INFORMATION ON THE PROCESSING OF PERSONAL DATA

(Art. 13 General Data Protection Regulation 2016/679)

Pursuant to art. 13 of the General Data Protection Regulation 2016/679 (later called GDPR) regarding the protection of personal data, we inform you that personal data collected, with reference to established contractual relationships or simple requests for information, will be processed in compliance with the legislation mentioned above and we provide the following information:

PERSONAL DATA COLLECTED
The personal data collected, with your free, specific, informed and unambiguous indication, are exclusively related to:
– identification data (for example: name, surname, address, telephone, fax, e-mail, etc …)
– tax data (if required by law – for example, tax code, VAT number etc …)

CONTROLLER AND PROCESSOR OF THE PROCESSING OF PERSONAL DATA (13.1 a, b)
Controller and processor of the processing of personal data is CARTOGRAF S.R.L. – Via Filippo Turati, 1 – Loc. Quarto Inferiore – 40057 Granarolo Emilia (BO). Internal contact person of the processing of personal data is Adriana Bonotto, which the data subject can contact at any time, using the email info@cartograf.com, or the phone 051 767196 for the exercise of the rights referred to in the article 13.2 letter b, c, d.

PURPOSE AND METHOD OF TREATMENT OF PERSONAL DATA (13.1 c)
The purposes of processing personal data are as follows:
1) fulfillment of legal obligations related to the contractual relationship;
2) organizational management of the contractual relationship;
3) satisfy the request received;
Personal data will be processed in paper form, computerized and telematic, and included in the relevant databases that will be accessible only by the owner and his representatives. As regards the data processed in electronic form, it is emphasized that all adequate security measures have been adopted to protect the rights, freedoms and legitimate interests of the data subject referred to in article 22.3 of the GDPR.

THE RECIPIENTS OF THE PERSONAL DATA, IF ANY (13.1 e, f)
In relation to the purposes indicated in points 1, 2 and 3 of the previous paragraph, the data may be communicated to the following subjects or to the categories of subjects indicated below:
– Studies of recognized accountants related to the profession of assistance to companies when the communication is due by law, or is in the interest of the subject (natural or legal person);
– Studies of recognized lawyers related to the profession of assistance to companies when the communication is due by law, regularly in charge of this form of treatment in full compliance with the measures in force, or when the communication is in the interest of the subject.
The owner also states that he does not intend to transfer data to a non-EU third country or to an international non-EU organization.

PERIOD FOR WHICK THE PERSONAL DATA WILL BE STORED (13.2 a)
At the end of the service, the provision of the service or the response, personal data will be stored exclusively for historical or statistical purposes, in accordance with the law, regulations, community legislation and codes of conduct and ethics signed under the article 40 of the GDPR, for a period as per current legislation (usually 10 years), or, in case they are not subject to any law, for a period not exceeding five years. Beyond this period, personal data will be stored anonymously or destroyed.

RIGHTS OF THE DATA SUBJECT (13.2 b)
In relation to the aforementioned processing, the data subject has the right to request access to his / her personal data and the rectification of inaccurate personal data concerning him or her or the erasure of personal data concerning him or her without undue delay or the restriction of the treatment or to object to the treatment, as well as having the right to data portability.

RIGHT OF REVOCATION OF CONSENT (13.2 c)
Where processing is based on consent, the controller informs the data subject that he has the right to withdraw his or her consent it at any time without prejudice to the lawfulness of the treatment based on consent before its withdrawal.

RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY (13.2 d)
The controller informs the data subject of his right to lodge a complaint with a supervisory authority, in which case he or she will have to ask for information using one of the above-mentioned systems to contact him.

OBLIGATORY OR OPTIONAL NATURE OF DATA SUPPLY (13.2 e)
The provision of data and the related processing are mandatory in relation to the purposes related to the fulfillment of a fiscal nature; it follows that any refusal to provide data for such purposes may determine the impossibility of the data controller to give effect to the professional relationships themselves and to the legal obligations. The provision of data and its processing is to be considered optional in other cases, without any consequence.

AUTOMATED INDIVIDUAL DECISION-MAKING, INCLUDING PROFILING (13.2 f)
The controller informs the data subject that in this site there is no automated decision making process, so in particular there is no profiling system.