INFORMATION PROCESSING DATA
(Compliant to Article 13 of the EU Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016)
The data holder is ECOFORUM SRL, in the person of the legal representative, with registered office in Avellino (AV) at via Verdi, 30 – C.F. VAT number: 02717090647
- Identity of data processing
The collection and processing of data is carried out by ECOFORUM SRL for the activities and services connected to the web-site and takes place at the aforementioned company headquarters and are only handled by technical personnel in charge of the processing.
Navigation data
The computer systems and software procedures used to let this website work properly can collect, during their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
These informations are not collected to be associated with identified interested parties, but by their very nature could, through processing and association with data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of computers used by users who connect to the site, where required.
Data provided voluntarily by the user
The optional, explicit and voluntary sending of electronic mail to the addresses indicated on this website entails the subsequent acquisition of the sender’s address, necessary to respond to requests, and of any other personal data included in the message.
Cookies
As habit of all websites, this site also uses cookies, small text files that allows you to keep information on visitor preferences, to improve the site’s functionality, to simplify navigation by automating procedures (eg. Login, site language) and for site usage analysis.
Session cookies are essential in order to distinguish between connected users, and they are useful to avoid that a requested functionality can be provided to the wrong user, as well as for security purposes to prevent cyber attacks on the site.
Session cookies do not contain personal data and leasts only for the current session, i.e. until the browser is closed.
All best highlighted in the privacy policy / Cookie found on the site: www.kevinflower.com
- Processing methods
The data will be processed – by the persons in charge of processing – with manual, IT and telematic tools in the context and according to the purposes specified above and, in any case, always respecting the security and confidentiality of the same, also in compliance with the law and the provisions of the Guarantor for the protection of personal data.
In particular, it is guaranteed to keep and control the personal data being processed, also in relation to the knowledge acquired on the basis of the technical process, the nature of the data and the specific characteristics of the processing, so as to minimize, by adopting of suitable security measures, the risks of destruction or loss, even accidental, of the data itself, of unauthorized access to the processing or not permitted or not in accordance with the purposes of the collection.
- Responsible for data processing
The Data Processing Manager: Rossella Biondi.
The designated managers constitute the contact point for the interested parties who wish to receive information on the processing of their data and / or for the Control Authority; the same can be contacted at the e-mail-pec address: ecoforum@pec.it.Data processors
The appointees are the physical persons who, under the direct authority of the owner of the data or of the subjects appointed by the same, carry out the operations of processing of personal data.
Ecoforum s.r.l. guarantees that it has appointed its appointees in writing and takes care to provide the aforementioned subjects with written and detailed instructions regarding the methods of processing, in compliance with the provisions of the law.
In the event of changes in the attributions of the single appointees, the latter will be communicated in writing.
- obligation of supervision and control
Ecoforum s.r.l. guarantees to carry out training activities for its personnel involved in processing operations, based on their respective duties, diversifying the level of detail and operating instructions based on the types of data processed by the Distributors during their activity.
Therefore, by virtue of this deed, we guarantee to supervise the work of our Data Processors.
- Purpose and legal basis of data processing
The data collected and processed will be used exclusively for the following purposes: COMMERCIAL.
The processing of personal data – including any sensitive data (“special categories of data” art. 9 GDPR) and relating to criminal convictions or crimes (“judicial” art. 10GDPR) for which your consent is required to be expressed at the bottom to this information – collected, it takes place for the management purposes identified above.
All the data collected are therefore processed exclusively for purposes related to the activity of the Data Controller, whose legal bases can be found at the time of acceptance and signing of the casting procedure.
In the absence of a written document, the processing of data will be carried out on the explicit consent of the interested party and considered as a condition of lawfulness pursuant to and for the purposes of art. 6 of the EU Regulation.
The services / products offered by the owner are reserved to subjects legally able, on the basis of the national reference legislation, to conclude obligations
- Nature of data provision
The provision of personal data and the consequent processing by the Data Controller, for the aforementioned purposes, are necessary for the establishment, for the continuation and for the correct management of the relationship between Data Controller and Data Subject or must be understood as mandatory based on law, regulation or legislation; any refusal to provide the personal data requested may make it impossible, in whole or in part, to perfect and manage the existing or ongoing relationship.
The provision of personal data and the consequent processing by the Data Controller for the purposes referred to in point 6), is optional and failure to provide, even partially, will not lead to any consequence.
- Right of access and data portability
The right relates to the data “provided” by the interested party is limited only to personal data in a broad sense or also extends to the personal data generated (observed) by the activities of the interested party (eg location data, research history, data of navigation).
The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form.
The data generated by the holder on the basis of the analysis of the data provided or collected by the interested party (inferred and derived data, eg the credit score), nor of course the data obtained from third parties are not included.
The right to data portability does not imply any obligation to keep data beyond the period established by the regulations for the sole purpose of guaranteeing the exercise of portability.
The interested party has the right to receive, free of charge, the data in a structured and readable form by a data processor (therefore absolutely not in paper format), in a commonly used format (“structured format, commonly used and readable by an automatic device” ).
In compliance with article 20, the interested party has the right to transmit personal data from one owner to another “without obstacles”.
The data must be provided “without undue delay and, in any case, at the latest within one month of receipt of the request” (art. 12.3 GDPR).
Data portability will be guaranteed only in the event that data processing is based on consent or contractual need, and in any case only if the processing is based on electronic processing (ie not paper), in all other cases it does not apply.
- Categories of subjects to whom the data can be communicated:
The processing of personal data will be carried out by means of subjects expressly and specifically designated as specially trained appointees; these subjects will process the data in accordance with the instructions received from the Data Controller, according to operational profiles assigned to them in relation to the functions performed.
The data may also be processed by third parties (outsourcers), which are used for the provision of services related to the purposes pursued, which our organization evaluates from time to time, to ensure greater protection, whether to appoint external supervisors of the treatments in these places.
In all cases, these subjects will process the data in accordance with the instructions received from the Owner, according to operational profiles assigned to them in relation to the functions performed, limited to what is necessary and instrumental for the execution of specific operations within the services requested and exclusively to achieve the purposes indicated in this statement.
The data will not be subject to disclosure.
- Data retention period
The data collected will be stored for a period of time not exceeding that necessary for the purposes for which they were collected, to fulfill contractual or pre-contractual obligations, as provided by law and / or regulations (subject to the terms of the law and the law, in the respect of rights and in compliance with the consequent obligations).
In particular, the criteria used to determine the retention period are established by specific laws that regulate the activity of the Data Controller or by specific provisions of the Guarantor for the protection of personal data that have regulated the processing activity and purposes pursued by the Owner; it should be noted, finally, that your personal data may be stored up to the time permitted by Italian law.
- Modification and revocation of consent to data processing
The interested party has the right to:
• obtain the cancellation or transformation into anonymous form or blocking of data processed in violation of the law;
• to obtain the updating, correction and integration of data;
• obtain certification that these operations have been brought to the attention of those to whom the data are communicated;
• oppose for legitimate reasons the processing of data or any automated decision-making process (including profiling);
• obtain the limitation of the treatment or portability with another owner.
To this end it will be necessary to send the request, through specific communication by e-mail addressed to ecoforum@pec.it (specifying in the subject “Privacy”) or by registered A / R to ECOFORUM SRL, in the person of the legal representative pt. , with headquarters in Avellino (AV) at via Verdi, 30 – CF VAT number: 02717090647.
- Minors
In the communication of personal data it must be guaranteed to have an age not less than 16 years, pursuant to art. 8. On this point it is specified that the aforementioned article does not refer to any online processing of data, nor any information society service to which minors can access.
The rule applies only to services that are the object of a direct offer, and in which the processing of data is legitimate only if based on the informed consent of the interested party.
13. Complaint to the Authorities
The interested party, if he perceives possible data processing violations, has the right to lodge a complaint with the competent authorities.
Consent
Having read the information, I consent to the processing of my personal data for the achievement of the aforementioned purposes.