SUBJECT: Information pursuant to and for the purposes of art. 13 of the EU GDPR 2016/679 relating to the protection of the processing of personal data
We inform you that, for the establishment and execution of contractual relations with you in progress, our organization is in possession of your data, also acquired verbally, directly or through third parties, qualified as personal by the GDPR EU 679/2016. In compliance with this regulation, we therefore invite you to carefully read the following information.
Nature of the processed data
We process your personal, fiscal and economic data necessary for the performance of existing or future contractual relationships. We are not in possession of any of your data that can be classified as particular (Article 9 of the regulation) or of a judicial nature (Article 10 of the regulation).
Purpose of processing and data retention period
Your data is processed for the entire duration of the contractual relationship and also subsequently, for contractual requirements, following the fulfillment of legal obligations and, for the effective management of financial and commercial relationships. The same will be kept for the time necessary to fulfill tax obligations as required by national legislation.
Methods of processing
The processing of data takes place through the use of tools and procedures suitable for guaranteeing security and confidentiality and can be carried out both on paper and with the aid of computerized means, suitable for storing, managing and transmitting the data.
Obligation or right to provide data
With regard to the data that we are obliged to know, in order to fulfill the obligations established by law, if you failure to provide them it makes impossible to establish or continue the relationship, within the limits in which such data are necessary for the execution of the same.
Scope of knowledge of your data
The following categories of subjects may become aware of your data: Data controller and processors, our consultants, as managers, within the limits necessary to carry out their assignment at our organization, subject to our letter of appointment that imposes the duty of confidentiality and security, as well as subjects who need to access your data for legal advice, with purposes auxiliary to the relationship between you and us, within the limits strictly necessary to carry out the auxiliary tasks entrusted to them.
Communication and dissemination
Your data will not be disclosed by us to undetermined subjects through their availability or consultation. Your data may be communicated by us, as far as their respective and specific competence is concerned, to Bodies and in general to any public or private subject with respect to which there is an obligation for us (or faculty recognized by law or secondary legislation or community) or need for communication.
Rights of the interested party
Articles from 15 to 22 of the GDPR EU 679/2016 give you specific rights. In particular, you can obtain confirmation of the existence or not of personal data concerning you and the communication of such data and the purposes on which the processing is based. In addition, you can obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as updating, rectification or, if there is an interest in you, the integration of the data. You can oppose, for legitimate reasons, the treatment itself.
We kindly ask you to promptly report any changes to your personal data to the Data Controller in order to comply with art. 16 of the aforementioned legislation which requires that the data collected be accurate and, therefore, updated.
The Data Controller, to whom you can contact to assert the rights referred to in art. 17 GDPR, is represented by Gloria Med Spa, with registered office in Menaggio in Via A. Diaz 7, which can be contacted at firstname.lastname@example.org .