IN ACCORDANCE WITH REGULATION 2016/679/EU "EUROPEAN REGULATION ON PROTECTION" ARTICLES 13 AND FOLLOWING OF THE REGULATION (HEREINAFTER REFERRED TO AS GDPR).
VZ ODONTOTECNICA DI ZANAGA VALTER, with registered office at Via San Marco 7, as Data Controller, wishes to provide you with clear and simple information regarding the processing of your personal data. If you have any doubts or need clarification regarding the information below, we invite you to contact us at the VZ ODONTOTECNICA DI ZANAGA VALTER contact details indicated below.
Some Main Definitions
The "personal data" is any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.
"Processing" is any operation or set of operations, carried out with or without the aid of automated processes applied to personal data, such as collection, recording, organization, structuring, storage, adaptation, alteration, extraction, consultation, use, communication by transmission, dissemination, making available, comparison, interconnection, restriction, erasure, destruction.
The "Data Controller" is the legal entity that, alone or together with others, determines the purposes and means of the processing of personal data.
The "Joint Controller" is the legal entity that jointly determines, together with one or more Controllers, the purposes and means of the processing of the data subject's personal data, as well as the responsibilities regarding compliance with the obligations arising from the applicable regulations.
The "Data Processor" is the natural or legal person who processes personal data on behalf of the Data Controller.
The "consent" of the data subject is the free, specific, informed, and unambiguous expression of will by the data subject, by which he or she gives their agreement, through a declaration or clear affirmative action, for their personal data to be processed.
"Marketing" refers to the performance of commercial, advertising, and promotional activities, such as, but not limited to, the sending of advertising material, direct sales, conducting market research or commercial communication, or promotional activities carried out within the context of events and prize contests promoted by VZ ODONTOTECNICA DI ZANAGA VALTER.
"Profiling" is the processing by computerised and automated means consisting in the use of such personal data to evaluate certain personal aspects or those relating to professional performance, economic situation, personal preferences, interests, payment reliability, behaviour, location or movements of the individual.
2. In relation to the individual service requested, VZ ODONTOTECNICA DI ZANAGA VALTER may process your personal data:
A) without express consent for the following Service Purposes:
- to conclude contracts for the services of the Data Controller; - to fulfill pre-contractual, contractual, and tax obligations arising from existing relationships; - to comply with obligations required by law, regulation, EU legislation, or an order from the Authorities (such as anti-money laundering regulations); - to exercise the right of defense in court for the Data Controller; - in activities of credit collection and recovery, including transferring data to companies/professionals for credit recovery activities.
B) Only with prior, specific, and separate consent
for marketing purposes, market research, and profiling by VZ ODONTOTECNICA DI ZANAGA VALTER
2. Methods of data storage
The processing of your personal data will be carried out in such a way as to ensure adequate security and confidentiality and to prevent unauthorized access or use of personal data. Therefore, your personal data will be processed and stored in full compliance with the principles of necessity, data minimization, and limitation of the storage period, through the adoption of technical and organizational measures appropriate to the level of risk of the processing and for a period of time not exceeding the achievement of the purposes for which they are processed, and in any case for the period provided for by law.
3. Access to data and categories of data recipients
Your data may be made accessible for the purposes mentioned above: - to employees and collaborators of the Data Controller, authorized by the Data Controller, directly or through delegates, subjects to whom communication is necessary, functional and instrumental for carrying out the activities provided for the execution of the commercial relationship, subjects who are allowed access by legal provisions or secondary regulations, or to parent, subsidiary or affiliated companies, or in any case to companies entrusted with services on behalf of
VZ ODONTOTECNICA DI ZANAGA VALTER. in their capacity as delegates and/or appointed staff and/or system administrators. - to third-party companies or other entities (for example, companies specialized in credit collection and recovery activities, consultants and freelancers also in associated form, marketing and market research companies, credit institutions, insurance companies for the provision of insurance services, etc.) that carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processors. - to third-party companies that collaborate in any capacity with
VZ ODONTOTECNICA DI ZANAGA VALTER for the purpose of carrying out contractual services, for example, but not limited to: couriers, software companies.
VZ ODONTOTECNICA DI ZANAGA VALTER. uses suitable security programs on all its information systems in order to guarantee the confidentiality of information. Our security programs are periodically updated to technological developments. For the performance of certain activities instrumental to the execution of the requested service, or in relation to legal obligations and in any case in compliance with personal data protection regulations, it may appoint external Data Processors (third parties who process personal data on behalf of VZ ODONTOTECNICA DI ZANAGA VALTER).
4. Data disclosure
Without the need for express consent, the Data Controller may disclose your data for the above purposes to supervisory bodies, judicial authorities, insurance companies for the provision of insurance services, as well as to those subjects to whom disclosure is mandatory by law. These subjects will process the data in their capacity as independent data controllers. Your data will not be disseminated.
5. Transfer of personal data to a Third Country
The transfer of personal data from EU countries to "third" countries outside the EU is, in principle, prohibited unless the Data Controller or Processor guarantees an "adequate" level of protection. No data transfers to third countries will be carried out, except for services expressly requested by the customer or in specific cases for which the Controller will adopt adequate safeguards and inform the data subject.
6. Data Subject Rights
As a data subject, you have the rights set out in Art. 15 GDPR, specifically the rights to:
i. obtain confirmation as to whether or not personal data concerning you exists, and to receive such data in an intelligible form;
ii. obtain information regarding: a) the origin of the personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the data controller, data processors, and the representative designated pursuant to Art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, data processors, or persons in charge;
iii. obtain: a) the updating, rectification, or, when interested, integration of the data; b) the erasure, anonymization, or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data was collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been notified, also as regards their content, to those to whom the data was communicated or disclosed, except where this proves impossible or involves a manifestly disproportionate effort compared to the right protected;
iv. object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of collection; b) to the processing of personal data concerning you for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication, by means of automated calling systems without the intervention of an operator, by e-mail and/or by traditional marketing methods by telephone and/or paper mail. Please note that the right to object of the data subject, as set out in the previous point b), for direct marketing purposes by automated means also extends to traditional methods and that, in any case, the data subject retains the possibility to exercise the right to object even only in part. Therefore, the data subject may decide to receive only communications by traditional means or only automated communications or neither type of communication.
v. the existence of the right to withdraw consent if the data subject has given consent to the processing of their personal data for one or more specific purposes.
Where applicable, you also have the rights set out in Arts. 16-21 GDPR (Right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority or other Supervisory Authorities.
7. Methods for exercising rights pursuant to art. 12 of the GDPR
You may at any time exercise the rights identified by art. 15 and, where applicable, by arts. 16-21, by sending:
- a registered letter with return receipt to the office at via San Marco 7 20821 MEDA MB, or by writing to the certified email address valter.zanaga@pec.it
8. Protection of minors
Minors may be less aware of the risks, consequences, and their rights in relation to the processing of personal data, therefore VZ ODONTOTECNICA provides them with specific protection, with particular regard to the use of personal data for marketing purposes or for the creation of individual profiles and the collection of personal data in the context of services provided directly to the minor. With regard to the direct offer of information society services (that is, any service provided electronically), the processing of personal data requires the explicit consent of the minor and is lawful where the minor has reached the minimum age required by applicable law.
9. Data Controller, Delegates and Appointed Staff
The Data Controller is VZ ODONTOTECNICA DI ZANAGA VALTER, based at via San Marco 7 28021 Meda MB. The updated list of data processors is kept at the registered office of the Data Controller.
10. DATA PROTECTION OFFICER
The Data Protection Officer (DPO) is the person responsible for the protection of personal data and is appointed by the Data Controller to perform the functions expressly provided for by the European Regulation on the protection of personal data. The DPO can be contacted at the office of the Data Protection Officer VZ ODONTOTECNICA DI ZANAGA VALTER via San Marco 7 20821 MEDA MB