Opstart S.r.l. in its capacity of Data Controller with regard to the processing of your personal data pursuant to (EU) Reg. 2016/679 (hereinafter the 'GDPR'), hereby informs you that the said regulation protects data subjects with regard to the processing of their personal data and that the said processing will take place in a fair, lawful, transparent manner which protects your privacy and your rights. Your personal data will be processed in accordance with the terms of the above legal provisions and the confidentiality obligations contained therein
PURPOSES AND LEGAL BASIS OF PROCESSING: further to your consent, your personal data may be used for the following purposes: sending promotional and commercial communications as well as newsletters from Opstart S.r.l and possible profiling activity (optional).
The conferment of data is optional for you with regard to the above-mentioned purposes, and any refusal to treatment does not compromise the continuation of the relationship or the adequacy of the treatment itself.
PROCESSING PROCEDURES: your personal data may be processed by the following ways: using electronic calculators running self-managed software or directly engineered; using electronic calculators running software managed by third parties; manual personal data processing with paper filing system; creating profiles related to customers, suppliers or consumers; processing of data collected by third parties; collection of data in public places or open to the public; data collection through forms, coupons and questionnaires; collection of data by computer or telematic system; contract data processing by third parties; computer processing.
All data are processed in compliance with the procedures specified in Articles 6 and 32 of the GDPR and with the adoption of the appropriate security measures required.
DATA PROCESSORS: your data will only be processed by staff specifically authorized by the Data Controller, and specifically by the following categories of staff: programmers and analysts; administration office; commercial office.
COMUNICAZIONE DEI DATI: i suoi dati potranno essere comunicati a soggetti esterni per una corretta gestione del rapporto ed in particolare alle seguenti categorie di destinatari tra cui tutti i responsabili del trattamento debitamente nominati: soggetti necessari per l’erogazione dei servizi offerti quali, a titolo esemplificativo, l’invio di e-mail e comunicazioni.
DISCLOSURE: your data may be disclosed to external entities for the correct management of the relationship and specifically for the following categories of recipients, including all the duly designated Data Processors: subjects necessary for the provision of the services offered such as, by way of example, the sending of e-mails and communications.
DISTRIBUTION: your personal data will not be distributed in any way.
DATA TRANSFER: your personal data may also be transferred, only for the aforesaid purposes, to the following countries: EU Countries; Safe extra EU Countries; United States.
DATA CONTROLLER: Opstart S.r.l. (VAT 04067590168) with registered office in Largo Adua n. 1, 24128 - Bergamo (BG).
DATA STORAGE PERIOD: in accordance with the principles of lawfulness, limitation of purpose and minimization of data, pursuant to Art. 5 of the GDPR, the data storage period for your personal data is established as a period of time not exceeding the purposes for which the data were collected and processed and complying with the compulsory times required by law.
RIGHTS OF THE DATA SUBJECT: you have the right to obtain from the owner the cancellation (right to be forgotten), the limitation, the updating, the rectification, the portability, the opposition to the processing of personal data concerning you, as well as in general you can exercise all the rights provided by Articles. 15, 16, 17, 18, 19, 20, 21, 22 of the GDPR. You are entitled, by application to the Data Controller, to obtain the erasure (right to be forgotten), restriction, updating, rectification and portability of your personal data, to object to their processing, and in general to exercise all your rights under articles 15, 16, 17, 18, 19, 20, 21 and 22 of the GDPR. The data subject has the right to obtain confirmation as to whether or not personal data concerning him or her exist, regardless of their being already recorded, and disclosure of such data in intelligible form, and the right to lodge a complaint with the supervisory Authority. The data subject has the right to be informed of: the source of the personal data; the purposes and methods of processing; the logic applied if the data are processed by electronic devices; the identification data concerning the Data Controller, the Data Processors and the representative designated as per Article 5.2; the entities or categories of entity to whom or which the personal data may be disclosed and who or which may get to know said data as designated representative in the State's territory, as data processors or as persons in charge of the processing. The data subject is entitled to obtain: a) the updating, rectification or, where interested therein, integration of the data; b) the erasure, anonymization or blocking of data that have been unlawfully processed, including data whose retention is not necessary for the purposes for which they were collected or subsequently processed; certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were disclosed or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared to the right that is to be protected; the portability of the data. The data subject has the right to object, in whole or in part: on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection; to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.