Contattaci

Supplementary Information Notice

Supplementary information notice for commercial and functional purposes of the undersigned’s activities relating to goods/services and newsletters

Information notice pursuant to Article 13 of Regulation (EU) 2016/679

This information notice is intended to supplement the information already provided to the data subject regarding the processing of their personal data for commercial and functional purposes of the undersigned’s activities relating to goods/services and newsletters.

DATA CONTROLLER

The Company COMPUTER DESIGN S.R.L, Tax Code: 02598060966 – VAT No.: 11980150152, with registered office at Via Piave No. 46, Santo Stefano Ticino, Milan (MI) Email: info.cd@cdesign-group.com – PEC:billing.cd@pec.cdesign.it

DATA PROTECTION OFFICER (DPO)

Avv. Clementina Baroni (VAT No. 02001880356 and Tax Code BRNCMN73T50L826B), acting as DPO pursuant to specific appointment, with registered office at Via Domenico Francesco Cecati, 1/1, 42123 Reggio nell’Emilia (RE), contact details: email dpo@studiolegaleavvbaroni.it – PEC clementina.baroni@ordineavvocatireggioemilia.it – Tel. 0522506307.

CATEGORIES OF DATA PROCESSED:

The Data subject to this processing are as follows:

– in the case of natural persons, the personal identification Data (for example: name, surname, place and date of birth, tax code, identification document, telephone number, email address, IBAN);

– in the case of legal entities, the Data will be company name, email address, PEC, IBAN, tax code/VAT number, telephone number, registered office address, etc.

PURPOSE OF PROCESSING

PURPOSES RELATED TO THE PERFORMANCE OF OTHER ACTIVITIES FOR WHICH THE PROVISION OF DATA REQUIRES THE CONSENT OF THE DATA SUBJECT

A) NEWSLETTER DISTRIBUTION: to send you via email, post, SMS, telephone contacts, newsletters, commercial communications and/or advertising material regarding products or services offered by the Controller and to assess the level of satisfaction with the quality of services.

Legal basis of processing: The Processing will therefore be carried out only following receipt of explicit consent (Article 6(a) GDPR) to the processing, which will be communicated through the method proposed below.

Data recipients: the data collected in relation to the stated purpose may be communicated to the Controller’s administrative personnel and human resources, to persons appointed/authorized by the Controller, to data processors designated pursuant to Article 28 of Regulation EU 2016/679, to IT consultants/system administrators. The updated list of processors and persons authorized to process data is kept at the Controller’s registered office and you may access it at any time by submitting an appropriate request to the addresses indicated below.

No dissemination of data to third parties is envisaged.

Duration of processing: the data collected will be retained for the time necessary to fulfill the stated purposes and, in any case, no longer than the withdrawal of consent by the data subject.

At the end of the maximum retention period indicated herein, personal data will be deleted.

Withdrawal of consent to processing: Pursuant to EU Regulation 2016/679, the data subject has the right to withdraw their consent at any time. Upon completion of the requested operation, your personal data will be removed from the Controller’s archives as soon as possible, without prejudice to the lawfulness of processing based on consent given prior to withdrawal.

B) COMMERCIAL AND FUNCTIONAL PURPOSES OF THE UNDERSIGNED’S ACTIVITIES RELATING TO GOODS/SERVICES: communications of a “marketing” nature to inform about promotions, benefits, particularly advantageous offer conditions.

Legal basis of processing: The Processing will therefore be carried out only following receipt of explicit consent (Article 6(a) GDPR) to the processing, which will be communicated through the method proposed below.

Data recipients: the data collected in relation to the stated purpose may be communicated to the Controller’s administrative personnel and human resources, to persons appointed/authorized by the Controller, to data processors designated pursuant to Article 28 of Regulation EU 2016/679, to IT consultants/system administrators. The updated list of processors and persons authorized to process data is kept at the Controller’s registered office and you may access it at any time by submitting an appropriate request to the addresses indicated below.

No dissemination of data to third parties is envisaged.

Duration of processing: the data collected will be retained for the time necessary to fulfill the stated purposes and, in any case, no longer than the withdrawal of consent by the data subject.

At the end of the maximum retention period indicated herein, personal data will be deleted.

Withdrawal of consent to processing: Pursuant to EU Regulation 2016/679, the data subject has the right to withdraw their consent at any time. Upon completion of the requested operation, your personal data will be removed from the Controller’s archives as soon as possible, without prejudice to the lawfulness of processing based on consent given prior to withdrawal.

With reference to points A and B of this information notice, the Data Controller also provides the following information:

Processing methods: the processing of data for the purposes set out above is carried out through electronic, computerized or paper-based support in compliance with the confidentiality and security rules provided for by the aforementioned regulations and by other regulations consequent thereto. They are also processed, on behalf of the undersigned, by professionals and/or companies appointed to carry out technical, development, management and administrative-accounting activities.

Transfer of data abroad: the data collected in relation to the aforementioned purpose are not transferred to countries outside the EU.

The Controller, however, reserves the right to use cloud services; in which case, service providers will be selected from among those who provide adequate guarantees, as required by Article 46 GDPR 2016/679.

Automated decision-making processes: the data collected in relation to the aforementioned purpose are not subject to automated decision-making processes (including profiling).

Rights of the data subject: pursuant to Regulation EU 2016/679, the data subject has the right to:

  • access personal data to know (“reactive transparency”) the purposes of processing, the categories of personal data collected, the recipients of data communication, particularly if recipients in third countries or international organizations, the expected data retention period (Article 15);
  • obtain rectification (Article 16);
  • obtain erasure of personal data, where such data are no longer necessary in relation to the purposes for which they were collected and where there are no further legal requirements for retention (Article 17 GDPR);
  • request restriction of processing (Article 18);
  • request data portability (Article 20);
  • object to processing on grounds relating to your particular situation (Article 21 GDPR). In such case, we will refrain from further processing your data unless we demonstrate the existence of compelling legitimate grounds for processing (e.g., for the defense of your rights in legal proceedings).
  • not to be subject to automated decision-making, including profiling (Article 22);
  • withdraw consent at any time without prejudice to the lawfulness of processing based on consent given prior to withdrawal (Article 7).

Finally, the data subject will have the right to lodge a complaint with the Supervisory Authority pursuant to Article 13(2)(d) of the aforementioned regulation as well as pursuant to Article 77 of the regulation.

Method of exercising rights: the data subject may at any time exercise their rights in accordance with the provisions of Article 12 of EU Regulation 2016/679, by contacting the company, sending a:

or by contacting the DPO, sending a:

Reference clause: for everything not provided for in this information notice, reference is made to the provisions of current laws on the matter and in particular to Regulation 2016/679 as well as to Legislative Decree No. 196/03 as amended by Legislative Decree 101/18 and subsequent amendments, as well as any other related provision.

This site is registered on wpml.org as a development site. Switch to a production site key to remove this banner.