privacy policy

INFORMATION REGARDING THE PROCESSING OF PERSONAL DATA
pursuant to Article 13 of European Regulation 679/2016

This regulation applies to the fully or partially automated processing of personal data and to the non-automated processing of personal data contained in or intended to be included in a filing system. Pursuant to Article 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR) and in relation to the personal data provided by you, the following is communicated:

1) Data Controller and Contact Details

The data controller is ALBERTO BURZI, with registered office in LA MORRA (CN) FR. SANTA MARIA, 9; the Data Controller can be contacted via EMAIL at the address INFO@ALBERTOBURZI.IT.

In accordance with the EU guidelines WP 243, a data protection officer (DPO) has not been appointed.

The Controller processes data in accordance with the principles established by the GDPR (General Data Protection Regulation EU 2016/679), namely lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, integrity, and confidentiality.

2) Purposes of Data Processing

  1. To fulfill national and European legal obligations and prescriptions.
  2. To comply with tax and accounting obligations.
  3. To exercise the rights and legitimate interests of the Controller or third parties, such as the right to defense in legal proceedings.
  4. To respond to requests for information and/or quotes and/or contact that the user has requested via written and/or verbal communication and/or electronic communication tools (contact form on the website, email, fax, SMS, MMS, APP, Social Networks (e.g., Facebook, LinkedIn, Whatsapp, etc.).
  5. To carry out the correct and complete execution of the professional assignment entrusted.
  6. For promotional and marketing purposes.
  7. To communicate with third parties for marketing purposes.

3) Legal Basis of Processing
Regarding the purposes set out in point 2, your personal data is processed lawfully, where the processing:

  • is necessary for the performance of a contract to which you are a party or for the performance of pre-contractual measures taken at your request;
  • is necessary to comply with a legal obligation incumbent on the data controller;
  • is based on the express consent registered in written or digital form (e.g., online forms).

4) Mandatory or Optional Nature of Personal Data Communication

With reference to purposes 2a), 2b), 2c), 2d), 2e), the communication of personal data by you and the consequent processing by the Controller are mandatory for the establishment, continuation, and proper management of the relationship. Your refusal to provide the requested personal data may result in the impossibility, by the Controller, to finalize and manage the existing contractual or pre-contractual relationship, which consequently cannot be concluded.

With reference to purposes 2f), 2g), the provision of your personal data is optional, and any refusal will not have any consequences on existing or ongoing legal relationships.

5) Data Retention

Your personal data, processed for the above purposes, will be retained for the duration of the contract and, subsequently, for the time during which the Controller is subject to retention obligations for tax purposes or for other purposes provided for by laws or regulations. In any case, the Controller undertakes not to retain the data for more than 10 years from the termination of the collaboration relationship.

6) Disclosure of Data to Third Parties

Your personal data may be disclosed to the following subjects, also operating outside the European Union:

  • consultants, accountants, lawyers, or other professionals providing services for the above purposes;
  • banks and insurance companies providing services for the above purposes;
  • subjects processing data in compliance with specific legal obligations;
  • Judicial or administrative authorities, to fulfill legal obligations;
  • communication, marketing, and advertising service companies.

 

7) Profiling and Data Dissemination

Your personal data are not subject to dissemination or any entirely automated decision-making process, including profiling pursuant to Article 22 points 1 and 4 of the GDPR Regulation.

8) Rights of the Data Subject

Among the rights recognized to you by the GDPR are:

  • to request the Controller access to your personal data and information about them; rectification of inaccurate data or integration of incomplete data; erasure of personal data concerning you (where one of the conditions set out in Article 17(1) of the GDPR applies and in compliance with the exceptions provided for in paragraph 3 of the same article); restriction of processing of your personal data (where one of the cases set out in Article 18(1) of the GDPR applies);
  • to request and obtain from the Controller - in cases where the legal basis for processing is the contract or consent, and the processing is carried out by automated means - your personal data in a structured, commonly used, and machine-readable format, also for the purpose of communicating such data to another controller (so-called right to data portability);
  • to object at any time to the processing of your personal data in the event of particular situations concerning you;
  • to withdraw consent at any time, limited to cases where the processing is based on your consent for one or more specific purposes and concerns common personal data (such as date and place of birth or residence), or special categories of data (such as data revealing your racial origin, political opinions, religious beliefs, health status, or sexual life). Processing based on consent carried out prior to its withdrawal remains lawful;
  • to lodge a complaint with a supervisory authority (Italian Data Protection Authority www.garanteprivacy.it).

9) Changes to this Privacy Policy

The Controller reserves the right to modify the content, in whole or in part, also due to changes in Privacy Regulations. The Controller will publish the updated version of this document on its websites, and from that moment, it will be binding: therefore, the Data Subject is invited to regularly visit this section.

This Information is effective from 15/03/2023.

——————————————————————–