Privacy Policy
In this text various data are recurring, and we will refer to them as follows:
Information pursuant to art. 13 of Regulation (EU) no. 679/2016 ("GDPR")
Information pursuant to art. 13 pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, of 27 April 2016, concerning the protection of natural persons with regard to the processing of personal data (for brevity GDPR 2016/679)
1. Data controller and data processors - art. 13 co. 1 lit. [a] [b] GDPR 2016/679
The data controller is World-IAC, with registered office in via di Ponzano n°24, Empoli, 50053, Florence, in the person of its legal representative, who can be contacted to exercise the rights recognized by the GDPR via the address privacy@world-iac.it
The Data Controller has appointed a Data Protection Officer -DPO who can be contacted for any information and request at dpo@world-iac.it
2. Purpose and legal basis of the processing - art. 13 co. 1 lit. [c] [d] GDPR 2016/679
The personal data provided may be processed only for the following purposes:
• customer database management;
• execution of the service requested by you;
• sending of service communications;
• fulfill legal obligations and comply with requests from the authorities;
• sending of newsletters and various information.
The legal basis of the aforementioned treatments is the art. 6.1 [b] GDPR - the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same and, for particular/sensitive data, art. 9.2 [f] - the processing is necessary for the correct performance of the requested activity. The data provided - are processed within the context of the requested service with treatment authorized by current law with guarantees
appropriate for the rights and freedoms of data subjects. The data provided may be used by the data controller within group companies and shared with them by virtue of specifically stipulated agreements and this is expressly acknowledged.
No further processing based on the legitimate interests pursued by the data controller is envisaged.
3. Types of data processed
Common data, such as, by way of example:
- mobile phone master data;
- email;
- billing information;
- home and/or work address;
- particular and sensitive data.
4. Communication and dissemination of data - art. 13 co. 1 lit. [e] [f] GDPR 2016/679
The data may only be communicated to the interested party and to persons explicitly indicated by the interested party, or to fulfill a legal obligation to which the data controller is subject, or even when it is necessary for the execution of a task of public interest of which the data controller is invested. The data will not be further communicated except to persons duly authorized by the owner (for example: lawyers, collaborators, consultants, subjects operating in the judicial sector and, in general, to all those subjects to whom the communication is necessary for the correct fulfillment for the purposes indicated in point 1). The data will not be disclosed. The data will not be transferred to a third country or to an international organization.
5. Processing methods and data retention times - art. 13 co. 2 lett. [a] GDPR 2016/679
The processing of personal data consists of the collection, registration, organization, conservation, communication of the same data.
The processing of personal data is carried out for the aforementioned purposes, in compliance with the provisions of article 5 of the European Regulation on the processing of personal data, on:
• paper support;
• Informatic support;
• by electronic means (email, sms, etc.);
in compliance with the rules of lawfulness, legitimacy, confidentiality and security established by current legislation.
The data will be kept for a period of time not exceeding that necessary for the purposes for which they were collected or subsequently processed in accordance with the provisions of legal obligations.
6. Rights of the interested party - art. 13 co. 2 lett. [b] [c] [d] GDPR 2016/679
At any time, you may exercise, pursuant to art. 7 of Legislative Decree 196/2003 and articles from 15 to 22 of EU Regulation no. 2016/679, the right to:
a) request confirmation of the existence or otherwise of your personal data;
b) obtain information about the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the retention period;
c) obtain the rectification and cancellation of data;
d) obtain the limitation of the treatment;
e) obtain data portability, i.e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
f) oppose the treatment at any time and also in the case of treatment for direct marketing purposes; g) oppose an automated decision-making process relating to natural persons, including profiling.
h) ask the data controller to access personal data and correct or cancel them or limit their processing or to oppose their treatment, in addition to the right to data portability;
i) withdraw the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation;
j) lodge a complaint with a supervisory authority.
7. Nature of the provision of personal data and consequences of any refusal to respond - art. 13 CO. 2 lett. [e] [f] GDPR 2016/679
The provision of personal data is optional. Any refusal to provide them will make it impossible to perform the requested service.
With regard to your data, there is no automated decision-making process, much less a treatment that involves your profiling.
Rights of the interested party
art 1. Right of access
1. The interested party has the right to obtain confirmation from the data controller as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be disclosed, in particular if recipients from third countries or international organizations;
d) when possible, the envisaged retention period for personal data or, if this is not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning him or her or to oppose their treatment;
g) the right to lodge a complaint with the Guarantor Authority for the protection of personal data.
2. If personal data is transferred to a third country or to an international organization, the interested party has the right to be informed of the existence of adequate guarantees pursuant to article 46 relating to the transfer.
3. The data controller provides a copy of the personal data being processed. In the event of further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.
The right to obtain a copy referred to in paragraph 3 must not affect the rights and freedoms of others.
art 2. Right of rectification
The interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him without
unjustified delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of personal data
incomplete, even providing a supplementary declaration.
art 3. Right to cancellation
1. The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay and the data controller has the obligation to cancel personal data without unjustified delay, if one of the following reasons exists:
a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
b) the interested party revokes the consent on which the treatment is based in accordance with article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), and if there is no other legal basis for the treatment ;
c) the interested party opposes the processing pursuant to article 21, paragraph 1, and there is no overriding legitimate reason to proceed with the processing, or opposes the processing pursuant to article 21, paragraph 2;
d) the personal data have been processed unlawfully;
e) personal data must be canceled to fulfill a legal obligation under Union or Member State law to which the data controller is subject;
f) the personal data have been collected in relation to the offer of information society services referred to in Article 8, paragraph 1.
2. If the data controller has made personal data public and is obliged, pursuant to paragraph 1, to delete them, taking into account the available technology and implementation costs, he adopts reasonable measures, including technical ones, to inform the data controllers who are processing the personal data of the interested party's request to cancel any link, copy or reproduction of his personal data.
3. Paragraphs 1 and 2 do not apply to the extent that the processing is necessary:
a) for the exercise of the right to freedom of expression and information;
b) for the fulfillment of a legal obligation which requires the processing envisaged by Union or Member State law to which the data controller is subject or for the performance of a task carried out in the public interest or in the exercise of public powers with which the data controller is invested;
c) for reasons of public interest in the field of public health in accordance with Article 9, paragraph 2, letters h) and i), and
Article 9, paragraph 3;
d) for archiving purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89, paragraph 1, to the extent that the right referred to in paragraph 1 risks making it impossible or seriously jeopardizing the achievement of the objectives of such processing; or e) for the assessment, exercise or defense of a right in court.
art 4. Right to limit treatment
1. The interested party has the right to obtain from the data controller the limitation of the treatment when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited;
c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
d) the interested party has opposed the processing pursuant to article 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.
If the processing is limited pursuant to paragraph 1, such personal data are processed, except for storage, only with the consent of the interested party or for the assessment, exercise or defense of a right in court or for protect the rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State.
art 5. Right to data portability
1. The interested party has the right to receive the personal data concerning him/her provided to a data controller in a structured, commonly used and automatically readable format and has the right to transmit such data to another data controller without impediments by the data controller to whom they have been provided if:
a) the processing is based on consent pursuant to article 6, paragraph 1, letter a), or article 9, paragraph 2, letter a), or on a contract pursuant to article 6, paragraph 1, letter b); And
b) the processing is carried out by automated means.
2. In exercising their rights in relation to data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.
3. The exercise of the right referred to in paragraph 1 of this article is without prejudice to article 17. This right does not apply to processing necessary for the performance of a task in the public interest or connected to the exercise of public powers referred to the data controller is involved.
4. The right referred to in paragraph 1 must not harm the rights and freedoms of others.
art 6. Right to object
1. The interested party has the right to object at any time, for reasons connected to his particular situation, to the processing of personal data concerning him pursuant to article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions. The data controller refrains from further processing the personal data unless he demonstrates the existence of legitimate binding reasons for proceeding with the processing which prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or the defense of a right in court.
2. If personal data is processed for direct marketing purposes, the interested party has the right to object at any time to the processing of personal data concerning him/her carried out for these purposes, including profiling to the extent that it is connected to such marketing direct.
3. If the interested party opposes the processing for direct marketing purposes, the personal data are no longer subject to processing for these purposes.
4. The right referred to in paragraphs 1 and 2 is explicitly brought to the attention of the interested party and is presented clearly and separately from any other information at the latest at the time of the first communication with the interested party.
5. In the context of the use of information society services and without prejudice to Directive 2002/58/EC, the interested party can exercise his or her right to object by automated means that use technical specifications.
If personal data is processed for scientific or historical research purposes or for statistical purposes pursuant to article 89, paragraph 1, the interested party, for reasons connected with his particular situation, has the right to object to the processing of personal data which he regards, unless the processing is necessary for the performance of a task in the public interest. Art.12Right to withdraw consent If the treatment is based on the consent of the interested party, he has the right to withdraw the consent at any time without prejudicing the lawfulness of the treatment based on the consent given before the revocation.
art 7. Right to lodge a complaint with the supervisory authority
1. Without prejudice to any other administrative or judicial appeal, the interested party who considers that the processing concerning him/her infringes this regulation has the right to lodge a complaint with a supervisory authority, especially in the Member State in which he habitually resides, works or of the place where the alleged violation occurred.
2. The supervisory authority to which the complaint has been lodged informs the complainant of the status or outcome of the complaint, including the possibility of a judicial remedy pursuant to article 78.
More information about how to submit a complaint can be found by following the procedures and indications published on the Authority's official website at www.garanteprivacy.it
art 8. Information for exercising rights
1. The data controller takes appropriate measures to provide the interested party with all the communications referred to in articles 15 to 20 relating to the processing in a concise, transparent, intelligible and easily accessible form, with simple and clear language, in particular in the case of information intended specifically for minors. The information is provided in writing or by other means, including, where appropriate, by electronic means. If requested by the interested party, the information can be provided orally, provided that the identity of the interested party is proven by other means.
2. The data controller facilitates the exercise of the rights of the interested party.
3. The data controller provides the data subject with information relating to the action taken regarding a request without unjustified delay and, in any case, at the latest within one month of receiving the request. This deadline can be extended by two months, if necessary, taking into account the complexity and number of requests. The data controller informs the interested party of this extension, and of the reasons for the delay, within one month of receiving the request. If the interested party submits the request by electronic means, the information is provided, where possible, by electronic means, unless otherwise indicated by the interested party.
4. If the data controller fails to comply with the request of the data subject, it informs the data subject without delay, and at the latest within one month of receipt of the request, of the reasons for the non-compliance and of the possibility of filing a complaint with a supervisory authority. control and to bring judicial review.
5. The information provided is free. If the requests of the interested party are manifestly unfounded or excessive, in particular due to their repetitive nature, the data controller may: a) charge a reasonable fee taking into account the administrative costs incurred to provide the information or communication or undertake the action required; or refuse to comply with the request. The burden of demonstrating the manifestly unfounded or excessive nature of the request falls on the data controller.
6. Without prejudice to article 11, if the data controller has reasonable doubts about the identity of the natural person submitting the request, he may request further information necessary to confirm the identity of the data subject.
7. The information to be provided to data subjects pursuant to articles 13 and 14 can be provided in combination with standardized icons to give, in an easily visible, intelligible and clearly legible way, an overview of the envisaged treatment.
When submitted electronically, icons are machine readable.
Cookie Policy
Dear user, third-party cookies are used on our website in order to offer you the best browsing experience. In this section you will find all the necessary information on the matter.
What are cookies
When you visit a website, your computer stores a text file: this text file is called a cookie.
This small file contains information that that website will use when you decide to access it again. This service allows you, for example, not to have to enter your username and/or language settings every time on the same site. In any case, you can always disable cookies and we'll explain how to do it below.
How to remove cookies
We remind you that by deactivating cookies, when you access our online services you will always have to enter the information requested again, because the system will not have saved them.
Depending on the browser you use, there are different ways to disable cookies: Microsoft Internet Explorer - Google Chrome - Mozilla Firefox - Apple Safari.
To disable Flash Player cookies, follow this guide.
Third party cookies
A website can host third-party services on its pages, for example advertising banners, even social plug-ins, YouTube,
Slideshares etc. In this case, they are called third-party cookies precisely because they cannot be directly traced back to the website you are visiting but, instead, to the external services it offers you.
Our website also uses this type of service; below, for each service used or usable, we provide the link to the specific information: Google (Plus, Maps, YouTube) - Facebook - Twitter - LinkedIn and Slideshare - Instagram.
USE OF THE ONLINE ANALYSIS SOFTWARE "GOOGLE ANALYTICS" AND RELATED COOKIES
For discussion of the topic, the user is referred to the cookies page.
PART RESERVED FOR MINORS
No person under the age of 18, without the prior consent of their parents or guardians, may send information to this website, nor may make purchases or complete legal acts on this site without the aforementioned consent, unless this is not permitted by the regulations in force.
MANAGEMENT OF USER COMMENTS
Our site is managed through an Open Source CMS that allows users to insert comments on the various pages. Comments are entered by users of their own free will. When a site user enters a comment on one or more of the site's contents - where comments are enabled - the system automatically detects and stores the data entered: name, e-mail address, website, if any, the date, time and IP address of the device from which the comments were sent and the text of the comment. Of these data, the name, any website, the text of the comment, the date and time of insertion, will be publicly visible on the page where the comment is left. The data entered in the fields name, e-mail and website are not subject to verification by us, and therefore the user could also enter data that is not his own. The user is responsible in all respects for the data and content entered as a comment.
CHANGES TO THE SITE
The Site Owner reserves the right to modify the contents of the Site at any time and without notice. The user agrees to be bound by any such future revisions and therefore undertakes to periodically visit the Site to be informed of any changes.
CHANGES TO THIS PAGE
The Data Controller reserves the right to make changes to this page. The user agrees to be bound by any such future revisions and therefore undertakes to periodically visit this page to be informed of any changes.