Privacy information pursuant to Legislative Decree 196/03 and EU Regulation no. 679/2016
According to the art. 13 of Legislative Decree 196/03 and following the entry into force of EU Regulation no. 679/2016 in accordance with the provisions of art. 13 of the aforementioned European Regulation, we wish to inform you as follows:
Purpose of the processing
Your personal data, freely communicated and acquired by us due to the activity carried out by: Gruppo SativaChain Italia will be treated lawfully and fairly for the following purposes:
contact forms requests via social networks phone calls email I send commercial communications to customers who contact us for automatic creation to proﬁle users I use third-party tools to manage user data The processed data are updated, relevant, complete and not excessive in relation to the purposes listed above for which they are collected and subsequently processed.
The data will be processed in compliance with the necessary security and conﬁdentiality, through the following methods: collection of data from the interested party, collected and recorded for speciﬁc, explicit and legitimate purposes, used in further processing operations in terms compatible with those purposes , processing carried out with the aid of electronic and automated tools (data collection via data transmission, directly from the interested party).
Legal basis of the processing
The legal basis for the processing of your personal data is based on registration on the web portal https://www.sativachain.com/.
Legitimate interests pursued by the Data Controller:
The legitimate interests pursued by the Data Controller in the processing of data are given by having to respect and honor the contractual obligations signed between the parties. According to the art. 6 the lawfulness of the processing is based on the consensus manifestly expressed by the interested party, documented in written form. Compulsory or optional nature of providing data and consequences of a refusal to respond: the nature of the provision of data by you is mandatory so that the data controller can provide the services requested. In the event of refusal it will therefore be impossible to complete the registration process and the System Holder will not be able to fulﬁll the contractual obligations.
Communication of data to third parties
Your personal data will be processed by the data controller, by the data processors appointed by him and by the strictly authorized data processors. Your personal data are not subject to disclosure.
Your personal data will be stored for nr. 10 years, from the termination of the service supply / product supply relationship in the computer archives owned by Gruppo SativaChain.
Personal data processing owner’s intention
The data controller will not transfer your personal data to a third country or to an international organization.
Data controller and data processor
The data controller is the SativaChain Group. Contact details of the data controller, mail: email@example.com The interested party may at any time exercise the rights reserved for him, sanctioned by the art. 7 of which the full text is reported: art. 7 of Legislative Decree 196/2003 and art. 15 EU Regulation 679/2016 – Right of access to personal data and other rights – “The interested party has the right to obtain conﬁrmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in intelligible form. The interested party has the right to obtain the indication: of the origin of the personal data; of the purposes and methods of processing; of the logic applied in the case of processing carried out with the aid of electronic instruments; of the identiﬁcation details of the data controller, the manager and the designated representative pursuant to art. 5 paragraph 2; the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or appointees. The interested party has the right to obtain: the updating, the rectiﬁcation, or, when there is interest, the integration of the data; the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including those for which conservation is not necessary in relation to the purposes for which the data were collected or subsequently processed; the attestation that the operations referred to in letter a. and b. have been brought to the attention, even with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which such fulﬁllment proves impossible or involves the use of means manifestly disproportionate with respect to the protected right. The interested party has the right to object in whole or in part: for legitimate reasons, to the processing of personal data concerning him / her, even though they are relevant to the purpose of the collection; to the processing of personal data concerning him for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication ”. In particular, the interested party may at any time ask the Data Controller for access to personal data and the correction or cancellation of the same or the limitation of the processing that concern them or to oppose their treatment, in addition to the right to data portability . The data subject has the right to revoke the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation and has the right to lodge a complaint with a supervisory authority. The exercise of rights can be exercised by writing to the e-mail address firstname.lastname@example.org.