INFORMATION ON THE PROCESSING OF PERSONAL DATA

The user’s personal data are used by Pastorelli Sport S.r.l., which is the holder for its processing, in compliance with the principles of protection of personal data established by art. 13 and 14 of EU Regulation 2016/679.

Read our data processing policy on the website.

HOLDER OF THE TREATMENT

The data controller is Pastorelli Sport S.r.l., in the person of its legal representative Mr Giuseppe Pastorelli, with registered office in Arezzo, at Via Calamandrei 120/R, and for the establishment and management of the contractual relationship, he is the holder of user data qualified as personal data pursuant to EU Regulation 2016/679.

LEGAL BASIS

The provision of data is mandatory for everything required by legal and contractual obligations and therefore any refusal to provide the data in whole or in part may result in the inability to provide the services requested and/or contractually signed.

PURPOSE OF THE TREATMENT

The processing of data is aimed at the correct and complete execution of functions of a purely advisory, preventive, contractual or administrative/accounting nature, necessary by law for the proper performance of the relationship and the provision of the service that the company offers.
Personal data may be collected and processed by means of both paper and computer files (including portable devices) and processed in a manner strictly necessary to meet the purposes indicated above. The data that Pastorelli Sport s.r.l. can collect are data relating to customer identification, billing data and other information that is useful and necessary for the correct provision of the service.
The processing of your particular data pursuant to art. 9 EU Regulation 2016/67 (data relating specifically to racial or ethnic origin, political opinions, religious beliefs, or union membership, as well as genetic data, biometric data, data relating to your health, or to the sexual life or sexual orientation of the person) if it is carried out by the aforementioned Data Controller, it must be conducted in such a way as not to use the same except for the sole purposes of law and to fulfill contractual obligations and exercise rights, to avoid their dissemination and transmission outside the parameters allowed by the GDPR Regulation itself. In the event that these are processed, explicit consent from the interested party is required. The expression of consent must also be required when the Data Controller uses the data for profiling purposes and automation processes, as stated in art. 22 of Regulation 2016/679 and when you decide to transfer data to a third country or an international organization without an opinion of adequacy by the European Commission. If the purposes of the use of your data change, the Data Controller is required to immediately communicate these changes, while specifying that a new consent by the data subject is necessary.

STORAGE PERIOD

The data required for contractual and accounting purposes are kept for the time necessary for the fulfillment of the purposes specified by this or in any case for the fulfillment of the commercial and accounting relationship.
The data of those who do not purchase or use products/services or does not result in signed negotiating agreements, despite having had a previous contact with the company, will be immediately deleted or treated anonymously, where the storage is not otherwise justified, unless the informed consent of the interested parties has been validly obtained for a subsequent commercial promotion or market research activity.

RIGHTS OF THE DATA SUBJECT

In accordance with European Regulation 679/2016 (GDPR) and national legislation, the data subject may, in the manner and within the limits provided for by current legislation, exercise the following rights:

• request confirmation of the existence of personal data concerning him (art. 15 right of access) by contacting the holder at the reference addresses indicated above;
• to know the origin of such data;
• receive intelligible communication;
• have information about the logic, methods and purposes of the processing;
• request their updating, rectification, integration, cancellation, transformation into anonymous form, blocking of data processed in violation of law, including those no longer necessary for the pursuit of the purposes for which they were collected (Articles 16 and 17 right of rectification and cancellation);
• in cases of processing based on consent, receive your data provided to the data controller, in a structured and readable form by a data processor and in a format commonly used by an electronic device;
• the right to lodge a complaint with the Supervisory authority.

DISCLOSURE, COMMUNICATION AND PARTIES ACCESSING THE DATA

Your personal data will not be redisclosed, but may be disclosed where necessary for the provision of the service to third parties (such as third-party technical service providers, postal carriers, hosting providers, computer companies and other professionals) appointed, if necessary, Data Processors by Pastorelli Sport S.r.l., for technical or organizational tasks instrumental to the provision of services.
Access to the data is also allowed to categories of persons appointed by Pastorelli Sport S.r.l., involved in the organization for data processing and duly appointed for the exercise of this function (administrative, commercial, marketing, customer service, system administrators). The updated list of Data Processors may always be requested from the Data Controller.

TRANSFER OF DATA ABROAD

Your personal data will be processed by Pastorelli Sport S.r.l., within the territory of the European Union.
In case of technical and/or operational issues when it is necessary to make use of entities located outside the European Union, or if it becomes necessary to transfer some of the collected data to technical systems and services managed in the cloud and located outside the European Union, the processing will be regulated in accordance with the rules of Regulation 2016/679 art. 44-50 and authorized according to specific decisions of the European Union. All necessary precautions will therefore be taken to ensure complete protection of personal data by basing such transfer: a) on a general principle of lawfulness of the transfer, pursuant to art. 44; b) on the adequacy decisions of the recipient third countries expressed by the European Commission; c) on adequate guarantees expressed by the third party recipient pursuant to art. 46 of Regulation; (d) on the adoption of binding rules of enterprise, cd. Corporate binding rules, pursuant to art.47.

EXERCISE OF ONE’S RIGHTS

These rights can be exercised by communication in writing to the Data Controller, whose contact details are indicated in the appropriate section of this information. In addition, data subjects will always have the right to lodge a complaint with the Data Protection Authority, which can be contacted at guarantor@gpdp.it or through the website http://www.gpdp.it.

LAST UPDATED

This Privacy Policy is updated to 25/05/2018

Data controller of your personal data

Pastorelli Sport S.r.l., in person of its legal representative p.t. The same reserves the right to appoint internal data processors, data processors, data protection officers (DPO)with a specific contract or equivalent legal act; it also reserves the right to modify and update the above information according to the needs and regulations in force.