As the data subject, you have the rights set forth in Article 7 of the Privacy Code and Article 15 of the GDPR, specifically the rights to:

obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in an intelligible form;
obtain information on: a) the source of the personal data; b) the purposes and methods of processing; c) the logic applied in the event of processing carried out with the aid of electronic means; d) the identification details of the data controller, data processors, and the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, of the GDPR; e) the entities or categories of entities to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, data processors, or persons in charge of processing;
obtain: a) the updating, rectification, or integration of data; b) the deletion, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which it was collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, including their content, of those to whom the data was communicated or disseminated, except where such compliance proves impossible or involves a manifestly disproportionate effort compared to the right being protected;
Object, in whole or in part: a) for legitimate reasons, to the processing of your personal data, even if pertinent to the purpose of collection; b) to the processing of your personal data for the purpose of sending advertising or direct sales materials or for conducting market research or commercial communications, through the use of automated calling systems without the intervention of an operator, via email and/or through traditional marketing methods such as telephone and/or postal mail.

Where applicable, you also have the rights set forth in Articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority. You may obtain confirmation at any time as to whether or not personal data concerning you exists, and disclosure of such data and the purposes for which it is processed. Furthermore, you may request the erasure, anonymization, or blocking of data processed unlawfully, as well as the updating, rectification, or, if you have an interest in doing so, integration of the data. You may object, for legitimate reasons, to the processing itself. We kindly ask you to promptly report to the company's contact office any changes to your personal data in order to comply with Article 11, letter (c) of the aforementioned regulation, which requires that the data collected be accurate and, therefore, updated.

Owner and data controller:

The data controller is Vonino Italia Srl – Via Nicolò V 19 – 00165 Rome (RM)

The Data Controller, who you can contact to exercise your rights and/or for any clarifications regarding personal data protection, can also be reached at: privacy@vonino.it