Informative ex 13 of the EU Regulation n. 679/2016

Dear Sir/Madam,
We would like to inform you that according to the regulations indicated (art. 13 EU Regulation n. 679/2016) your personal data (name, surname, e-mail address, address, IP address, etc.) will be processed in the following ways and for the following purposes:

1. Subject matter of processing

 

The Data Controller processes personal identifying data (such as name, surname, company name, address, e-mail address, IP address, etc.) communicated by you on the occasion of the conclusion of contracts for the purchase of products and services provided by the Data Controller and/ or through the appropriate forms on the website https://whitekingart.it

 

2. Purpose of processing

 

We inform you that the data collected will be used to:
A. Without your express consent:

  • conclude contracts for the purchase of products supplied by the Data Controller;
  • fulfil pre-contractual, contractual and fiscal obligations arising from existing relationships with you;
  • comply with the obligations laid down by law, a Regulation, Community legislation or the order of an Authority (for example, anti-money laundering legislation);
  • exercise the rights of the Data Controller (for example, the right of defence in a trial);
  • administrative/accounting purposes as fulfilment of fiscal or accounting obligations).B. Only after your specific and express consent for the following purposes:
    1. follow up your request for contact and/or information with the contact details provided in the form;
    The legal basis of the processing is the execution of the contract of which you are a party and/or the consent you give to the processing itself.
    The personal data held by the “Alessio Donatoni Impresa Individuale” are collected from customers and/or users.
    In any case, all these data are processed in compliance with the aforementioned legislation and the obligations of confidentiality and the principles of fairness, lawfulness and transparency.

3. Nature of data provision and consequences of refusal to reply:

 

The provision of data for the purposes referred to in art. 2.A is mandatory; in case of failure to provide the data we cannot guarantee the services referred to in art. 2.A.
The provision of data for the purposes referred to in art. 2.B is optional, so it may decide not to provide any data or to deny the possibility of processing data already provided subsequently: in this case it can not be contacted anymore.

4. Method of processing:

 

The processing of your personal data is carried out through the operations indicated in art. 4 n. 2 EU Regulation No. 679/2016 and precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, deletion and destruction of data. Your data are processed both on paper and electronically and automated, in compliance with an internal procedure and technical measures to ensure the security, integrity and confidentiality of the data.
Personal data will be stored for a period of time not exceeding that necessary to fulfill the purposes listed and in any case for no more than 10 years from the termination of the relationship.

 

5. Subjects to whom personal data may be disclosed:

 

Your personal data may be communicated to:
Personnel of the company as data processors and/or external managers and/or system administrators for the management of the contract practices put in place: staff have been duly instructed in matters of personal data security and privacy protection.

To third-party companies or other entities (for example: professional firms, consultants, banks, etc.) for the fulfilment of the obligations related to the service/purchase requested and provided by you.
It remains in any case subject to the prohibition to communicate or disseminate your personal data to subjects not necessary for the performance of the services requested by you.
The updated list of any Data Processors is kept at the registered office of the Data Controller.

 

6. Rights of data subjects

 

You have the right, at any time, to exercise the following rights:
a) access to personal data;
b) the rectification and deletion of personal data or the restriction of the processing of such data;
c) to object to the processing of personal data;
d) the portability of personal data;
e) the withdrawal of consent, where applicable – the withdrawal of consent shall be without prejudice to the lawfulness of the processing based on the consent given before the withdrawal;
f) to lodge a complaint with the Supervisory Authority (Data Protection Authority).

7. Data controller:

The Data Controller is the “Cristian Epifani Impresa Individuale” in person of the Data Controller, VAT: 15773621006, mail: info@whitekingart.it

8. Procedures for exercising rights:

You can exercise your rights at any time by sending a request to the following e-mail address: mypetfoodshop22@gmail.com
We will respond to requests within 30 days. However, the completion time of requests may be longer. However, we will make sure to communicate these details by email. All information provided to us in the request will be used only for the fulfilment of the same and will be deleted within 12 months.