Dear interested party, we wish to inform you that the "European Regulation 2016/679 concerning the protection of individuals with regard to the Processing of Personal Data, as well as the free circulation of such data" (from now on "GDPR") provides for the protection of persons and other subjects regarding the processing of personal data. Kartstore S.r.l.s., as "Data Controller", pursuant to Article 13 of the GDPR, therefore, provides you with the following information:
CATEGORIES OF DATA
Kartstore S.r.l.s. will process the personal data that will be included in the form when it is necessary to request it based on the relevant national and European regulations, subject to information and consent from the interested party. This information will fall into the category of identification and contact data (for example: name, surname, telephone, e-mail address.
SOURCE OF PERSONAL DATA
The personal data of which Kartstore S.r.l.s. will be in possession are collected directly by the interested party when completing this form.
HOLDER OF THE TREATMENT
PURPOSE OF DATA PROCESSING AND LEGAL BASIS
the processing of your data, collected and stored in relation to the compilation of this form, has as its legal basis your consent and is carried out for the following purposes: to download training and information material, provide assistance and support services, proceed with registration to the newsletter, to send training, information and commercial communications, to manage commercial profiling activities.
Within the limits pertinent to the indicated processing purposes, your data may be communicated to partners, consulting companies, private companies, appointed as Responsible by the Data Controller. Your data will not be disseminated in any way. The Data Processors and Persons in charge of the processing in charge are promptly identified in the Privacy Document, updated periodically.
TRANSFER OF DATA ABROAD
the data collected will not be transferred abroad.
The data collected will be kept for a period of time not exceeding the achievement of the purposes for which they are processed and up to the request for cancellation by the interested party. The verification of the obsolescence of the data stored in relation to the purposes for which it was collected is carried out periodically.
RIGHTS OF THE INTERESTED PARTY
The interested party has the right at any time to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form; also has the right to obtain the indication: a) of the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in the case of processing carried out with the aid of electronic means; d) of the identification data concerning the data controller, data processors and the representative designated pursuant to Article 5, paragraph two; e) the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as appointed representative in the State, managers or authorized persons; also has the right to: a) obtain the updating, rectification or, when interested, integration of the data; b) obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those for which conservation is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) obtain the attestation that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where such compliance proves to be impossible or involves a manifestly disproportionate use of resources with respect to the protected right; d) in the presence of conditions specifically provided for by law, to receive in a structured format, commonly used and readable by automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another holder of processing, without hindrance by the owner of the processing to which it has supplied them, also by direct transmission (so-called right to data portability); e) to lodge a complaint with the Guarantor for the Protection of Personal Data in Rome; finally has the right to object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of collection; b) to the processing of personal data concerning him for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication.
OBLIGATORY OR LESS THAN DATA
We inform you that the provision of data is optional for some fields and for others mandatory and failure to provide the mandatory data will result in NOT sending the form.
OBLIGATORY OF CONSENT
The provision of consent to data processing by means of a special check is optional, but essential to proceed with the sending of the form.
DATA PROCESSING METHODS
The personal data supplied by you will be subject to processing operations in compliance with the aforementioned legislation and the confidentiality obligations which the activity of the owner is inspired by. The data will be processed both using IT tools and on paper and any other type of suitable support, in compliance with adequate technical security, organizational and procedural measures that comply with the principles introduced by the GDPR.