Information within the meaning of art. 13 and 14 European Union regulation 2016/679 and of art. 13 d.lgs. n. 196/2003

Pursuant to the aforementioned legislation (Articles 13 and 14 of the European Union Regulation 2016/679, hereinafter also GDPR, article 13 of Legislative Decree no. 196/2003, hereinafter also Privacy Code), we would inform that personal data from You provided will be processed in compliance with the aforementioned law and the confidentiality obligations to which the ILCA company Srl is held. We therefore invite you to read this information.

Data Controller
The Data Controller is I.L.C.A. S.r.l., based in Via I Maggio 8 — Gaiarine (TV), in the person of the President and legal representative pro tempore Battistuzzi Costantino.

Purpose of the treatment
The personal data supplied by you are necessary for the fulfilments resulting from contractual obligations, related to the performance of the public service entrusted to the company I.L.C.A. S.r.l., as well as for the management of commercial relationships and detection of the user satisfaction degree. The data are also necessary for the fulfillment of obligations deriving from national or regional laws and regulations, or for the fulfillment of obligations deriving from European Union legislation. Data processing may also be imposed by the need to execute orders from judicial authorities, supervisory authorities or other public institutions. Finally, the possibility of data processing by the Data Controller for the purposes of exercising the right to defense in court, and for the protection of their own subjective rights and legitimate interests, is always permitted.

Methods of treatment and conservation. Retention period.
The treatment will be carried out in an automated and/or manual form, in compliance with the provisions of art. 32 of the GDPR 2016/679 on the subject of security measures, by persons specifically appointed.
Please note that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, subject to your consent — where necessary under the current regulations — free and explicit at the bottom of this information, your personal data will be kept for the period of time necessary to achieve the purposes for which they are collected and processed, or required by law, and in any case for the duration of the contractual relationship established with the Data Controller, with extension until the expiry of the statute of limitations prescribed by law.
The personal data acquired and processed, with your consent, for commercial purposes and the detection of the user satisfaction degree, will be retained for the time necessary to fulfill these purposes, and in any case no later than 5 years from the manifestation of your consent.

Scope of communication and dissemination
1. We also inform you that the collected data can be made known and accessible:
— to public institutions, judicial, supervisory and / or control authorities, in compliance with obligations deriving from European Union legislation, or due to the need to execute orders from judicial authorities, supervisory authorities and / or supervisory authorities;
— internal employees, including subsidiaries, such as data processors, external professionals and consultants, service companies for electronic processing, as data controllers responsible;
— to credit institutions or credit recovery companies, for the purpose of exercising the right to defense in court, and to protect their personal rights and legitimate interests.
2. In addition, data may be sent, in this case upon your consent, to public institutions or companies of a private nature, and used by them for:
1) send e-mails and/or messages and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Owner and detection of the satisfaction degree about the quality of services;

Transfer of personal data
Your data will not be transferred to Member States of the European Union or to third countries outside the European Union.

Particular categories of personal data
Pursuant to articles 26 and 27 of Legislative Decree 196/2003 and articles 9 and 10 of EU Regulation no. 2016/679, if you conferred your data on I.L.C.A. Srl that qualify as «particular categories of personal data» — that is, data that reveal «racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as genetic data, biometric data intended to identify unambiguously a physical person, data relating to the health or sexual life or sexual orientation of the person «- these categories of data may be processed only upon your free and explicit consent, expressed in writing at the bottom of this information.

Existence of an automated decision-making process, including profiling
I.L.CA S.r.l. does not adopt any automated decision-making process, including profiling, referred to in Article 22, paragraphs 1 and 4, of EU Regulation no. 679/2016.

Rights of the interested person
At any time, you can exercise, pursuant to art. 7 of Legislative Decree 196/2003 and articles from 15 to 22 of EU Regulation no. 2016/679, the right to:
a) request confirmation of the existence of personal data;
b) obtain information on the purposes of the processing, the categories of personal data, recipients or recipients categories to whom the personal data have been or will be communicated and, where possible, the retention period;
c) obtain the correction and deletion of data;
d) obtain the treatment limitation;
e) obtain data portability, or rather receive them from a data controller, in a structured format, commonly used and readable by automatic device, and transmit them to another data controller without hindrance;
f) oppose the processing at any time and also in the case of treatment for direct marketing purposes;
g) to oppose an automated decision-making process concerning individuals, including profiling.
h) ask the data controller to access personal data and to rectify or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability;
i) withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation;
j) to propose a complaint to a supervisory authority.

You can exercise your rights with a request sent by email to privacy@ilcareti.it