Privacy Policy

INFORMATION PURSUANT TO ART. 13 PRIVACY CODE

With the entry into force of Legislative Decree 196/03, containing provisions for the protection of persons and other subjects regarding the processing of personal data, Ente Serristori of Castiglion Fiorentino, as Data Controller, is required to provide some information regarding the use of personal data. We therefore inform you that the personal data provided, or otherwise acquired in compliance with the legislative provisions in force – inherent, connected and/or instrumental to existing relationships, may be processed, in compliance with the above legislation recalled and the obligations of confidentiality. The treatment of personal data means their collection, registration, organization, conservation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction or the combination of two or more such operations.

1. Purpose of the treatment for which the data are intended

The data collected through registration will be entered into the database of Ente Serristori of Castiglion Fiorentino and will be processed to allow the provision of the requested service. The recorded data may also be used for statistical reports on our activity, as well as for sending to the interested party of commercial information relating to the same.

2. Methods of data processing

The data will be processed using tools suitable for guaranteeing security and confidentiality and the data will mainly be processed with IT tools and stored both on IT and paper supports and on any other type of suitable support. We also inform you that personal data will be processed in compliance with the methods indicated in Legislative Decree 196/2003, which provides, among other things, that the data itself is:

processed lawfully and fairly;
collected and recorded for specific, explicit and legitimate purposes;
accurate and, if necessary, updated;
relevant, complete and not excessive in relation to the formalities of the treatment.
The data processing is carried out by the eventual manager and by the persons in charge appointed in advance on the basis of the art. 29 and 30, which operate under the control and responsibility of the Owner.

3. Subjects to whom data may be communicated

Where necessary for the purposes referred to in point 1), the data may also be communicated to third parties such as persons in charge of processing personal data within our company; to our consultants, within the limits necessary for the performance of their duties in our company.

4. Rights of the interested party

In relation to the aforementioned treatments, you can exercise the rights referred to in Art. 7 of Legislative Decree. 196/2003 reported below:1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form.

The interested party has the right to obtain the indication:

of the origin of the personal data;
of the purposes and methods of the treatment;
of the logic applied in case of treatment carried out with the aid of electronic instruments;
of the identification details of the owner, of the managers and of the designated representative pursuant to article 5, paragraph 2;
of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated representative in the territory of the State, managers or agents.
The interested party has the right to obtain:

updating, rectification or, when interested, integration of data;
the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed;
the attestation that the operations referred to in letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves the use of means manifestly disproportionate to the protected right.
The interested party has the right to object, in whole or in part:

for legitimate reasons, to the processing of personal data concerning him, even if pertinent to the purpose of the collection;
to the processing of personal data concerning him for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication.
The Data Controller:

Serristori body of Castiglion Fiorentino
Piazza San Francesco no. 6 – Castiglion Fiorentino (AR)