INFORMATION NOTICE ON THE PROCESSING OF PERSONAL DATA
LCI Lavorazione Carta Riciclata Italiana S.r.l., with registered office in Viale della Repubblica no. 193/B – 31100 – Treviso (TV) - Italy (hereinafter, the “Data Controller”), in its capacity as data controller, hereby informs you that, pursuant to art. 13 of EU Regulation no. 2016/679 (hereinafter, “GDPR”), your data will be processed in accordance with the following procedures and for the following purposes.
1) Data subject to processing.
The Data Controller processes the personal identification data (e.g. name, surname, company name, e-mail address), hereinafter referred to simply as “data”, which you may provide.
2) Legal basis and purposes of processing.
Personal data will be processed in order to partially execute a contract to which you are party and, therefore, to grant you access to the reserved area, as well as to view, extract or modify documentation. Providing your data for the aforementioned purpose is necessary in order to grant you access to the reserved area; failure to do so will make it impossible for us to provide the information requested.
3) Processing procedures and the period for which personal data will be stored.
Your data will be processed following the procedures stated by art. 4, no. 2) of the GDPR and, more precisely: collection, recording, organisation, storage, consultation, processing, modification, selection, extraction, use, blocking, disclosure, cancellation and destruction of data. Your personal data will be processed in both paper and electronic/digital format. The Data Controller will store your personal data for the amount of time necessary to fulfil the purpose referred to by paragraph 2) above, unless the Data Controller needs to store said data for longer periods of time in order to meet the need to verify, exercise or defend a right as part of legal proceedings, or whenever the judicial authorities exercise their functions.
4) Categories of recipients of personal data.
Remaining within the limits and for the purposes stated by the previous paragraphs, your personal data may be disclosed, in addition to the data processors and/or sub-data processors (if appointed) and to the individuals working under the latter’s authority or the authority of the Data Controller (duly trained employees and in-house collaborators), also to public bodies and institutions and to parties to whom the data must be disclosed in order to comply with legal obligations, regulations or EU legislation or to comply with an order from the judicial authorities, as well as to any other third parties, for the cases specifically stated by the law, or should disclosure become necessary to protect the Data Controller as part of legal action. In any case, you may ask to be kept updated on data relating to data processors and sub-data processors, if appointed, by sending a written request to the addresses provided in point 6 below.
5) Rights of the Data Subject.
As a Data Subject, you have the rights provided for by articles 15, 16, 17, 18, 20 and 21 of the GDPR and, more precisely, the right to:
a) access: the Data Subject shall have the right to obtain from the Data Controller confirmation as to whether or not personal data concerning him or her is being processed, and, where that is the case, access to the personal data and information regarding the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients, the period for which the data will be stored (if possible), the right to request rectification, erasure or restriction of processing and the right to lodge a complaint with a supervisory authority;
b) rectification: the data subject shall have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning him or her;
c) erasure (“right to be forgotten”): the Data Subject shall have the right to obtain from the Data Controller erasure of the data concerning him or her, without undue delay, when the grounds stated by article 17 of the GDPR apply;
d) restriction of processing: the Data Subject shall have the right to obtain from the Data Controller restriction of processing of data concerning him or her, when the grounds stated by article 18 of the GDPR apply;
e) data portability: the Data Subject shall have the right to receive the personal data concerning him or her, which he or she has provided to a data controller, in a structured, commonly used and machine-readable format and has the right to transmit said data to another controller without hindrance from the controller to which the personal data has been provided, in the cases provided for by article 20 of the GDPR;
f) objection: the Data Subject shall have the right to object at any time to processing of personal data concerning him or her, in the cases provided for by article 21 of the GDPR;
g) withdrawal: the Data Subject has the right to withdraw the consent provided to the Data Controller at any time, without prejudice to the lawfulness of any processing based on consent carried out before said withdrawal;
h) lodge a complaint with the supervisory authority (the Italian data protection authority).
6) How to exercise your rights.
You may exercise your rights at any time, by sending:
- a registered letter to LCI S.r.l., with headquarters in Viale della Repubblica no. 193/B – 31100 – Treviso (TV) - Italy;
- an e-mail to the address: firstname.lastname@example.org