The company Natali Golosità Srl, with registered office in (41125) Modena (MO), Via Riccione, no. 49, enrolled in the Company Registry of Modena R.E.A. no. MO-441066, Fiscal Code and VAT no. 04077640367l, in the person of its legal representative pro tempore, Silvia Bertucci (hereinafter, Natali Golosità), in its capacity as data controller (hereinafter, the Data Controller), informs, pursuant to Art. 13 EU Regulation No. 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter, the GDPR) that the data will be processed as follows.

***

1. Purpose of the Processing

1.1 The Controller processes personal and identification data (first name, last name, address, telephone, email) (hereinafter, Personal Data) communicated when accessing its premises.

2. Purposes of the processing

2.1 The processing of Personal Data is carried out by the Controller for purposes connected with or instrumental to

a) to the drafting, negotiation and conclusion of commercial contracts and their subsequent management

b) c) to the performance of the activity of access control to its business premises; for the access and use of its website.

2.2 The provision of Personal Data is compulsory for the pursuit of the purposes set out in article 2.1 above. Therefore, any refusal to provide Personal Data may prevent the Controller from accessing its premises.

3. Modalities of processing

3.1 Processing of Personal Data means any operation or set of operations, performed with or without the help of automated processes, referred to in Article 4(2) GDPR, namely collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction. Personal Data shall be subject to both paper and electronic processing.

3.2 The Controller shall process the Personal Data for the purpose of fulfilling the purposes, set out in article 2 of the Information Notice above, and shall retain it for a period of [indicate retention period]. Once this retention period has expired, the Personal Data will be destroyed or made anonymous.

4. Access to data

4.1 The Personal Data may be made accessible to employees and collaborators of the Controller, in their capacity as persons in charge and/or internal processors and/or system administrators.

5. Data communication

5.1 Without the need for express consent pursuant to Article 6, letters b) and c) GDPR), the Data Controller may communicate Personal Data to those subjects to whom communication is obligatory by law (e.g. Judicial Authorities). These subjects will process the Personal Data in their capacity as autonomous data controllers. Apart from the aforesaid obligations, Personal Data will not be communicated to third parties other than the Data Controller or the subjects to whom access is granted pursuant to article 4 of the privacy policy.

6. Data transfer

6.1 The management and storage of Personal Data shall take place on servers located within the European Union of the Data Controller and/or of third party companies appointed and duly appointed as data processors. Personal Data may be transferred outside the European Union. The Data Controller ensures that the transfer of data to non-EU countries will be carried out guaranteeing the data subject the rights and guarantees provided by the GDPR.

7. Rights of the data subject

7.1 The data subject is guaranteed the rights, namely, 

a) the right to obtain confirmation of the existence or not of Personal Data concerning him/her, even if not yet recorded, and their communication in intelligible form;

b) the right to obtain information on the origin of the Personal Data, the purposes and methods of processing, the logic applied in the event of processing carried out with the aid of electronic instruments, the identification details of the Data Controller, of the data processors and of the representative designated pursuant to Article 3(2) of the GDPR, of the entities or categories of entity to whom or which the Personal Data may be communicated or who or which may become aware of it in their capacity as designated representatives in the territory of the State, data processors or persons in charge of processing;

c) the right to obtain 1) updating, rectification or, where interested therein, integration of the data, 2) erasure, anonymisation or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed 3) certification to the effect that the operations as per numbers 1) and 2) above have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected;

d) the right to object, in whole or in part, 1) on legitimate grounds, to the processing of Personal Data concerning him/her, even if pertinent to the purpose of collection, 2) to the processing of Personal Data concerning him/her for the purpose of sending advertising material.

7.2 Where applicable, the data subject shall also have the rights to be forgotten, to restriction of processing, to data portability as well as the right to complain to the Data Protection Authority.

8. How to exercise your rights

8.1 The interested party may exercise its rights at any time by means of a communication sent by registered mail with return receipt to Natali Golosità Srl, Via Riccione, 49 (41125) Modena (MO), or by PEC to the address nataligolosita@legalmail.it.

9. Minors

9.1 The Owner's website and services are not intended for minors under the age of 18 and the Owner does not intentionally collect personal information referring to minors. In the event that information on minors is involuntarily recorded, the Controller shall proceed to delete it.

10. Data Processors and Persons in Charge of Processing of the Controller

10.1 The updated list of data processors and persons in charge of the processing is kept at the Data Controller's head office.

11. Amendments to this Information Notice

11.1 This Information Notice may be subject to change. It is the data subject's responsibility to check regularly for any updates.