Privacy policy form
Why this notice
This information is provided pursuant to art. 13 of EU Regulation 679/2016 by the MERRYMAMA DI MELLESI MONICA company based in Dervio, as Data Controller, to anyone who accesses the Company’s website and completes the “contact” form authorizing the same Company / Firm identifies the processing of their personal data.
The provision of data is optional. Refusal to provide data makes it impossible to process and follow up on requests received.
Purpose of the treatment
The personal data provided by users are used for the sole purpose of responding to their requests for information regarding the products and / or services provided by the aforementioned Company.
Legal basis
The personal data provided by users are processed lawfully to carry out the execution of pre-contractual measures or contractual obligations (Article 6 paragraph 1 letter b) of Regulation 679/2016), requested by the users themselves (request sent by filling out the form) .
Data recipients
The personal data provided by users will in no way be disclosed to third parties. They may be communicated to employees and collaborators of the Data Controller who will treat them in compliance with the instructions given by the Data Controller.
Responsible for the treatment
In case of need, for activities related to the maintenance of the technological part of the site, the personal data provided may be processed by persons in charge of the company appointed as data processing manager pursuant to art. 28 of the 2016/679 EU Regulation.
Data retention
Users’ personal data will be processed for the time necessary to fulfill the indicated purposes.
Rights of the interested
Pursuant to articles 13, paragraph 2, and from 15 to 21 of the Regulation, we inform you that with regard to the processing of your personal data, you can exercise the following rights:
a) Right to obtain access to personal data and the following information:
– confirmation that personal data is being processed or not;
– the purposes of the processing;
– the categories of personal data;
– the recipients or categories of recipients to whom the personal data have been or will be disclosed;
– if the data are not collected from the interested party, all available information on their origin;
– the existence of an automated decision-making process, including profiling;
– a copy of the personal data being processed.
b) Right of rectification and integration of personal data;
c) Right to delete data (“right to be forgotten”) if one of the following reasons exists:
1. the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
2. the interested party withdraws consent to the processing of data and there is no other legal basis for the processing;
3. the interested party opposes the processing and there is no legitimate overriding reason to proceed with the processing;
4. the personal data have been unlawfully processed;
5. personal data must be deleted to fulfill a legal obligation under Union law or the law of the Member State to which the data controller is subject.
The data controller, if he has made personal data public and is obliged to delete them, must inform the other owners who process the personal data of the request to delete any link, copy or reproduction of his data.
d) Right to limitation of processing in the event that:
1. the data subject disputes the accuracy of personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
2. the processing is unlawful and the interested party opposes the cancellation of personal data and requests instead that its use be limited;
3. although the data controller no longer needs them for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
4. the interested party opposed the processing, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
e) Right to lodge a complaint with the Guarantor for the protection of personal data, following the procedures and indications published on the official website of the Authority www.garanteprivacy.it.
f) Right to data portability of the interested party or the right to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and possibly transmit them to another data controller, if the processing is based on consent or on a contract and is carried out by automated means. Where technically possible, the interested party has the right to obtain direct transmission of data from one data controller to another.
g) Right to object at any time to the processing of personal data, including profiling, in particular in the event that:
1. the processing takes place on the basis of the legitimate interest of the owner, after explaining the reasons for the opposition;
2. personal data are processed for direct marketing purposes.
h) Right not to be subjected to a decision based solely on automated processing, including profiling, except in cases where the decision: is necessary for the conclusion or execution of a contract between the data subject and a data controller, is authorized by the law of the Union or of the Member State to which the data controller is subject or is based on the explicit consent of the data subject.
i) Right to withdraw consent at any time; the data, if not based on another legal basis (including fulfillment of a legal obligation or execution of a contract) must be deleted by the owner.
The exercise of rights is not subject to any formal constraints and is free.
How to exercise your rights
The interested party may at any time exercise their rights by sending:
– a registered letter with return receipt to MERRYMAMA di MELLESI MONICA, Via alla Roggia 11, 23824 Dervio;
– an e-mail to [email protected].
Holder of the treatment
The Data Controller is MERRYMAMA di MELLESI MONICA.
