INFORMATION ON THE PROCESSING OF PERSONAL DATA FOR DATA COLLECTED FROM THE DATA SUBJECT
FOR PROCESSING: Master leads.
Pursuant to Art. 13 of Regulation (EU) 679/2016 on the protection of individuals with regard to the processing of personal data
Panema (hereafter the “Company” or the “Data Controller”), with registered office at Via Cantonale 11/A 6900 Lugano- Switzerland and VAT No. CHE-343.011.551, as the data controller, informs you, pursuant to Art. 13 of the European Data Protection Regulation 679/2016 (“GDPR”), regarding the processing of your personal data that will be carried out by the writer.
The Company is the controller of the personal data communicated by the User to the writer and include:
Business Name/Surname and First Name, Tax Identification Number and other identification numbers, Bank Details, Address, E-Mail Address , Phone/Mobile Number
Habits of living and consumption Topics of interest
The processing of Data is carried out by the Company in the performance of its activities. Specifically, the Data provided by the Data Subjects will be processed, by computer and non-computer tools, for the following purposes:
Business , accounting and tax obligations
The lawfulness criterion for which processing is made possible is: The processing is necessary to fulfill a legal obligation to which the data controller is subject
The basis of which is reflected in a Reference Standard: Union Standard
Required Consent for Purpose: NO
Direct Email Marketing Campaigns
The lawfulness criterion for which processing is made possible is: The data subject must give consent to the processing of his or her personal data in order to
the specific purpose
The basis of which is reflected in a Reference Standard: Union Standard
Required Consent for Purpose: YES
Commercialization of data
The lawfulness criterion for which processing is made possible is: The data subject must give consent to the processing of his or her personal data in order to
the specific purpose
The basis of which is reflected in a Reference Standard: Union Standard
Required Consent for Purpose: YES
Sharing contacts with business partners
The lawfulness criterion for which processing is made possible is: The data subject must give consent to the processing of his or her personal data in order to
the specific purpose
The basis of which is reflected in a Reference Standard: Union Standard
Required Consent for Purpose: YES
Promotional activities
The lawfulness criterion for which processing is made possible is: The data subject must give consent to the processing of his or her personal data in order to
the specific purpose
The basis of which is reflected in a Reference Standard: Union Standard
Additional notes that may describe the purpose: The activity involves sending e-mails, text messages, messages, calls (including through automated systems or bots) or notifications
Required Consent for Purpose: YES
3.Mode of Treatment
The Data will be processed by the Company using electronic and manual systems in accordance with the principles of fairness, loyalty and transparency provided for in the applicable legislation on the protection of personal data and protecting the confidentiality of the Data Subject through technical and organizational security measures to ensure an adequate level of security.
4.Data Retention
The Data provided by the Data Subject will be processed for a duration:
Start date: 12/21/2021
Criterion duration: predetermined period Duration: 24 Month(s)
Criterion Description: The obligation of preservation is conditioned by the existence of business relations with the customer and the provisions on preservation of accounting and tax data.
Persistence of information in the system is indefinite
5 Interested
Customers, Prospect Customers or Users
6.Exceptions Art. 9/10
7.Communication, Dissemination and Transfer of Data
The Data will be processed, to the extent necessary, by authorized, properly educated and trained personnel of the Data Controller as well as by personnel of third parties who provide services to the Data Controller and perform Data processing on behalf of and at the instruction of the Data Controller as data processors.
In case of communication to third parties, the recipients may be: Categories:
Recipient: Customers, carriers, shippers, agents, software users, professionals to whom we address to fulfill the obligations.
Recipient: DEST_1
Description: Social networks, messaging systems, Google platforms – Meta
Target audience:
No specific recipients to whom the data may be disclosed have been defined
More generally, in the performance of its ordinary business activities, the Data may be communicated to subjects carrying out control, audit and certification activities of the activities carried out by the Data Controller, consultants and freelancers in the context of tax assistance services, judicial and in the case of corporate transactions for which it is necessary to evaluate the company’s assets, entities and public administrations, as well as to parties entitled by law to receive such information, Italian and foreign judicial authorities and other public authorities, for purposes related to the fulfillment of legal obligations, or for the fulfillment of obligations assumed and arising from the contractual relationship, including for the need for defense in court.
Data collected will not be transferred to countries outside the eu
8.Profiling and/or automated processing activities
Data collected will not be subject to profiling or automatic processing
9.What are the rights of the Interested Party
The Data Subject may exercise, in connection with the data processing described herein, the rights provided by the GDPR (Articles 15-21), including:
receive confirmation of the existence of the Data and access to its content (rights of access); update, modify and/or correct the Data (right of rectification);
to request the deletion or restriction of the processing of Data processed in violation of the law including Data whose retention is not necessary in relation to the purposes for which the Data were collected or otherwise processed (right to be forgotten and right to limitation);
Object to the processing (right to object);
Propose a complaint to the Supervisory Authority (Data Protection Authority www.garanteprivacy.it) in case of violation of personal data protection regulations;
receive an electronic copy of the Data concerning him or her as a Data Subject, when such Data has been rendered in the context of the contract, and request that such Data be transmitted to another data controller (right to data portability).
To exercise these rights, the Data Subject may contact the Data Controller by sending a communication to:
Contact Type: E-mail
Address: papa@panema.it
When contacting us, the Data Subject should be sure to include his or her name, email/postal address and/or phone number(s) to be sure that his or her request can be handled properly.