Information on the processing of personal data collected from persons concerned (Art. 13 of the EU General Regulation on the protection of personal data n. 2016 /679)
Source of personal data and Data controller
ANFIA Associazione Nazionale Filiera Industria Automobilistica (hereinafter, named "ANFIA"), with its registered office in Turin - Corso Galileo Ferraris 61, C.F. 8008590019, who is the data controller for the processing of personal data in accordance with article 4, no’s. 7 and 24 of EU Regulation 2016/679 of the 27th April 2016 concerning the protection of individuals data with regards to the processing of such data (hereinafter referred to as "Regulation" or "GDPR"), informs you that, in accordance with art. 13 of the Regulation, ANFIA shall process personal data relating to the Company and to the individuals who are its legal representatives for the purposes and in the manner as indicated below
Processing of personal data means any operation or set of operations which are performed with or without the aid of computerised processes and applicable to both personal data or sets of personal data, even if not stored in a database, such as the collection, recording, organising, structuring, storing, processing, selecting, blocking, adaptation or modification, retrieval, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or sharing, restriction, deletion or disposal.
2. SUBJECT MATTER HANDLED
The Data Controller processes personal, identifiable and non-sensitive data (name, surname, tax code, VAT number, company name, email, telephone number, bank and payment references - hereinafter referred to as "personal data" or "data") communicated by you.
3. PURPOSE OF PROCESSING
Your personal data will be processed:
A) without your expressed consent as per Art. 6 letter b) and e) of the GDPR, for the following Service Purposes:
- to conclude contracts for the services of the Holder;
- to fulfil any pre-contractual, contractual or tax obligations arising out of your relationship with us;
- comply with the obligations laid down by law, regulation, community legislation or an directive by the Authority (e.g. on anti-money laundering);
- exercise the rights of the Holder, such as the right of defence in court;
- allow you to subscribe to the newsletter service provided by the data controller and any other services you may have requested.
B) Only with your explicit and separate consent (art. 7 GDPR), for the following Marketing Purposes:
- to send you by e-mail and/or mail newsletters, advertising and promotional material relating to our publications, seminars, training courses, conferences, etc.;
- send you by e-mail and/or post commercial and/or promotional communications from third parties (e.g. business partners).
4. TREATMENT METHODS AND HOLDING PERIODS
The processing of your personal data is carried out in accordance with the procedures described in art. 4 no. 2) GDPR, namely: the collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, comparison, use, sharing, blocking, communication, cancellation and deletion of data.
The data controller will process your personal data for the time necessary to fulfil the above purposes and, except for the fulfilment of legal obligations, for no longer than 5 years from the termination of the relationship for Service Purposes and for no longer than 10 years from the collection of data for Marketing Purposes.
5. ACCESS TO DATA
Your data may be made accessible for the purposes of art. 3:
- to employees and partners of the Data Controller in Italy and abroad in their capacity as persons in charge of and/or responsible for internal processing;
- to third party companies or other parties (for example, credit institutions, professional firms, consultants and insurance companies for the provision of insurance services, etc.) which carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processors.
6. COMMUNICATION OF DATA
Without your express consent (ex-art. 6 letter. b) and c) GDPR), the data controller may communicate your data for the purposes referred to in art. 3.A) to supervisory bodies, judicial authorities and all other persons to whom communication is required by law for the performance of these purposes. Your data will not be disclosed.
7. DATA TRANSFER
The management and storage of your personal data will take place on servers located within the European Union of the data controller and / or its appointed third party companies. If necessary, the Holder may move the location of the servers to non-EU countries. In such cases, the Holder hereby ensures that the transfer of non-EU data will be carried out in accordance with the applicable legal provisions by stipulating, if necessary, the agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses provided for by the European Commission.
8. NATURE OF DATA TRANSFER AND IMPLICATIONS OF THE REFUSAL TO REPLY
The provision of data for the purposes referred to in Article. 3. In its absence, we will not be able to guarantee the Services of art. 3. You may therefore decide not to provide any data or subsequently deny the possibility of processing data that has already been provided: in this case, you may not receive newsletters, commercial communications or advertising material relating to the Services offered by the data controller. In all cases, you will continue to be entitled to the Services referred to in art. 3.
The legal basis for the processing of your personal data is based on the contract that is entered with the data controller.
9. YOU HAVE THE RIGHTS TO
As an interested party, you have rights under Art. 15 GDPR and specifically those of:
i. obtains confirmation of the existence or otherwise of your personal data, even if it has not yet been recorded, and have it communicated in a comprehensible format;
ii. obtain information on: a) the source of the personal data; b) the purposes and methods of processing; c) the methods applied in the event of processing using electronic means; d) the identification data concerning the data controller, data processors and the representative designated in accordance with art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, of the GDPR; e) the entities or categories of entity to whom the personal data may be communicated to or who may become aware of it in their capacity as the designated representative(s) in Italy, data processor(s) or person(s) in charge of the processing;
iii. to obtain: a) the updating, correction or when interested in the integration of data; b) the cancellation, turning into anonymous form or the blocking of data that has been processed unlawfully, including any data whose storage is not necessary for the purposes for which they have been collected or subsequently processed; c) confirmation that the operations described in points a) and b) and their contents have been brought to the attention of those to whom the data has been communicated or shared, unless this requirement turns out to be impossible or would involve a use of resources clearly disproportionate to the protected right;
iv. oppose, in whole or in part: a) on legitimate grounds, the processing of personal data concerning you even if it is pertinent to the purpose of collection; b) the processing of personal data concerning you for the purpose of sending advertising materials or direct selling or for carrying out market research or commercial communication through the use of automated calling systems without the involvement of an operator by email and / or through traditional marketing methods by telephone and / or paper mail. It should be noted that the right of objection of the person concerned, as set out in point b) above, for purposes of direct marketing by means of automated methods extends to traditional ones and that, in all cases, the possibility for the person concerned to exercise the right of objection even in part shall remain unaffected. Therefore, the interested party may decide to receive communication only by traditional or automated means or neither of these two types of communication.
Where applicable, he/she also has the right under Articles 16-21 of the GDPR (Right of rectification, right to be forgotten, right to limit processing, right to data transfer, right to contest), as well as the right to complain to the Guarantor Authority.
10. ARRANGEMENTS FOR THE EXERCISE OF RIGHTS
You may at any time exercise the above rights by sending:
- a registered letter with advice of receipt addressed to ANFIA – Corso G. Ferraris 61 – 10128 TORINO
11. DATA CONTROLLER AND DATA PROTECTION OFFICER
The Data Controller is ANFIA with registered office in Turin, Corso Galileo Ferraris 61, in the form of its pro-tempore legal representative.
The updated list of any data processors is kept at the registered office of the data controller.