Information about the data protection pursuant to sec. 13 of the REGULATION (EU) 2016/679 (GDPR)
Dear User, we want you to be informed that the REGULATION (EU) 2016/679, on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (“GDPR”) requires as fundamental right the protection of the natural person regarding the processing of their personal data.
Pursuant to art. 13 of the GDPR, we thereby inform you that:
DATA CONTOLLER AND DATA CATEGORIES: SCRIBO – Scrittura Bolognese S.r.l., limited liability company, with registered office in Bologna, Via San Lorenzo, 5, tax code and VAT no. 03569341203, available at the telephone number +390510474806 or at the e-mail address: firstname.lastname@example.org, (hereinafter also referred to as “SCRIBO” or “Data Controller”), in its quality as Data Controller of the personal data’s processing, is to process your personal data, namely the name, surname and e-mail address you have filled into the form provided on our website (http://scritturabolognese.com/ecommerce/), for the following purposes.
PURPOSES AND LEGAL BASIS OF THE DATA PROCESSING: Your personal data is processed in order to subscribe and receive our “Newsletter”, as well as for business and marketing purposes concerning our product and services: in case you give your consent, the processing could also be aimed at sending you electronical or paper communications for advertising and marketing purposes, by SCRIBO, in its quality as Data Controller, or through third parties (set in Italy of abroad) entrusted by us to perform promotional activities. Your data is processed solely once we receive your specific consent.
OBLIGATION TO PROVIDE YOUR PERSONAL DATA OR OTHERWISE: The provision of your personal data is mandatory; the failing shall not allow you to receive the Newsletter or the communication concerning SCRIBO’s commercial offers.
DATA PROCESSING MODALITIES: Your personal data processing is made in compliance with the above-mentioned Regulation and with the duty of confidentiality which regulates the Data Controller activity. Data will be processed either through informatic instruments or paper-based ones or any other suitable support, by using appropriate security measures (under art. 5, par. 1 lett. F) of the GDPR.
DATA RECIPIENTS: To the extent of the processing purposes indicated above, Your data could be communicated to subjects, ether internal or external the company, authorised at processing it or to third parties, including, but not limited to: SCRIBO’s employees or collaborators, companies which, on SCRIBO’s behalf, undertake marketing activities (Rocket Science Group LLC, manager of the website called “Mailchimp”), providers of e-mail services and subjects which, on SCRIBO’s behalf, provide technical support and assistance services. These subjects, to the extent of the respective roles, may act as individual data controllers and/or as data processors. Your data, under no circumstances, will be disseminated. The information regarding the Data Processors is available at SCRIBO’s premises at the address above-indicated.
DATA TRANSFER ABROAD: The collected data could be transferred abroad, especially to entities resident in Extra EU countries.
Transferring the data outside the borders of the European Economic Area (EEA), we ensure that it is granted a level of data protection similar to the one requested under the GDPR’s provisions, at least through one of the following security measures:
1. Transfer of data solely towards countries where, in accordance with the European Commission’s opinion, it is granted an adequate level of protection of personal data. For further information: European Commission: Adequacy of the protection of personal data in non-EU countries;
2. Application of specific standard contracts (Data Controller/Data Officer), as approved by the European Commission, which grant the same protection to the personal data as provided in Europe. For further information: European Commission: Model contracts for the transfer of personal data to third countries.
3. When we use a service provider set in USA, we single out the members of the Privacy Shield, whose adherence grants the establishment of specific security measures for the protection of the personal data as agreed between USA and Europe. For further information: European Commission: EU-US Privacy Shield.
SCRIBO uses the services provided by Rochet Science Group LLC, a company incorporated in the USA, with its registered office in Atlanta, Georgia, which operates through its website Mailchimp, in order to forward its newsletters using the provider’s electronic platform. This provider acts on SCRIBO’s behalf as Data Processor, pursuant to art. 28 of the GDPR.
DATA STORING’S TERMS: Your data will be stored, for the purposes above-indicated, up till you withdraw your consent.
DATA PRETECTION OFFICER (DPO): Since there is no requirement in this respect under the applicable law provisions, it has been appointed no DPO.
RIGHTS OF THE DATA SUBJECT: The data subject has always the right to request to the Data Controller access to and rectification or erasure of personal data or restriction of processing or to object to the processing itself, as well as the right to data portability, to withdraw the consent to the data processing. The Data Subject can exercise these rights, and the others right set out under the GDPR’s provisions, by sending a simple communication to the Data Controller at the e-mail address email@example.com or by calling the telephone number +390510474806. Furthermore the data subject has the right to lodge a complaint with a supervisory authority – in Italy: Garante per la Protezione dei dati personali, Piazza Venezia n. 11 – 00187 Roma, telephone number: (+39) 06.696771, Fax no.: (+39) 06.69677.3785, e-mail address firstname.lastname@example.org.