Interested parties: users wishing to receive information and newsletter
aixpr in its position as Data Controller of your personal data, in accordance with, and for the effects of, EU Regulation 2016/679 (hereinafter GDPR), by this note informs you that the above regulation provides for the protection of interested parties with respect to the treatment of personal data; such treatment shall be shaped in accordance with the principles of correctness, lawfulness, transparency and protection of your confidentiality and your rights.
Your personal data shall be treated in accordance with the provisions of the above regulation and confidentiality obligations provided for therein.
Aim of the treatment:
Provision of the service: Your data were acquired over time, and are treated in order to respond to your possible requests.
Legal basis: The legal basis of the treatment is by way of contract, according to the terms in which a treatment for data – following a request of information to which a reply follows – is provided for.
Marketing – receipt of the newsletter: in particular, your data, following your consent, shall be treated for the receipt of the newsletter by using the “aixpr” service in order to optimize marketing campaigns and in order to validate the e-mail addresses, which provide for the data transfer in Extra-EU countries (in particular, USA, Australia and UK).
Legal basis: The legal basis of the treatment is the consent of the interested person.
Mandatory / voluntary conferral of data:
The conferral of data by you is optional in relation to the above mentioned aims of provision of the service, but lacking in filling the required contact details could not allow to go on with the requests of information. For the aim of Marketing, the consent is free, separated and optional; the lack of the consent does not imply prejudice for surfing the website and the provision of the requested services.
Modalities of treatment: your personal data shall be treated by mainly electronic or computerized modalities such as:
• by way of electronic calculators, and/or paper, by utilizing software systems operated by third parties, or directly programmed. Every treatment is carried out in compliance with Articles 6 and 32 of GDPR and by way of the adoption of the appropriate safety measures provided for therein.
Communication: your data shall be exclusively communicated to competent parties and duly appointed for the performance of the services which are necessary for an appropriate management of the relationship, with the guarantee of protection of the rights of the interested person.
Your data shall be solely treated by expressly authorized personnel and, in particular, by the personnel who is appointed to the maintenance and update of the website and communication instruments and, if necessary, by the personnel appointed for marketing communications.
Addressees: For the performance of some activities, or in order to provide support for the functioning and organization of the activity, some data could be communicated to other subjects. Such subjects can be:
Third parties (communication to: juridical persons, public authorities, service or other institution other than the interested person, the data controller / responsible and the persons authorized as data controllers / responsible) such as, inter alia:
• Subjects / entities, for legal obligation, whose possibility to access to your data is recognized by law obligations;
Data controllers: (the physical or juridical person, the public authority, service or other institution treating personal data on account of the data controller / responsible)
• Companies or other subjects, advisors to which the power for management of fiscal, administrative, audit, legal advisory imperative rules, has been granted;
• Providers of IT systems, web services or other services necessary to achieve the aims which are fundamental to the management of the relationship.
Within our organization, your data shall be solely treated by expressly authorized personnel, with the assurance of arrangement of a confidentiality agreement.
Transfer to Extra-EU countries: Your data can be transferred to Extra-EU countries on the basis of usage of the “aixpr” service in order to optimize marketing campaigns in order to validate the e-mail addresses, necessary to the correct management of the newsletter service. The managers of such services are located: in the USA (with a guarantee of accession to the Privacy Shield Agreement), Australia and the UK, with verification of the accession to appropriate standard contractual clauses.
Diffusion: Your personal data shall not be disseminated in any way.
Retention period: We inform you that, in accordance with the principles of lawfulness, limitation of aims and minimization of data, in accordance with article 5 of GDPR, the retention period of your personal data is established for a period not higher than the achievement of the aims for which they are collected and treated and in compliance with timing for the correct provision of the requested services.
Data controller: The Data Controller , in accordance with law provisions, is aixpr, in the person of its legal representative.
You have the right to obtain by the Data Controller the cancellation (right to be forgotten), limitation, update, amendment, transfer, opposition and claim to the treatment of personal data regarding yourself, as well as in general terms you can use all your rights provided for under articles 15, 16, 17, 18, 19, 20, 21 22 of GDPR, as applicable with respect to the aims of the treatment of data.
Rights of the interested person – EU Regulation 2016/679: articles 15, 16, 17, 18, 19, 20, 21 22
1. The interested party has the right to obtain the confirmation of the existence or not of personal data regarding him, even if they are still not registered, and their communication in intelligible form.
2. The interested party has the right to obtain the indication of the:
a. origin of personal data;
b. aims and modalities of the treatment;
c. applied logic in case of treatment carried out with the help of electronic instruments;
d. identification details of the Data Controller, responsible and representative appointed in accordance with article 5, paragraph 2;
e. subjects or categories of subjects whom personal data can be communicated to, or who can become aware in their positions of representative appointed in the territory of the State, responsible or appointed.
3. The interested party has the right to obtain:
a. the update, amendment or, if he has an interest, the integration of data;
b. the cancellation, the transformation in anonymous form or the block of the data treated in violation of the law, including those data whose the conservation in relation to the scopes for which they have been collected or subsequently treated is not necessary;
c. the attestation that the operations under a. and b. above have been brought to the attention, also for what regards their content, to such persons whom the data have been communicated or diffused, except the case in which such activity is impossible or implies the use of manifestly not proportioned means with respect to the protected right;
d. the portability of data.
4. The interested party has the right to oppose, wholly or partially:
a. for legitimate reasons, to the treatment of personal data regarding himself, even if they are relevant for the aim of the collection;
b. to the treatment of personal data regarding himself for the aim of sending advertising / direct selling material or for the performance of market researches or commercial communication.
Consent
Acquisition of the consent of the interested party
Your consent for the receipt of the newsletter and the transfer to third countries (as described above) shall be registered (IP address, e-mail, date and time) by clicking on the button “I confirm my subscription” of the e-mail. Such consent shall be filed in order to prove the conferral and to permit at any moment the cancellation, in addition to all other rights above mentioned.