Regulation (EU) 2016/679 of 27 April 2016 provides for the right to the protection of personal data relating to natural persons.

In compliance with this legislation, our company, which intends to process your personal data, wishes to inform you in advance, pursuant to Article 13 of Regulation (EU) 2016/679, that such processing will be carried out in accordance with the principles of lawfulness, fairness and transparency, purpose limitation, data minimisation, accuracy, storage limitation, integrity and confidentiality, and accountability, as well as with due regard for your privacy and your rights.

PURPOSES AND LEGAL BASES FOR PROCESSING

The processing is carried out for the following purposes:

a) to contact you again, following your request, in order to provide information relating to our products/services;

b) to send you newsletters following your subscription to our mailing list, containing commercial information relating to the services provided, including information about promotions, customer satisfaction surveys, news and other communications.

Pursuant to Article 6(1)(a), it is specified that the legal basis for such processing is the data subject’s consent, which must be freely and clearly given in order for the processing of personal data to be carried out, until such consent is expressly withdrawn.

Failure to provide your personal data may result in the inability to properly fulfil the relevant purposes.

METHODS OF PROCESSING

The processing of your personal data may involve, in addition to its collection, its recording, storage, modification, disclosure and deletion, and will be carried out both using paper-based records and with the aid of electronic tools, in accordance with procedures and using measures suitable to ensure the security and confidentiality of the data, in compliance with the provisions of Regulation (EU) 2016/679.

In particolare, saranno adottate tutte le misure tecniche ed organizzative idonee, come previste dalla normativa, in modo che sia garantito un adeguato livello di protezione dei dati. Le metodologie applicate garantiscono che l’accesso ai dati sia consentito alle sole persone incaricate del trattamento da parte della nostra azienda.

AUTHORISED PERSONS AND RECIPIENTS

The recipients/authorised persons to whom your personal data may be disclosed are as follows:

• authorised persons within our company;

• external parties who may, on behalf of our company, manage our IT systems and website;

• persons or entities authorised to access such data pursuant to applicable laws or regulations;

• other persons or entities as required by law.

RETENTION, STORAGE AND TRANSFER OF DATA

The data collected for the purpose referred to in point (a) above will be duly retained for a maximum period of five years from the date of the last contact.

The data collected for the purpose referred to in point (b) above will be retained exclusively for as long as the service remains active or, in any event, until the data subject withdraws their consent, which may be done at any time by using the link provided at the bottom of each communication.

Personal Data are stored on servers located within the European Union. It is understood, in any event, that should the Data Controller deem it necessary to transfer the data to servers located outside the EU, the Data Controller hereby undertakes to ensure that any such transfer of data outside the EU will be carried out in compliance with applicable legal provisions, following the execution of the Standard Contractual Clauses adopted by the European Commission.

There is no provision for the dissemination of the data (dissemination meaning disclosure to an unspecified number of persons).

DATA CONTROLLER

The Data Controller is VECARS SRL Unipersonale, with registered office at Piazzale Europa, 65 – 25068 Sarezzo BS (Italy).

DATA SUBJECTS’ RIGHTS

Ai sensi dell’art. 13, par. 2, lett. b), c), d) del Reg. UE 2016/679, rivolgendosi al Titolare del trattamento, Lei potrà far valere i seguenti diritti, relativi al trattamento dei dati personali:

the right of access (Article 15); the right to rectification (Article 16); the right to erasure (Article 17); the right to restriction of processing (Article 18); the right to data portability (Article 20); the right to object (Article 21); the right to lodge a complaint with a supervisory authority (Article 77): https://www.garanteprivacy.it/home/modulistica-e-servizi-online/reclamo; the right to withdraw consent, where provided for under Article 6(1)(a) or Article 9(2)(a).