INFORMATION ON THE PROCESSING OF PERSONAL DATA MADE ON THE SITE OF Coffee Training Academy made pursuant to Art. 13 of EU REG. No. 2016/679
We wish to inform you that the EU Reg. No. 2016/679 "General Regulation on the Protection of Personal Data" provides for the protection of persons and other subjects with regard to the processing of personal data. In particular, Davide Cobelli is required to provide you with some information regarding the use of your personal data. The processing will be based on the principles of lawfulness, fairness and transparency and the protection of confidentiality and rights attributable to you as "data subject".
The Data Controller is Davide Cobelli, with registered office in via Basso Acquar 30/C - 37135 Verona - email@example.com, in the person of the Legal Representative.
PURPOSES AND METHODS OF PROCESSING
The data you provide will be processed for the following purpose: sending by Davide Cobelli of communications and information regarding the services and products offered.
The processing is necessary for the performance of a contract (information service) to which the data subject is a party.
METHOD OF PROCESSING
The processing is carried out with the help of electronic and automated means. The data requested as compulsory are adequate for the purposes set out above; all data provided will be processed in a manner relevant to and limited to the same purposes. Specific security measures are taken to prevent loss of data, their illicit or incorrect use and unauthorized access.
Within the Owner's structure, your data is accessible to marketing and Information Systems staff; these individuals are authorized to process and adequately trained. The data are made accessible to external parties whose collaboration Davide Cobelli uses and to whom the same has appointed as "External Data Processor" for the data processing that is necessary in the provision of system support and maintenance of computer applications and software management of online services.
RECIPIENTS OR CATEGORIES OF RECIPIENTS
The same data may be subject to communication or dissemination in the cases provided for by regulatory provisions or administrative measures. The identity of Third Parties receiving the data may be requested at any time from the Data Controller (and/or the Data Processor where appointed).
All of the aforementioned data will be retained for the purposes set forth in this policy and, at least for the period of validity of the requested service until the requested cancellation from the service itself.
FREEDOM TO PROVIDE DATA AND CONSENT, CONSEQUENCES OF REFUSAL
The provision of the minimum data required is mandatory to access the services requested. Any refusal to respond will result in the impossibility of initiating contractual relations and/or providing the requested services.
PROFILING and TRANSFER
There is no automated decision-making process, including profiling as referred to in Article 22(1) and (4) EU Reg. 2016/679, within the scope of this processing. The Data Controller does not intend to transfer the collected personal data to a third country or international organization.
Rights of the data subject
In relation to the processing of personal data to the Data Controller you may address to assert your rights, as provided for in Articles 15 to 22 of EU Reg. 2016/679, which we quote below:
the right to request from the Data Controller access to personal data (Art. 15) i.e., confirmation as to whether or not personal data concerning you are being processed and if so, to obtain access to such data;
right to ask the data controller for rectification (Art. 16) i.e., to obtain rectification and/or integration of inaccurate personal data concerning you;
Right to request from the data controller the deletion of the same (Art. 17) i.e., obtain the deletion of data concerning you without undue delay;
right to request from the data controller the restriction of the processing of personal data concerning you (Art. 18), i.e., to obtain confirmation that the processing of personal data concerning you is limited to what is necessary for the purposes of storage;
right to data portability (Art. 20) i.e., to obtain in a structured, commonly used and readable format, personal data concerning you;
right to object to their processing (Art. 21) i.e., to object at any time, on grounds relating to your particular situation, to the processing of data concerning you;
right in relation to automated decision-making processes (Art. 22), i.e., the right not to be subjected to a decision based solely on automated data processing without your explicit consent.
Where the processing is based on Article 6(1)(a) or Article 9(2)(a), you have the right to withdraw your consent at any time without affecting the lawfulness of the processing based on the consent given before the withdrawal.
You also have the right to lodge a complaint with the supervisory authority. If the Data Controller intends to further process your personal data for a purpose other than the purpose for which it was collected, it will provide you with information prior to such further processing regarding this different purpose and any further information necessary to ensure fair and transparent processing.
Ways of exercising your rights
You may at any time exercise the above rights by sending:
a registered letter with return receipt to: Davide Cobelli, Via Basso Acquar 30/C, 37135, Verona (ITALY).
There is no cost involved in exercising the rights, unless they are manifestly unfounded and/or excessive and/or are repetitive in nature. In that case, the Holder may charge a fee having a reasonable character taking into account the administrative costs incurred and/or reject the request.