This information is provided pursuant to art. 13 of EU Regulation 679/2016 by RAFF SRL, Via G. Galilei 5, 36050 Zermeghedo (VI), 02066230240, as Data Controller to those who access our website (from now on only the "Site") and fill out the "contact" form in order to illustrate the essential elements of the treatments carried out.
Personal data processed
The data provided voluntarily will be processed. Through the Site you have the opportunity to voluntarily provide personal data, for example, your name and e-mail address to contact us through the "contact" form. We will use this data in compliance with the applicable legislation in force, assuming that it refers to you. In the event that the data is attributable to third parties, for the latter, you place yourself as an independent data controller, assuming all legal obligations and responsibilities. In this sense, you grant the widest indemnity on this point with respect to any dispute, claim, request for compensation for damage from treatment, etc. that should reach our company from third parties whose personal data have been processed through your use of the Site in violation of the applicable legislation currently in force.
Purpose of the processing and legal bases
Specifically, your personal data are processed for the following purposes and legal bases:
- activities related to contact management (examples of activities are: filling in the contact form on the site or more generally sending an e-mail that involve the processing of personal data such as, for example, name, surname, subject; the legal basis of the aforementioned purpose is identified in the contract and pre-contractual measures (Article 6.1, letter b, GDPR);
- activities related to the execution of the contract of which you are a party, including the pre-contractual phase (examples of activities are: the provision of a service, the response to a request, the request for contact via the "contact" form (etc .); the legal basis of the aforementioned purpose is identified in the contract and pre-contractual measures (Article 6.1, letter b, GDPR), but also (if applicable) in the legitimate interest (Article 6.1, letter f, RGDP) as far as relates to the need to defend a right and as well as in the fulfillment of a legal obligation or regulations in force or to fulfill an obligation imposed by the Authorities (Article 6.1, letter c, GDPR);
- maintenance of computer systems and devices (the persons in charge of carrying out maintenance and repairs on the Site may accidentally have access to your personal data. These are completely occasional and unpredictable events and in any case without identification purposes and of a limited duration execution of maintenance/repair work); the legal basis of the aforementioned purpose is identified in the legitimate interest (Article 6.1, letter f, GDPR).
None of our processing is based on consent. The legal bases on which we operate are: contract, legitimate interest and legal obligation. We do not carry out treatments with automated decision-making processes or profiling.
Data retention times
Your personal data will be kept for the time strictly necessary to carry out the purposes described above and to fulfill the obligations established by law. In particular, for the activities related to the management of the contact, your personal data are deleted when the purpose of contact, reply or correspondence is definitively exhausted, for the activities related to the execution of the contract to which you are a party (including the pre-contractual phase), your personal data are kept for the entire duration of the contractual relationship and, once the relationship is concluded, they will be kept for any needs to ascertain/exercise/defend a right or for the fulfillment of a obligation of law or regulations in force or to fulfill an obligation imposed by the Authorities (Article 6.1, letter c, GDPR), for the maintenance of IT systems and devices, referring to personal data we have for the other indicated purposes in this Notice, the retention times coincide with those identified from time to time for the aforementioned purposes.
Consent and optional/mandatory nature of the provision
The processing of your Personal Data, for the purposes described above, may be carried out without your consent. The provision of your data that you undertake to provide us contractually or by law, is mandatory and is a necessary requirement for the conclusion of the contract and failure to provide it will make it impossible for us to execute contracts and other related obligations. Any other provision of your personal data (eg for sending requests not yet contracted or for browsing the site) is purely optional. The only consequence of failure to provide the optional will be the inability to provide or perform the requested services.
Categories of recipients
Furthermore, your Personal Data may be disclosed to third parties, for technical and operational needs strictly connected to the purposes set out above and in particular to the following categories of subjects:
- subjects necessary for the provision of the services offered by the Site including, by way of example, the sending of e-mails and the analysis of the functioning of the Site who typically act as data processors of our reality;
- persons authorized by our company to process Personal Data who are committed to confidentiality or have an adequate legal obligation of confidentiality;
- judicial authorities in the exercise of their functions when required by applicable law.
Data Transfers abroad
The Data Controller does not transfer personal data outside the European Economic Area. The Data Controller, however, reserves the right to use cloud services; in which case, the service providers will be selected from among those who provide adequate guarantees in compliance with the applicable legislation in force.
Processing methods
The processing of your personal data will take place both in electronic and paper format. The processing will, however, be carried out mainly with IT tools and in any case with the observance of the minimum precautionary measures of data security and confidentiality. In particular, technical, IT, organizational, logistical and procedural security measures have been implemented in order to prevent the loss, illicit or irrelevant use of data and access to them without authorization.
Rights of the interested party and complaint before the Autority
We inform you that regarding the processing of your personal data you can exercise the following rights:
- Right to obtain access to your personal data (Article 15 of the GDPR): you can contact us to find out if your personal data are being processed and the legal information on the processing;
- Right of rectification (Article 16 of the GDPR): obtain the correction of your inaccurate personal data or the integration of incomplete ones;
- Right to cancellation/oblivion (Article 17 GDPR): obtain the cancellation of your personal data, in the cases provided for by law;
- Right to limitation of processing (Article 18 of the GDPR): obtain the submission of your personal data to storage only, with the exclusion of other activities, in the cases provided for by law;
- Right to portability (Article 20 of the GDPR): obtain your personal data in a structured format, commonly used and readable by an automatic device and 3 also obtain direct transmission to another data controller, in the cases provided for by law;
- Right to object (Article 21 of the GDPR): right to stop further processing of personal data for reasons connected to your particular situation, without prejudice to our binding legitimate reasons, in the cases provided for by law;
- Right to withdraw consent (Article 7.3 GDPR): right to withdraw consent at any time for cases where the processing is based on consent.
To exercise the aforementioned rights you can use the Data Controller's contacts provided in this Information. The exercise of rights is not subject to any formal constraints and is free. We also inform you of your right to lodge a complaint with the competent authority for the protection of personal data. We remind you that the complaint, pursuant to art. 77.1 GDPR, can be promoted by the interested party at the Authority of the place where the interested party usually resides, where he works or where the alleged violation has occurred.
Data Controller
The Data Controller is RAFF S.R.L. Contact details of the Data Controller are:
- e-mail:
This email address is being protected from spambots. You need JavaScript enabled to view it. - phone: 0444/685522
- paper mail: VIA G. GALILEI 5, 36050 ZERMEGHEDO (VI)
Changes
This information is effective from 25 May 2018. We reserve the right to modify or simply update its content, in part or completely, also due to changes in the applicable legislation. The updated information will be promptly published on this Site. We therefore invite you to visit this page regularly to view any updates.
