PURSUANT TO ART. 13 OF LEG. DECREE 196/2003
(Personal Data Protection Code)

Foreword

D.LGS 196/2003 (Personal Data Protection Code) regulates the processing of personal data. Data processing is intended as any operation or set of operations carried out with or without the aid of electronic instruments, concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, the cancellation and destruction of personal data even if not registered in a database."
As a general rule, the law requires the consent of the data subject to the processing. Furthermore, also the data subject has the right to obtain information regarding personal data, information explained more in detail hereafter.

Purposes of data processing

The Owner of this Website informs you that the data provided by the data subject, acquired directly from the person concerned either verbally in the past, or through third parties, or that may be asked or transmitted in the future by the same data subject or by third parties, may be processed also by third party companies designated as Data Processors, for the following purposes:

1. Accounting, administrative, fiscal purposes etc, in compliance with the obligations foreseen by the relevant laws, provisions and EU regulations, or by the provisions laid down by authorized Bodies and Supervisory Bodies.
The submission of personal data for such purposes is mandatory and prior consent to their processing is not required from the data subject. Refusal by the data subject to confer personal data shall prevent all commercial relationships with the Website Owner.

2. Purposes strictly related and instrumental to the management of customers contract relationships either existing or underway, for example: acquisition of information prior to the execution of a contract, execution of operations on the basis of obligations arising from contracts entered into with customers, verifications and assessments of results and relationship progress, as well as all the risks implied.
The Data subject is not obliged to communicate personal data for such purposes, but refusal to do so may render the service request impossible, with regards to the relation between the data and the service required. In case such data is conferred, it can be processed without the consent of the data subject.

3. Purposes related to activities carried out by the Website Owner, including:

· Measurement of customer satisfaction levels with regard to the quality of the services provided and the Website Owners activities through phone interviews, personal interviews, questionnaires, etc.

· Promotion and sale of products and services supplied by the Website Owner or by third party companies through mail, telephone, promotional material, automated communication systems, etc.

· Processing of market studies and research realized through questionnaires, phone interviews, personal interviews, etc.

· Public relation activities. The supply of personal data for such purposes is optional. However, if provided, the data subject must also give his/her consent to their processing.

Data processing modes

1. Instruments and rules applied.

In relation to the purposes mentioned above, personal data will be processed manually or using IT or web tools relying on rules that are strictly related to the purposes for which they were gathered and, in any case, in order to ensure the privacy and confidentiality of your personal data. The data subject agrees to promptly notify the Website Owner of any correction, changes or updates to the above-mentioned data.
Personal data may be processed on behalf of the Website Owner - for the purposes and through the modalities mentioned above and in compliance with suitable criteria for ensuring privacy and confidentially with respect to such data - also by companies, authorities and external collaborators designated as Data Processors and only within the scope of such data processing activities.

2. Duration.

Personal data shall be kept for the whole duration of the contractual relationship.

After that, they may be processed for fulfilling legal obligations and for marketing purposes.

3. Sensitive data.

None of your personal data, either required or already in our possession, can be classified as sensitive data or judicial data, as laid out under letters d) and e) of art. 4 of Leg. Decree 196/2003. In case you supply data of such nature, in the absence of your express written consent, we shall immediately proceed to cancel them from our database.

Subjects to whom personal data can be disclosed or with which they may become acquainted in their capacity of Data Controllers or Data Processors within the scope of disclosure of such data.

Foreword: Your personal data shall not be disclosed for any purpose, including consultation purposes.

1. The Website Owner may disclose personal data without the express consent of the data subject, to any third party for which such disclosure is required by law, by provisions or EU regulations.

2. The Website Owner may also disclose such data, with the explicit consent of the data subject, to companies, offices, authorities and external collaborators appointed to carry out on his/her behalf data processing activities related to the purposes mentioned under point 2 and 3, section A.
The data subject has the right to be informed about any subject to whom personal data may be disclosed and can exercise such right through a simple request made to the Data Controller, as per point E.

3. The following categories of individuals, referred to under points B 1) and C 2), are entitled, in their capacity as Data Controllers and Data Processors, to access your personal data for purposes strictly related to their assigned duties: website owner staff workers, project - based contract workers, temporary contract workers, apprentices, consultants, external staff working at Website Owners premises, staff belonging to external companies appointed as Data Processors.

Rights of data subject

Pursuant to art. 7 of Leg. Decree 196/203, the data subject is entitled to exercise specific rights related to the processing of personal data. Below is the text of art.7:

1. The data subject has the right to obtain confirmation about the existence of personal data concerning him/her, even if such data has not been recorded yet, as well as the communication of such data in an intelligible form.

2. The data subject has the right to be informed about:
a) the origin of personal data;
b) the purposes and processing mode;
c) the logic applied to data processing if carried out with the aid of electronic means;
d) identification data concerning data controller, data processors and designated representative pursuant to article 5, paragraph 2;
e) entities or categories of entities to whom the personal data may be disclosed, and whoever becomes aware of the above-mentioned data as designated representatives in the States territory, or as data controllers or data processors.

3. The data subject has the right to :

a) update, rectify or complete data whenever considered necessary;

b) delete, make anonymous or block data that has been processed unlawfully, including data for which retention is unnecessary for the purposes for which they have been collected or subsequently processed;

c) attestation that the actions as per letters (a) and (b) have been notified to the entities to whom data was disclosed, also as far as their respective content, unless this requirement proves impossible to fulfil or involves a disproportionate use of resources in relation to the right to be protected.

4. The data subject has the right to object, in whole or in part: a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of collection; b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or to conduct market or communication surveys.

To exercise your rights pursuant to art. 7 of Leg.Decree196/2003, please contact: ITsGOOD srl, Via Repubblica, 5 12018 Roccavione (CN) or send an e-mail to: info@itsgood.it. Through the same procedure, you can request a complete, updated list of the Data Processors.

Data Controller and Data Processor

The Data Controller is the Website owner, as stated in the addresses published on the website.

Cookie Policy

:

Go to Iubenda's cookie policy for ITsGOOD