Advisory notice under and by the operation of articles 13-14, of the Regulations EU 2016/679

(European Regulations on the protection of personal data)

Dear Sir or Madam,

We wish to inform you that the Regulations  EU 2016/679 ("The European Regulations on the protection of personal data)") lay down provisions for the protection of natural persons with regard to the processing of personal data as well as provisions on the free movement of personal data. The Regulations in question protect the fundamental rights and freedoms of natural persons, and in particular the right to the protection of personal data.

Therefore, pursuant to article 13 of the Regulations, we hereby provide you with the following information:

1.    The identity and contact details of the controller and where applicable of the controller’s representative.

OMEGA S.r.l., Via Saloni, 59 30015 Chioggia (VE), telephone 041 401029, email privacy@omegachioggia.it

2.    The purposes and legal basis of the processing for which the personal data are intended

The processing of the personal data that you have provided is performed in order to comply with contractual obligations and satisfy your specific requests as well as to discharge legal requirements, especially those of an accounting and tax nature.

3.    Period of data storage (or if this is not possible, the criteria used to determine that period)

Data are processed for the duration of the contractual relations entered into and subsequently for the time needed to discharge all legal obligations.

4.    Processing arrangements

With regard to the foregoing purposes, your data will be processed by automated means as well as by a manual filing system. Processing operations are performed in such a way as to guarantee the active and passive security and confidentiality of your personal data.

5.    Nature of personal data

Your personal data inherent in the performance of the service you requested will constitute the subject matter of processing.

6.     The obligatory or consensual nature of data provision

The provision of data is obligatory for whatever may be required by legal and contractual obligations. Therefore, refusal to provide them either wholly or in part will make it impossible for the Company to perform the contract or carry out its obligations correctly,  such as those of a tax, insurance, accounting nature or otherwise related to the relationship entered into.

7.    Context of data communication and transfer

Without prejudice to communications made in compliance with legal and contractual obligations, the data collected and processed may only be communicated for the above-mentioned purposes to:

-       our authorised technicians

-       banks, commercial information companies, debt recovery companies and credit insurance companies

-       freelancers and consultants

-       software houses

-       servicing / maintenance companies

8.       Data subjects’ rights

8.1 Art. 15 (right of access) of the Regulations EU 2016/679

The data subject shall have the right to obtain from the controller confirmation as to whether or not personal data concerning him or her are being processed and, in this case, to obtain access to the personal data and the following information:

a)       the purposes of the processing;

b)      the categories of personal data concerned;

c)       the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;

d)      the envisaged period for which personal data will be stored, or if not possible, the criteria used to determine that period;

e)      the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;

f)        the right to lodge a complaint with a supervisory authority;

g)       the existence of automated decision-making, including profiling and, at least in those cases, meaningful information about the logic involved as well as the significance and the envisaged consequences of such data processing for the data subject.

8.2 Art. 16 (right to rectification) of the Regulations EU 2016/679

The data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject shall have the right to have incomplete personal data completed, also by providing a supplementary statement.

8.3 Art. 17 (right to erasure) of the Regulations EU 2016/679

The data subject shall have the right to obtain from the controller the erasure of personal data concerning him or her without undue delay and the controller shall have the obligation to erase personal data without due delay where one of the following grounds applies:

a)       the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;

b)      the data subject withdraws consent on which the processing is based according to point (a) of Article 6 (1) or point (a) of Article 9 (2), and where there is no legal ground for processing;

c)       the data subject objects to the processing pursuant to Article 21, (2) and there are no overriding legitimate grounds for the processing, or the data subject objects to the processing pursuant to Article 21 (2);

d)      the personal data have been unlawfully processed;

e)      the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the  controller is subject;

f)        The personal data have been collected in relation to the offer of information society services referred to in Article 8 (1) of the Regulations EU 2016/679

8.4 Art. 18 (right to the restriction of processing) of the Regulations EU 2016/679

The data subject shall have the right to obtain from the controller restriction of processing where one of the following applies:

a)      the accuracy of the personal data is contested by the the data subject, for a period enabling the controller to verify the accuracy of the personal data;

b)     the processing is unlawful and the data subject opposes the erasure of the personal data and requests the restriction of their use instead;

c)      the controller no longer needs the personal data for the purposes of the processing but they are required by the data subject for the establishment, exercise or defence of legal claims;

d)     the data subject has objected to processing pursuant to Article 21 (1) of the Regulations EU 2016/679 pending the verification whether the legitimate grounds of the controller override those of the data subject.

8.5 Art.20 (right to data portability) of the Regulations  EU 2016/679

1. The data subject shall have the right to receive the personal data concerning him / her provided to a data controller in a structured, commonly used and machine-readable format and has the right to transmit those data to another controller without hindrance from the controller to which the personal data have been provided, where:

a)       the processing is based on consent pursuant to point (a) of Article 6 (1) or point (a) of Article 9 (2) or on a contract pursuant to point (b) of Article 6 (1), and   

b)      the processing is carried out by automated means.

2. In exercising his or her right to data portability pursuant to paragraph 1, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.

3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17 (right to erasure). This right shall not apply to processing necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

4.  The right referred to in paragraph 1 shall not adversely affect the rights and freedoms of others.

8.6 Art. 21 (right to object) of the Regulations EU 2016/679

1. The data subject shall have the right to object on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her which is based on point (e) or (f) of Article 6 (1) including profiling based on those provisions.

2. Where personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such marketing, which includes profiling to the extent that it is related to such direct marketing.

9.       Withdrawal of consent to processing and the exercise of the rights under point 8

You have been recognised the right to withdraw your consent to the processing of your personal data by sending a registered letter with notification of delivery to the following address: OMEGA S.r.l., Via Saloni, 59 30015 Chioggia (VE) accompanied by a copy of an identity document and the following wording: <<withdrawal of consent to the processing of all my personal data>>. At the conclusion of this operation your personal data will be removed from databases as early as possible.

If you would like further information on the processing of your personal data, or the exercise of the rights indicated in the foregoing point 8, you can send a registered letter with notification of delivery to the following address: OMEGA S.r.l., Via Saloni, 59 30015 Chioggia (VE). Before being able to provide or modify any information, it may be necessary to verify your identity and submit some questions to you. A reply will be given as soon as possible.

Chioggia, 25/05/2018