Information on the processing of personal data
Ref. Articles 13 and 14 of Regulation (EU) 2016/679
Version of 23/01/2019
The information notice is an instrument of transparency towards users of the LA CORTAZZA SRL website and is part of the requirements established by law to ensure that the processing of personal data is carried out in compliance with the fundamental rights and freedoms of the data subject, in particular the right to protection of personal data. The purpose of this communication is therefore to inform users about the processing of the data they enter in the forms on this website.
Data controller.
The Data Controller of personal data is LA CORTAZZA Srl, with registered office in Via Battisti 2 - 20122 Milan, VAT and Tax Code 01248250183, and operational headquarters in Via Vallone 18, 27100 Pavia - Website: www.cascinascova.com. It is possible to contact the Data Controller at the addresses indicated or using the following references: Tel. 0382 413604. Electronic mail: lacortazzapavia@libero.it. PEC: lacortazzasrl@pec.it.
Categories of personal data processed and their source, purpose and legal basis for processing.
The use of the website provides the user with the possibility of entering the following categories of information relating to the booking and payment of services: personal data of the interested parties, contact data, payment system data, type and characteristics of the service requested, scheduling of the services requested, requests for estimates, any specific notes provided by the interested party. Data processing is carried out for the following purposes
managing service bookings and carrying out their commercial, administrative, accounting, legal management;
to send communications in response to requests made or in any case necessary for the provision of the services requested
to fulfil legal obligations relating to commercial/contractual activities.
For these purposes, the Customer's consent is not required as the processing is necessary for the execution of a contract or for pre-contractual stages and related legal obligations.
Period of data retention.
Data are retained for ten years after the termination of the service relationship and all related legal effects as well as contractual obligations to other parties.
Compulsory or optional nature of providing data
The provision of personal data by the Customer for the purposes described above is optional in nature, however it is essential for the establishment and subsequent management of the service relationship. Therefore, any refusal by the Customer to provide the requested data may prevent the establishment and management of the services.
Recipients of personal data.
The knowledge or use of personal data by external parties may occur in order to comply with legal requirements, for reasons functional to the management of the business relationship and in general for the previously stated purposes. The external subjects who may become aware of the personal data of the interested parties or to whom the same data may be communicated, limited to the extent of their respective and specific competence, may be:
Public bodies, companies, professionals, organisations and consultants with which the Data Controller deals for ordinary management and to meet legal requirements
Banks and insurance companies
Suppliers, within the limits of contractual and legal requirements
IT companies, for the management of IT tools and databases
Certification and inspection bodies
Tax Authorities, Public Security Authorities and the Magistracy, in cases of ascertainment of illegal acts, and in general all institutional inspection bodies and authorities responsible for verifying the regularity of legal requirements.
The list of external data processors is available at LA CORTAZZA.
Personal data is also processed by personnel authorised by the data controller, on the basis of specific instructions regarding the purposes and methods of processing.
Transfer of data to third countries or international organisations.
Personal data is stored in Italy. For the execution of specific security measures, such as remote data storage at technological service providers / data centres, personal data may also be transferred abroad, within the European Union or to non-EU countries for which an adequacy decision of the European Commission exists (art.45 of EU Regulation 2016/679).
Rights of the data subject.
In the cases provided for in Articles 15 et seq. of EU Regulation 2016/679, the Customer has the right to obtain from [-----] access to his or her personal data and the rectification or erasure thereof or the restriction of the processing concerning him or her or to object to the processing. The request to assert one's rights can be made by contacting the Data Controller.
strong>Right to complain.
In the event that the Customer considers that the processing of personal data relating to him/her carried out by LA CORTAZZA takes place in violation of the provisions of the EU Regulation 2016/679, he/she has the right to lodge a complaint with the Guarantor, as provided for in Article 77 of the Regulation itself, or to take appropriate legal action (Article 79 of the Regulation).
