PRIVACY POLICY
Information on the processing of personal data pursuant to Art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 “General Regulation on Data Protection – GDPR”)
Version 1.0 – Update: 11/11/2022
Information and contact details of the data controller
Data Controller:
Rocca Mazzola Undari Associati, P.IVA 10792370966, with registered office in Piazza Bertarelli no. 1, 20122 Milan (MI) (hereinafter “RMU”)
Contact details of the Data Controller
PEC: rmux@legalmail.it; Telephone: (+39) 02.87.15.68.13
OBJECT AND PURPOSE OF THE PROCESSING
RMU informs you that it will process, specifically, your common personal data, i.e. name and surname, residential address, contact details, i.e. e-mail address, telephone number, username and password and IP address, which it acquires following of your access to the site, according to the purposes and methods defined and specified below.
In particular, the personal data provided to RMU will be processed for the pursuit of the following purposes:
1. for the use of the Site, and in particular with reference to all the functions made possible by interaction with the Site through specific buttons;
2. to ensure the functioning of the Site and all the technical functionalities relating to guarantee the functioning of the Site and all the technical functionalities related to the Site, in order to allow the user the best possible browsing experience on the Site
best possible experience.
The data requested following your optional consent may be used:
3. for sending non-commercial communications, through the use of automated tools (e- mail, sms, mms, fax, telephone without operator, postings on social network accounts),
including possible subscription to the “Newsletter”;
This information notice is effective only with reference to the Site. This information notice is effective only with reference to the Site.
also as a result of automatic collection automatic collection during browsing, for the sole purpose of ascertaining and/or controlling access to the Site and/or for the sole purpose of improving the functionality of the Site, in order to guarantee a better browsing experience.
With regard to the processing of IP addresses, as well as any other browsing data data, carried out by RMU for the purpose indicated in point 2) above, please refer to to the Cookie Policy.
LEGAL BASIS OF THE PROCESSING
Except as just specified for browsing data, the communication by you to RMU of the personal data specified above has the following legal basis for the lawfulness of the processing processing the following legal bases:
– Art. 6(1)(b) and (f) of the GDPR (performance of a contract; legitimate interest) for the purposes mentioned in points 1 and 2 above.
– Art. 6(1)(a) of the GDPR (consent) for the purpose referred to in paragraph above 3.
The provision of your personal data is therefore necessary for the full compliance of the purposes referred to in points 1 and 2 above, and, consequently, your possible refusal to provide personal data may result in the non-performance of said services and functions of this website, preventing all or part of its functions.
On the other hand, the provision of your data is optional for the integral fulfilment of the purposes referred to in paragraph 3 above, and, consequently, your refusal to provide your personal data does not the said services and functions of this site, nor does it prevent all or part of the services and functions of this site, nor does it prevent all or part of its functions. You have the right to withdraw his/her consent at any time. Withdrawal of consent shall not affect the lawfulness of the processing based on the consent before revocation. Consent shall be revoked as easily as it is given.
MODALITIES OF THE PROCESSING
The processing of personal data communicated by you is carried out by means of the operations indicated in Article 4 no. 2) of the GDPR, namely: “collection, recording, organisation storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, communication, deletion and destruction of data’.
The personal data you provide is subject to automated processing by RMU and, where required, by the Data Controllers for the time strictly necessary to achieve the purposes for which they were collected, with technical and organizational methods adopted to prevent the loss of data, unlawful and/or incorrect use and unauthorized access, and such therefore, to ensure a level of security appropriate to the risk within the meaning of Article 32 of the GDPR, by specially authorized persons, in compliance with Art. 29 of the GDPR, i.e. by employees and/or collaborators of RMU in their capacity as authorised persons and/or system administrators, who may carry out operations of consultation, use, processing, comparison and any other appropriate operation in compliance with the provisions of the law necessary to ensure, inter alia, the confidentiality and security of the data as well as the accuracy, updating and relevance of the data with respect to the stated purposes and methods.
Please note, in particular, that the personal data you provide will be subject to processed only at the premises of RMU, except as specified below, will not be therefore,
not be disclosed and, pursuant to Article 13, paragraph 1, letter (e), the same may be processed only by authorised parties and/or any external data processors pursuant to Article 28 of the GDPR (in the person of individual professionals and/or complex professional associations) and/or by persons who act as autonomous data controllers, and among whom areinclude, explicitly, the hosting companies and/or technical personnel in charge of the management and/or maintenance of the website, but solely and exclusively for the purposes expressly and specifically indicated above.
SCOPE OF DATA COMMUNICATION
In relation to the purposes indicated above, the data may be communicated to the following subjects and/or categories of subjects indicated below, or they may be communicated to companies and/or persons who provide services, including external services, on behalf of RMU.
Among these, we indicate for greater clarity, by way of example but not limited to professionals and consultants also in associated form; persons who provide services for the management of the computer system and telecommunications networks (including e-mail electronic mail and management of web portals and websites – cloud storage services – hosting); institutions factoring companies, debt collection companies, credit insurance companies; legal credit insurance companies; legal, administrative and tax consultancy firms; competent authorities and/or authorities and/or Supervisory Bodies for the fulfilment of legal obligations; parties that carry out control, audit and certification of the activities carried out by RMU who act as external data controllers pursuant to Article 28 of the GDPR, or in total autonomously as entities separate from RMU.
With exclusive reference to browsing data and IP addresses, this website may share some of the data collected with services located outside Italy and the European Union area, in particular, with Google through the services of Google Analytics. Should this be necessary for any reason whatsoever, RMU hereby already ensures that the transfer of the data will be carried out in accordance with the legal provisions applicable legal provisions and, in particular, in accordance with Articles 44 – 45 – 46 – 47 – 48 and 49 of the GDPR and other applicable legal regulations.
A plugin is installed on this site with advanced privacy protection functions for the users, which do not send cookies or access cookies on the User’s browser when the opening the page but only after clicking on the plugin.
The collection and use of information by these third parties is governed by their respective privacy policies to which please refer.
Twitter https://www.twitter.com/
Linkedin https://www.linkedin.com/
DATA RETENTION PERIOD
In compliance with the principles of lawfulness, purpose limitation and minimisation of data, in accordance with Art. 5 of the GDPR, the retention period of your personal data is established for a period of time not exceeding the achievement of the purposes purposes for which they are collected and processed, i.e. for the duration the fulfilment of the aforementioned purposes, and, therefore, once the purposes of the processing have been fulfilled, the your data will be deleted from every physical and computer support.
In particular, personal data will be kept until the conclusion of the relationship contractual relationship and for storage periods dictated by mandatory laws for the purposes
administrative and accounting purposes referred to in points 1 and 2 above; until consent is revoked and in any case no longer than 10 years for the commercial purposes referred to in point 3 above.
AUTOMATED DECISION-MAKING PROCESSES AND PROFILING
RMU informs you that, for the purposes of processing your personal data, it does not use any automated decision-making processes, i.e. those aimed at making decisions based solely technological means on the basis of predetermined criteria (i.e. without human involvement). human involvement).
RMU uses technical cookies and carries out profiling activities with the help of third-party of third party profiling within the limits and in the manner better indicated in the Cookie Policy to which reference is made expressly and in full, in order to allow the User adequate and and complete information on the matter and the consequent improved management of the relative consents.
RIGHTS OF THE INTERESTED PARTY (USER)
Right of Access ex art. 15 of the GDPR and Right of Rectification ex art. 16 of the GDPR As a data subject, pursuant to Article 15 of the GDPR,
you have the right to obtain from RMY to confirm whether or not personal data concerning you is being processed, to obtain concerning you, to obtain access to the same and to all the information referred
Section 15(1)(a) to (h), by providing a copy of the data processed in a structured, commonly used, machine-readable and interoperable format. machine-readable and interoperable format.
You also have the right, pursuant to Article 16 of the GDPR, to obtain from RMU the rectification and/or the integration of the data being processed if they are out of date and/or inaccurate and/or incomplete.
Right to erasure under Art. 17 of the GDPR and Right to restrict processing under Article 18 of the GDPR
As data subject, you have the right to obtain exclusively in the cases referred to in Article 17(1)(a) to (f) of the GDPR, the deletion of data concerning you – with the exception of the cases concerning you – with the exception of the cases specifically provided for in Article 17(3).
As a data subject you, pursuant to Article to (d) of the GDPR, have the right to request and obtain from RMU, the restriction of the processing of your personal data, i.e. that such data shall not be subject to further processing and may no longer be modified. RMU shall ensure that the restriction of processing is implemented by means of appropriate technical devices which guarantee its inaccessibility and unchangeability.
Right to Data Portability under Article 20 of the GDPR
As a data subject, you have the right to receive, pursuant to Article 20 of the GDPR, from RMU personal data concerning you, the processing of which is carried out by automated means, in a structured, commonly used and machine-readable format, and you also have the right to transmit such data to another data controller, or to obtain from RMU, where technically feasible, the direct transmission of such data to another data controller specifically identified data controller.
Right to object to processing under Article 21 of the GDPR
You have the right to object at any time on grounds relating to your situation in particular to the processing of personal data concerning you pursuant to Art. 6(1) (e) and (f) including profiling on the basis of these provisions. The Data Controller Processor shall refrain from further processing the personal data, unless it can demonstrate the existence of compelling legitimate grounds for processing which override the interests, rights and freedoms of the data subject or for the establishment, exercise or defence of a legal claim.
Where personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him/her carried out for such purposes, including profiling insofar as it is related to such direct marketing.
If the data subject objects to processing for direct marketing purposes, the personal data shall no longer be processed for such purposes.
MODALITIES FOR EXERCISING THE RIGHTS OF THE DATA SUBJECT (USER)
You may exercise the rights listed above by sending a request by e-mail to to info@rmux.it.
RMU will acknowledge receipt of your request and provide you with information relating to the action taken, with reference to the exercise of your rights provided for in Articles 15 to 22 of the GDPR, within 1 (one) month of receipt of your request. If necessary, and taking into account the complexity and number of requests, RMU may extend this period by 2 (two) months, subject to reasoned notice to be sent within 1 (one) month of receipt of the request.
RMU will communicate any rectification, cancellation, restriction of opposition to all recipients, as identified in Article 4(1) (9) of the GDPR, to whom such data transmitted, unless this proves impossible and/or involves a disproportionate effort.
Following the sending of your request for rectification, erasure, restriction opposition, if RMU has reasonable doubts as to your identity, RMU will ask you for additional information to confirm your identity. Such communications will be sent by email from the above address and will be processed by the person specifically authorised for that purpose.
Finally, please note that you have the right to lodge a complaint with the Supervisory Authority (Garante per la protezione dei dati personali), as specified pursuant to Art. 13, paragraph 2, letter (d) and governed by Articles 77 et seq. of the GDPR and 141 et seq. of Legislative Decree 196/2003, as amended by Legislative Decree 101/2018. 101/2018.
