Privacy Statement
INFORMATIVE
Article 13 Reg. EU 679/2016
Dear Mr./Ms,
we wish to inform you that the EU Reg. 679/2016 (and Legislative Decree 196/2003 and subsequent amendments and additions, only as far as it complies with EU Reg. 679/2016) provides for the protection of individuals with regard to the processing of personal data. According to this legislation, the processing of your data will be based on principles of correctness, lawfulness and transparency, protecting the confidentiality and security of data and ensuring the exercise of your rights. Pursuant to the aforementioned Article 13 of EU Reg. 679/2016, we therefore provide you with the following information:
(a) The identity and contact details of the data controller and, where applicable, its representative;
The data controller is:
PHYSION S.R.L.
Registered office address MIRANDOLA (MO), VIA FOGAZZARO n. 4/B, CAP 41037
REA number MO - 257406
Fiscal code and VAT no. 01990130369
Tel. 0535/611082
Fax 0535/610420
Email: privacy@physion.it
PEC info@pec.physion.it
The data controller is established in the European Union and, therefore, is not required to designate a representative.
(b) The contact details of the data protection officer, where applicable;
The data controller does not currently process data falling under the obligation to designate a "Data Protection Officer" as detailed in Articles 37-38-39 and Recital 97 of EU Regulation 2016/679.
(c) The purposes of the processing for which the personal data are intended as well as the legal basis of the processing;
The purpose of the processing is as follows:
To carry out your request for information/contact with our company, made by filling in a specific data collection form on our website https://www.physion.it/.
We inform you that for the above mentioned purpose, your personal data (eventual personal data, contact data such as, for example, e-mail/PEC addresses) will be processed.
Please note that, in no section of the site, nor for access to any functionality of the site, is required the provision of "special categories of personal data" and / or "personal data relating to criminal convictions and offenses", as defined by Art. 9 and 10 of EU Reg. 679/2016. If, spontaneously, the User sends the data controller information of the above type, the data controller will process it in compliance with the provisions of EU Reg. 679/2016 and only if and to the extent strictly necessary in relation to the requests received from the website visitor; otherwise, these types of data will not be processed and will be immediately deleted by the data controller.
The legal basis of the processing relates to the provisions of Article 6 paragraph 1 letter a) of EU Reg. 679/2016, as the data subject has given consent to the processing of their personal data for one or more specific purposes.
(d) Where the processing is based on Article 6(1)(f ), the legitimate interests pursued by the data controller or a third party;
We inform you that the processing of the data is not based on Article 6(1)(f ), as the processing is not necessary for the purposes of pursuing the legitimate interests pursued by the controller or third parties, provided that the interests or fundamental rights and freedoms of the data subject which require the protection of personal data do not prevail, in particular if the data subject is a child.
e) The possible recipients or categories of recipients of personal data;
Your personal data will be processed by persons specifically appointed by the data controller as data processors (if appointed) and/or by anyone acting under their authority and/or under the authority of the data controller and who has access to personal data (Administrators/partners/employees of the data controller); these subjects will process your data only when necessary in relation to the purposes of the conferment and only as part of the performance of the tasks assigned to them by the owner of the data processing, committing themselves to process only the data necessary to carry out these tasks and to perform only the operations necessary to carry them out.
Furthermore, the data may be communicated, only if strictly necessary in relation to the previously indicated purpose to the following categories of recipients:
- Specific suppliers of computer services related to data processing;
Your personal data will not be disseminated.
(f) Where applicable, the intention of the data controller to transfer personal data to a third country or international organization and the existence or absence of a Commission adequacy decision or, in the case of transfers referred to in Article 46 or 47, or Article 49, second paragraph, reference to appropriate or adequate safeguards and the means of obtaining a copy of such data or the place where they have been made available.
The data controller does not intend to transfer the personal data to a third country or international organization.
In addition to the information previously provided, the data controller provides you with the following additional information necessary to ensure fair and transparent processing:
(g) The retention period of your personal data or, if this is not possible, the criteria used to determine this period;
Your data will be kept for the time necessary to achieve the above purposes, in order to respond to the request for information/contact with our company made by you through the compilation of a specific data collection form on our website https://www.physion.it/ (storage for a maximum period of 1 year from the time of collection). The data will then be deleted, subject to their transformation into anonymous form.
h) The existence of the data subject's right to request from the data controller access to and rectification or erasure of personal data or restriction of processing concerning him or her or to object to the processing of such data, as well as the right to data portability;
You may, at any time, exercise towards the data controller the following rights provided for by EU Reg. 679/2016, by contacting the data controller at the contact details indicated in point a) of this policy:
Data subject's right of access (Article 15 of EU Reg. 679/2016).
Right of rectification (Article 16 of EU Reg. 679/2016).
Right to erasure - "right to be forgotten" (Article 17 of EU Reg. 679/2016).
Right to restriction of processing (Article 18 of EU Reg. 679/2016).
Right to object (Article 21 of EU Reg. 679/2016).
Right to data portability (Article 20 of EU Reg. 679/2016).
(i) Where the processing is based on Article 6(1)(a) or Article 9(2)(a), the existence of the right to withdraw consent at any time without affecting the lawfulness of the processing based on the consent given before the withdrawal;
You may exercise vis-à-vis the data controller the right to withdraw consent at any time without prejudice to the lawfulness of the processing based on the consent given prior to the revocation, by contacting the data controller at the contact details indicated in point a) of this notice.
j) The right to lodge a complaint with a supervisory authority;
If you believe that the processing of personal data relating to you, carried out by the data controller, is in breach of the provisions of EU Reg. 679/2016, you have the right to lodge a complaint with the relevant Supervisory Authority, as provided for in Article 77 of EU Reg. 679/2016 itself, or to take appropriate legal action (Article 79 of EU Reg. 679/2016).
k) Whether the disclosure of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, and whether the data subject is obliged to provide the personal data as well as the possible consequences of not providing such data;
The communication of data described above is necessary in order to process your requests for information/contact and is strictly related to normal business operations; therefore, failure to provide such data may make it impossible to process your requests for information/contact (in particular, as regards the "mandatory fields" in the information collection form).
l) The existence of an automated decision-making process, including profiling as referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject.
The data controller informs you that your data will not be subject to automated decision-making, including profiling as referred to in Article 22(1) and (4) of EU Reg. 679/2016.
The full text of the articles of EU Reg. 679/2016 relating to your rights (articles 15 to 22 inclusive) can be consulted at the following link present on the website of the Data Protection Authority:
- https://www.garanteprivacy.it/regolamentoue
or, alternatively, they will be provided to you by the Controller at your simple request.
Finally, the Data Controller informs you that, if the Data Controller intends to further process your personal data for a purpose other than the one for which it was collected, prior to such further processing it undertakes to provide you with all the information regarding such different purpose and any further relevant information referred to in Article 13 of EU Reg. 679/2016, paragraph 2.
Date of last modification of the document
MIRANDOLA (MO), 14/12/2021