INFORMATIVA RESA AI SENSI DELL’ART. 14 DEL REGOLAMENTO UE 2016/679 (GDPR)
The Company Family Vision Center, as data controller, informs you that the use of this site (hereinafter, the “Site”) may involve the processing of your personal data.
The same will be used only for the purposes and in the manner indicated below.
The owner of the processing of personal data is Family Vision Center di Marco Grassi, with registered office in Viale Ercole Marelli, 19, 20099 Sesto San Giovanni (MI) – IT (hereinafter, the “Owner“).
CONTACT DETAILS OF THE DATA CONTROLLER AND DATA PROTECTION OFFICER
The Holder can be reached by registered letter with return receipt at the above address or at the following e-mail address: firstname.lastname@example.org.
PURPOSE AND LEGAL BASIS OF PROCESSING
Your personal data are collected and processed by the Owner for purposes strictly related to the use of the Site and its information services.
Your personal data may also be used in different processing operations (storage, archiving, processing, etc..) in any case in terms compatible with these purposes.
In particular, your personal data may be processed for the following purposes:
(a) to enable the provision of services to be requested,
b) to respond to requests
c) to fulfil legal obligations
d) to send promotional and marketing communications, including the sending of newsletters and market research, through automated tools (sms, e-mail, push notifications) and not (telephone with operator), even by partner companies of the Owner.
The legal basis for the processing of personal data for the purposes referred to in letters a), b) and c) is Art. 6.1 lett. b) and c) of the GDPR, as the treatments are necessary for the provision of services or to respond to requests from the person concerned, also representing a treatment necessary to fulfill a legal obligation on the part of the Owner. The provision of personal data for these purposes is optional, but failure to do so would make it impossible to activate the services provided by the Site and to respond to requests.
The data provided for the purposes referred to in letter. d) can be treated, after explicit and specific consent. The legal basis for the processing of data for these purposes is art. 6, paragraph 1, letter. a) of the Regulation. The provision of consent for such purposes is optional and, in the absence of such consent, the Data Controller will limit itself to processing the data for the purposes referred to in further points, without affecting in any way the possibility of using the services. Even if the consent to the processing for these purposes is given, it can be revoked at any time, by making a simple request to the Owner.
The Site processes only common data (name, surname, city, address, e-mail address, telephone number).
PROCESSING METHODS AND STORAGE TIMES
The data collected will be processed using electronic or automated tools, computer and telematics, or through manual processing with logic strictly related to the purposes for which the personal data were collected and, in any case, to ensure the security of the same.
Your personal data will be stored in a form that allows your identification for the time strictly necessary for the purposes for which the data were collected and subsequently processed and, in any case, within reasonable limits.
In order to ensure that your personal data is always accurate and up-to-date, in any case relevant and complete, please notify us of any changes at: email@example.com.
CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Your personal data provided will be transmitted to:
subjects who typically act as data processors pursuant to art. 28 of the Regulations, namely:
persons, companies or professional firms that provide assistance and consultancy to the Data Controller in accounting, administrative, legal, tax, financial and credit recovery matters relating to the provision of Services;
subjects with whom it is necessary to interact in order to provide the Services (e.g. hosting providers);
subjects delegated to carry out technical maintenance activities (including the maintenance of network equipment and electronic communication networks); (collectively “recipients”).
subjects, entities or authorities, independent data controllers, to whom it is mandatory to communicate your personal data under the provisions of the law or orders of the authorities;
persons authorized pursuant to art. 29 of the Regulations by the Data Controller to process personal data necessary to carry out activities strictly related to the provision of Services, who are committed to confidentiality or have an appropriate legal obligation of confidentiality.
The list of these subjects is available at the Owner and is made available upon request of the interested party to be forwarded to the addresses of the Owner.
Finally, the Owner, in case of reorganization, merger or sale may transfer to third parties affected by such operations all personal data collected and for the specific purposes for which you have given consent. In all of these cases, your consent will not be necessary.
FUNDAMENTAL RIGHTS OF THE INTERESTED PARTY AND HOW TO EXERCISE THEM
Pursuant to Article 15 of EU Regulation 679/2016, the data subject has the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to the personal data and the following information:
purposes of the processing;
categories of personal data
categories of recipients to whom the data have been or will be communicated;
period of data retention or criteria used to determine this period.
The interested party also has the right
pursuant to art. 16, to obtain from the Data Controller the rectification of inaccurate personal data concerning him/her, without undue delay;
pursuant to art. 17, to obtain from the owner the cancellation of personal data concerning him without undue delay;
pursuant to art. 18, to obtain from the Owner the limitation of the treatment when one of the following hypotheses occurs
the data subject disputes the accuracy of the personal data, for the period necessary for the Data Controller to verify the accuracy of such personal data;
the processing is unlawful and the interested party opposes the deletion of the personal data and requests instead that their use be limited;
although the Controller no longer needs the personal data for processing purposes, the personal data are necessary to the data subject for the establishment, exercise or defence of legal claims;
the data subject has objected to the processing pursuant to art. 21, paragraph 1, pending verification of whether the legitimate reasons of the Controller prevail over those of the data subject;
pursuant to art. 20, to receive personal data concerning him/her in a structured, commonly used and machine-readable format;
pursuant to art. 21, to object at any time to the processing of personal data concerning him for marketing purposes (commercial communications sent by the owner).
To exercise your rights, you can send a request to the following e-mail address: firstname.lastname@example.org.
We will inform you that we have received your request and we will respond to it within five working days. In more complex cases we will endeavor to provide you with an initial response no later than fifteen days.
THE RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
You also have the right to lodge a complaint with the competent supervisory authority.