This document has been drafted in compliance by article 13 of REGULATION (EU) 2016/679 (following settlement) in order to help natural persons to know how personal data are used on www.nati.it (following web site) by Nati’ srl and, if required, to sign off a conscious processing of personal data.
In any case, information and details that yourself provided or otherwise acquired via web site, will be processed in compliance with the provisions of the regulation and confidentiality obligations that inspire the company’s activities.
According to the provisions of the regulation, the data processing by the company will be based on the principles of lawfulness, correctness, transparency, purpose and retention limits, data minimization, accuracy, integrity and confidentiality.
- Holder of GDPR treatment:
The holder of the processing of his personal data is the company. For any information concerning the processing of your personal data by the company, including the list of data processors, you can write to the following address email@example.com
- Personal data object of the treatment:
When you fill out the form of contract on the site is required to provide us with some of your personal information. In particular, his name, surname and e-mail address. We may also subsequently request your date of birth, tax code, residential and / or domicile address, telephone number.
In accordance with article 4 of the regulation “personal data” also includes any additional data or information suitable to identify it that you can in any case notify us.
We also report that:
- Navigation data and cookies
the computer systems and the software procedures for the operation of the site, acquire, during their normal operation, some data whose transmission is implicit in the use of internet communication protocols.
- Personal data provided voluntarily
- Personal data of third parties provided voluntarily
it may occur that you communicate personal data of third parties to you to the company. With respect to these hypotheses, he is appointed as an independent data controller, assuming all the legal obligations and responsibilities. In this sense, you give the company the widest indemnity with respect to any objection, claim, request for compensation for damage from treatment, etc. that it should reach the company from third parties whose personal data are applicable.
- third-parties websites
- 3)Purpose of the treatment
your personal data will be processed, with your consent where necessary, for the following purposes:
- To find specific requests made by the company
- fulfill any obligations under applicable laws, regulations or community legislation, or satisfy requests from authorities.
- 4)Legal office of the treatments
The legal office of the processing of your personal data for the purposes referred to in Article 3 letter a) is Article 6 (1) (b) of the Regulation (“Processing is necessary for the execution of a contract of which the data subject is a party or for the implementation of pre-contractual measures taken at the request of the same”) as they are necessary in order to find specific requests made by the company. The provision of your personal data for this purpose is optional, but any failure to provide it would make it impossible for the company to meet your requests. the purpose referred to in Article 3 letter. b) represents a legitimate processing of your personal data pursuant to art. 6 (1) (c) of the regulation (the processing is necessary to fulfill a legal obligation to which the data controller is subject).
Once the personal data have been provided, the processing is necessary to fulfill the legal obligations to which the company is subject.
- 5)Recipients of personal data
Your personal data may be shared, for the purposes referred to in Article 3, with:
- subjects that typically act as data controllers, or: individuals, companies or professional firms that provide assistance and advice to the company. the subjects with whom it is necessary to interact / delegate to perform technical maintenance activities on the site, including the maintenance of network equipment and electronic communications networks.
- subjects, bodies or authorities that are obliged to communicate their personal data in accordance with the law or orders of the authorities themselves.
- persons authorized by the company to process personal data necessary to carry out activities strictly related to the site, whether they are committed to confidentiality or have an appropriate legal obligation of confidentiality. (es. company employees) (recipients).
6) Personal data transferring
Your personal data is stored on servers and processed by the company within the European economic area.
Some of your personal data are shared with recipients that could be found outside the European economic area. the processing of personal data by these recipients takes place, in any case, in compliance with the regulation. the transfers can be based on an adequacy decision, on the contractual clauses standards approved by the European commission or on another suitable legal basis. More information about this can be requested at the following address: firstname.lastname@example.org
7) Processing methods and retention time of personal data
your personal data will be processed electronically or in any case automated, computerized and telematic, or through manual processing with logic strictly related to the purposes for which your personal data were collected and, in any case, in such a way as to guarantee security in any case of the same.
Your personal data processed for the purposes referred to in Article 3 letter. a) will be kept for the time strictly necessary to achieve the same purpose.
your personal data processed for the purposes referred to in Article 3 letter b) will be kept for the time provided for by the specific obligation or applicable law.
More information about the processing of your personal data, the period of storage of personal data and the criteria used to determine this period can be requested at the following address email@example.com
8) Rights of the interested parties
In accordance with articles 15 and following of the regulation, you have the right to request the company, at any time, access to your personal data, rectify or cancel them or oppose their treatment. You have the right to request the limitation of processing in the cases provided for in Article 18 of the regulation, as well as to obtain, in a structured format, in common use and readable by automatic device the data concerning you, in the cases provided for in Article 20 of the regulation.
Requests must be sent in writing to the following address: firstname.lastname@example.org
In any case, you are always entitled to lodge a complaint with the competent supervisory authority (guarantor for personal data protection), pursuant to Rule 77 of the Rules of Procedure, if you believe that the processing of your personal data is contrary to the law in force.
This private policy is effective from 25 May 2018.