Information notice pursuant to Art. 13 of the Regulation (EU) 2016/679 (“GDPR”)
Information when personal data are collected from the data subject
1. DATA CONTROLLER, pursuant to art. 4 and 24 of the Reg. (EU) 2016/679, is Cap Design Spa, registered office in Via Meda (MB) – Via L. Busnelli 5, representend by the legal representative pro tempore.
The company has appointed the Data Protection Officer (DPO) pursuant to art.37-39 of the Reg. UE 2016/679 whose contact is: email@example.com
2. PURPOSES AND LAWFULNESS OF THE PROCESSING
The Personal data shall be processed in accordance to the requirements for the lawfulness of processing set forth by Art. 6 of the Regulation (EU) 2016/679 for the following purposes:
– With prior consent, to subscribe to the newsletter of Cap Design Spa, to receive commercial information, promotions and/or invitations to events promoted or organized by the Data Controller.
Legal basis for processing: Article 6 par. (1) Letter (a): consent of the data subject
3. RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA
Personal data provided by you may be communicated to recipients, which shall process your data as Processors (art. 28 of the Reg. EU 2016/679) and/or persons acting under the authority of the Controller and the Processor (art.29 of the Reg. UE 2016/679) for the purposes pointed in point 2 ahead. Precisely, your data may be communicated to recipients part of the following categories: -Group company for administrative-accounting purposes; - internal staff of the Data Controller; - subjects providing services for the management of the information system and communication networks (including e-mail and web sites); - studies or companies in the context of assistance and consultancy relationships; - Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request; - The subjects belonging to the aforesaid categories act as data Processors or act in complete autonomy as separate data Controllers.
4. DATA TRANSFER TO A THIRD COUNTRY AND/OR INTERNATIONAL ORGANISATION
The Data Controller uses MailChimp to send newsletters. The Rocket Science Group LLC d / b / a is a certified Privacy Shield company. Therefore, the transfer of data takes place in compliance with articles 44 and ss. of the EU 2016/679 Regulation. Specifically, the transfer is based on the art. 46 of EU 2016/679 Regulation - transfer subject to adequate guarantees.
5. DATA RETENTION PERIOD CRITERIA
The processing shall be carried out in automated and / or manual manner, with methods and tools aimed at ensuring the best security and confidentiality, by persons specifically appointed to do so.
According to the provisions set forth in art. 5 par. 1 lett. e) of the Regulation EU 2016/679, collected personal data shall be kept in a form which permits identification of data subjects for no longer than is necessary for the purposes for which the personal data are processed. Personal Data will be retained:
- Newsletter: opt-out;
6. NATURE OF UNDERWRITING AND REFUSAL
The provision of data is necessary to subscribe to the newsletter. Failure to provide it will result in the impossibility to receive the newsletter of the data controller.
7. DATA SUBJECT’S RIGHTS
The data subject have the right to obtain from the data controller, in the cases provided for, the access to personal data, the rectification, the cancellation, the limitation of processing, the portability of data processed. In addition, you have the right to object to the processing (Articles 15 et seq. of EU Regulation 679/2016) by sending an e-mail to firstname.lastname@example.org or by writing to the DPO at email@example.com . You have the right to revoke your consent at any time. You can unsubscribe from the newsletter (e-mail) of the data controller at any time by sending an e-mail to firstname.lastname@example.org with the subject "unsubscribe from automated" or use our automatic unsubscribe systems provided for e-mails only. Without prejudice to any other administrative or judicial remedy, in case you consider your data processing in contrast with Reg. UE 2016/679, pursuant to article 15 lett. f) you have the right to lodge a complaint with the supervisory authority.
8. CHANGES IN PRIVACY NOTICE
Upgrade date: 14th dicember 2018