Pursuant to Articles 13 and 14 of the European General Data Protection Regulation No. 679/2016 (hereinafter also referred to as the “GDPR”), which sets forth provisions regarding the protection of personal data, we wish to inform you that the personal data you have voluntarily provided to Terra di Juso SRL, with registered office at Via Sebastiano del Piombo 17, VAT No. 13491020965, registered with the Milan Companies Register / REA FI - 2726313, in the person of the authorized representative (l.r.p.t.), certified email: terradijusosrl@legalmail.it, hereinafter also referred to simply as the “Data Controller”) will be processed by the latter using appropriate measures to ensure security and confidentiality, in compliance with the aforementioned legislation.
1. Collection of Information - Legal Basis for Processing
1.1. This privacy notice concerns your personal and tax data acquired—including verbally—directly or through third parties, which are necessary for the establishment and performance of contractual relationships (legal basis pursuant to Art. 13, para. 1, letter c), to which this privacy notice pertains.
2. Purposes and methods of data processing
2.1. The data collected is processed exclusively for the following purposes:
● to fulfill the contractual and legal obligations arising from the contract;
● to send any communications, including via email;
● to protect credit;
● to comply with legal obligations.
2.2. Data processing will be carried out both manually and using electronic—or otherwise automated—means and includes, in accordance with the limits and conditions set forth in Article 5 of EU Regulation 679/2016, all of the following operations—or sets of operations: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, disclosure, erasure, and destruction of data.
3. Nature of Data Provision
3.1. The provision of your personal data is optional. However, failure to provide the requested data, even partially, will make it impossible for the undersigned to proceed with the contractual relationship.
4. Communication and Disclosure of Data
4.1. The personal data collected will not be disclosed or communicated to third parties, except in the cases provided for in this policy and/or by law and, in any case, in the manner permitted by this policy.
4.2. The data may be made known to the data processors or persons in charge of processing appointed by our Company, within the scope of their respective functions and in accordance with the instructions received, solely for the achievement of the specific purposes indicated in this policy.
5.1. With regard to this data, you may exercise at any time the rights provided for in Articles 12 (transparency in data processing), 15 (right of access), 16 (right to rectification), 17 (right to erasure, right to be forgotten), 18 (right to restriction of processing), 19 (notification obligation in case of rectification or erasure), 20 (right to data portability), and 21 (right to object) of the GDPR.
5.2. In particular:
1. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exist, even if not yet recorded, and to have such data communicated in an intelligible form.
2. The data subject has the right to obtain, in a transparent manner and in simple and clear language, information regarding:
a. the origin of the personal data;
b. the purposes and methods of processing;
c. the logic applied in the case of processing carried out with the aid of electronic tools;
d. the identification details of the data controller, data processors, and the representative designated pursuant to the GDPR;
e. the subjects or categories of subjects to whom the personal data may be disclosed or who may become aware of it in their capacity as a representative designated within the territory of the State, as data processors, or as persons in charge of processing.
The data subject has the right to obtain:
a. the updating, rectification, or, where interested, the completion of the data;
b. the erasure, anonymization, or blocking—upon your objection—of data processed in violation of the law, including data that no longer needs to be retained for the purposes for which it was collected or subsequently processed;
c. the portability of your personal data, in a format intelligible to the recipient operator;
d. confirmation that the operations referred to in points a) and b) have been brought to the attention, including with regard to their content, of those to whom the data have been disclosed or disseminated, except where this proves impossible or involves a manifestly disproportionate effort compared to the right being protected.
4. The data subject has the right to object, in whole or in part:
a. on legitimate grounds, to the processing of personal data concerning him or her, even if pertinent to the purpose of collection;
b. to the processing of personal data concerning him or her for the purposes of sending advertising or direct sales material or for carrying out market research or commercial communication.
These rights may be exercised directly by sending an email to privacy@terradijuso.com.
5.3. Without prejudice to the rights set forth above, the data subject also has the right to lodge a complaint with the Data Protection Authority.