Information pursuant to Article 13 of Regulation (EU) 2016/679 on the protection of personal data (GDPR) and request for consent to the processing of personal data collected from the Data Subject

The company Patavium Design srl with registered office at Via L. Pierobon, 105, 35010 Limena (PD), VAT No. IT04608400281 and Tax Code IT04608400281 in its capacity as Data Controller (hereinafter, “Patavium Design srl” and/or “Data Controller“) as defined in the applicable legislation, whose contact details are:

Tel. 049503801 – Fax 0499829074

Email: pataviumdesign@pec.it

wishes to inform you pursuant to Article 13 of EU Regulation 2016/679 (hereinafter referred to as the “REGULATION”) that it assumes the role of controller of the personal data that you will provide and that it will process such data for the purposes and in the manner set out below.

It is hereby clarified that this information is provided only for the website https://www.pataviumdesign.com/ (“Website”) and the blog connected to it, and does not apply to other websites that may be accessed via external links. It is to be understood as Information provided pursuant to Article 13 of the Applicable Regulations to those who interact with the Website or the blog connected to it.

It is hereby specified that pursuant to and for the purposes of Article 12 of the Applicable Regulations, we wish to inform you that the personal data you provide to us will be recorded, processed, and stored in our archives, both paper and electronic, in compliance with the appropriate technical and organizational measures referred to in Article 32 of the GDPR. The processing of personal data will be carried out using tools and procedures suitable to ensure their security and confidentiality.

Index

1. Type of Data
2. Purposes and legal basis of processing that do not require the consent of the data subject
3. Purposes and legal basis of processing that require the consent of the data subject
4. Recipients of personal data
5. Transfer of data to Third Countries
6. Data retention period
7. Obligation/option to provide personal data
8. Rights of the Data Subject
9. Methods of processing
10. Communication and provision of data

 

1. Type of Data

Patavium Design srl may request, even partially, the following data:

• Email, title, name, surname, telephone, country, address, city, postal code, province, tax code or VAT number;
• browsing data;

Should you provide personal data of third parties (therefore not directly relating to you) to Patavium Design srl, you act as an independent data controller, assuming all legal obligations and responsibilities. In this regard, you grant the broadest indemnity with respect to any dispute, claim, request for compensation for damages arising from processing, etc. that may be received by Patavium Design srl from third parties whose personal data have been processed through your voluntary submission in violation of applicable data protection regulations. In any case, should you provide or otherwise process personal data of third parties, you guarantee from now on—assuming all related responsibility—that this particular case of processing is based on an appropriate legal basis pursuant to Article 6 of the Regulation that legitimizes the processing of the information in question.

2. Purposes and legal basis of processing that do NOT require the CONSENT of the data subject

Your personal data will be processed for the following purposes:

1. a) to establish, conclude, and execute a contract concerning the products and/or services distributed by Patavium Design srl and to respond to your requests following the purchase and relating to the goods or services purchased;
2. b) fulfillment of tax or accounting obligations;
3. c) for customer management (customer administration; administration of contracts, orders, shipments, and invoices);
4. d) to assert or defend a right in court, as well as in administrative proceedings or in arbitration and conciliation procedures in cases provided for by laws, EU regulations, and regulations;
5. e) to comply with obligations provided for by law, regulation, EU legislation, or an order from the Authority;

The processing referred to in the above letters a), b), c), d) is necessary for the provision of the service requested by the user, with the consequence that Patavium Design srl is not obliged to obtain specific consent for the processing of data, as the legal basis for the processing of your personal data for the purposes indicated above is Article 6(1)(b) of the Regulation (“[…] processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract”) and Article 6(1)(c) of the Regulation (“[…] processing is necessary for compliance with a legal obligation to which the controller is subject”).

3. Purposes and legal basis of processing that require the consent of the data subject

Subject to your consent, your data may be processed by Patavium Design srl also for the following purposes:

1. f) marketing: through the sending of newsletters or by email in order to propose offers and commercial initiatives relating to products or services of Patavium Design srl as well as for conducting market research or other customer satisfaction initiatives promoted by the Controller.

It is understood that the processing of data for this purpose will only be possible with the consent of the data subject pursuant to Article 6(1)(a) of the Regulation. Consent may be withdrawn at any time freely in the manner indicated in point 6 below or through the unsubscribe link available in each electronic communication. Any failure to provide or withdrawal of consent will not in any way affect the performance of the contract.

1. g) profiling: meaning activities aimed at storing and evaluating information relating to recent visits to our website and how the user moves through different sections of the same for analysis purposes and to understand how users use our website in order to make it more intuitive, being able to use such information to direct promotional activities relevant to your interests, which we have identified based on the articles you have read or the pages of the website you have visited.

It is understood that the processing of data for this purpose will only be possible with the consent of the data subject pursuant to Article 6(1)(a) of the Regulation. Consent may be withdrawn at any time freely in the manner indicated in point 6 below. Any failure to provide or withdrawal of consent will not in any way affect the performance of the contract.

With regard to the processing referred to in the above letters f) (marketing purposes) and g) (profiling purposes), therefore, your consent is required.

With reference to marketing and profiling activities, it is specified that, in the event of lack of specific consent to processing by the user, it will not be possible to carry out the aforementioned activities, without prejudice to the fact that it will be possible to follow up on activities resulting from the conclusion of the contract.

4. Recipients of personal data or categories of recipients of personal data

Personal Data may be communicated, to the extent necessary, to the categories of recipients including:

1) authorized personnel, adequately instructed and trained by the Controller, who have committed to confidentiality or have an adequate legal obligation of confidentiality;

2) personnel of third parties who provide services to the Controller and who process data on behalf of and on the instructions of the latter as Data Processor, including:

– companies or professional firms that provide assistance, consultancy, or collaboration in accounting, administrative, legal, tax, and financial matters with whom a contract has been concluded pursuant to and for the purposes of Article 28 of the Regulation;

– third-party companies that manage the blog and/or marketing campaigns with which a contract has been concluded pursuant to and for the purposes of Article 28 of the Regulation;

– third-party companies that manage data on our behalf by virtue of the software programs used for the management of data provided by you;

In any case, personal data may be communicated to judicial authorities in the exercise of their functions when required by the Applicable Regulations.

For the subjects indicated in nos. 1 and 2, only the category of recipients is indicated, as they are subject to frequent updates and revisions. Therefore, Data Subjects may request the updated list of recipients by contacting the Data Controller through the contact details indicated above.

Disclosure – The undersigned will not indiscriminately disclose your data, or in other words, will not make it known to unspecified subjects, including through making it available or accessible for consultation.

5. Transfer of data to Third Countries

Some of your Personal Data are transferred to Recipients who may be located outside the European Economic Area. Patavium Design srl ensures that the electronic and paper processing of your Personal Data by Recipients takes place in compliance with the Applicable Regulations, all in accordance with the principles indicated in Articles 45 and 46 of the GDPR regarding the existence of an adequacy decision by the European Commission or appropriate safeguards.

6. Data retention period

Personal data will be stored for the period strictly necessary to pursue the specific purposes of the processing for which the user has given consent and, specifically:

– for the purposes indicated in letters a), b), c), d), e) of point 2 above for the time necessary to fulfill contractual obligations and, in any case, not beyond 10 years from the time of collection of your data for compliance with regulatory obligations and, in any case, not beyond the terms established by law for the limitation of rights;

– for the purposes indicated in letter f) of point 3 above (i.e., for direct marketing purposes) and letter g) of point 3 above for 24 (twenty-four) months from the time consent to processing is given;

7. Obligation/option to provide personal data

Patavium Design srl specifies that the communication of data for the purposes referred to in point 1 letters a), b), c), d), e) above arises from a legal obligation and/or is necessary for the conclusion of the contract and that in the event of failure to communicate, Patavium Design srl will not be able to proceed with the execution of the contract.

With regard to the data collected for the purposes referred to in point 2 letters f) (marketing purposes) and letter g) (profiling purposes) above, it is specified that communication is optional and that Patavium Design srl will be authorized to process only upon collection of consent given by the data subject.

8. Methods of processing

Pursuant to and for the purposes of Articles 12 et seq. of the GDPR, we wish to inform you that the personal data you provide to us will be recorded, processed, and stored in our archives, both paper and electronic, in compliance with the appropriate technical and organizational measures referred to in Article 32 of the GDPR. The processing of your personal data may consist of any operation or set of operations among those indicated in Article 4, paragraph 1, point 2 of the GDPR.

The processing of personal data will be carried out using tools and procedures suitable to ensure their security and confidentiality and may be carried out, directly and/or through delegated third parties, both manually using paper media and with the aid of computer means or electronic instruments. The data, for the purposes of proper management of the relationship and compliance with legal obligations, may be included in the Controller’s internal documentation and, if necessary, also in the records and registers required by law.

9. Rights of the data subject

You may, at any time, exercise the rights indicated below, and in particular:

1. Access personal data: obtain confirmation as to whether or not processing of data concerning you is underway and, if so, access to the following information: the purposes, the categories of data, the recipients, the retention period, the right to lodge a complaint with a supervisory authority, the right to request rectification or erasure or restriction of processing or to object to processing, as well as the existence of automated decision-making;
2. Request rectification or erasure of the same or restriction of processing concerning them; by “restriction” is meant the marking of stored data with the objective of limiting their processing in the future;
3. object to processing: object on grounds relating to your particular situation to the processing of data for the performance of a task in the public interest or for the pursuit of a legitimate interest of Patavium Design srl
4. Data portability: in the case of automated processing carried out on the basis of consent or in performance of a contract, to receive in a structured, commonly used, and machine-readable format the data concerning you; in particular, the data will be provided to you by the Controller in .xml format, or similar;
5. Withdrawal of consent to processing for marketing purposes, both direct and indirect, market research; the exercise of this right does not in any way affect the lawfulness of processing carried out before the withdrawal;
6. Lodge a complaint pursuant to Article 77 of the GDPR with the competent supervisory authority based on your habitual residence, place of work, or place of alleged infringement of your rights; for Italy, the competent authority is the Garante per la protezione dei dati personali, which can be contacted through the contact details provided on the website http://www.garanteprivacy.it.

The aforementioned rights may be exercised by sending an appropriate request to the Data Controller through the contact channels indicated in Article 1 of this information notice. Requests relating to the exercise of user rights will be fulfilled without undue delay and, in any case, within one month of the request; only in cases of particular complexity and the number of requests may this term be extended by a further 2 (two) months.

10. Communication in case of violation of the rights of data subjects

It is specified that should a breach of your personal data occur that presents a high risk to your rights and freedoms, Patavium Design srl will proceed to communicate the breach without undue delay and in compliance with the company policies prepared to manage such a crisis situation and in any case in compliance with the provisions of Article 34 of the Regulation.