Privacy Policy

In accordance with and for the purposes of Article 13 Regulation (EU) 2016/679 (GDPR)

EU Regulation 2016/679 – hereinafter also GDPR – establishes rules on the protection of natural persons with regard to the processing of personal data, as well as rules on the free movement of such data. It protects the fundamental rights and freedoms of natural persons, in particular the right to protection of personal data.

In accordance with Art. 4 GDPR: (a) “personal data” shall mean any information relating to an identified or identifiable natural person, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to his or her physical, physiological, genetic, mental, economic, cultural or social identity; (b) “processing” shall mean any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automated means c) “data controller” shall mean the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; d) “consent of the data subject” shall mean any freely given, specific, informed and unambiguous indication of the data subject’s wishes, whereby the data subject, by a statement or an unambiguous affirmative action, indicates his/her agreement to personal data relating to him/her being processed.

In accordance with Article 9 GDPR: e) « special categories of personal data » means personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as processing of genetic data, biometric data intended to uniquely identify a natural person, data concerning the health or sex life or sexual orientation of the person.

In accordance with Art. 10 GDPR: f) « personal data relating to criminal convictions and offences » means personal data relating to criminal convictions and offences or related security measures.

Furthermore, under Article 13 of Regulation (EU) 2016/679 and in accordance with Regulation (EU) 2016/679, abbreviated as GDPR, you provide, in accordance with the principle of fairness, transparency, protection of confidentiality and the rights of the data subject with regard to their data, you declare that you have been informed in respect of the following:

THE DATA CONTROLLER

Under Articles 4 and 24 of EU Reg. 2016/679 it is CLOMEA Soc. coop. with registered office in Via delle fonti, 8/c – 50018 Scandicci (FI) – Italy, C.F. and P.I. 00431100486, website: http://www.clomea.com, namely its legal representative.

The contact details of the Data Controller are listed below: Telephone: +39 055 7310116; E-mail address: direzione@clomea.com

IDENTITY AND CONTACT DETAILS OF THE DATA PROTECTION OFFICER

There is a Data Protection Officer, so-called RDP or DPO. Further information can be requested at any time at the following contact details:

Telephone: +39 055 7310116;
PEC: posta@pec.clomea.com
E-mail address: info@clomea.com

PURPOSE OF PROCESSING, LEGAL BASIS AND NATURE OF PROVISION OF DATA

Personal data to be processed will be:

Browsing the website. The legal basis is the legitimate interest of the data controller or third parties, Art. 6(1)(f) of the GDPR. This activity is strictly necessary for the operation of the website and the provision of the navigation service on the platform.
In the event that a person involved fills in dedicated forms for data collection, in specific areas with Newsletter purposes: subject to his/her consent and until his/her objection to the sending of newsletters by the Data Controller by automated means of e-mail, telefax, SMS or other messages. The legal basis is the granting of consent by the data subject pursuant to Art. 6(1)(a) of the GDPR. The provision of data is optional and, in its absence, the data will not be processed for the pursuit of this purpose, the refusal to provide such data will not affect the possibility to use the above-mentioned purposes.

RECIPIENTS OR CATEGORIES OF RECIPIENTS OF PERSONAL DATA – COMMUNICATION AND DIVULGATION

The Data Controller will not disclose your personal data to unspecified persons in any way, including by making them available or accessible for consultation.

In addition, the Data Controller may communicate Your personal data to one or more specific persons, as specified below:

to persons who have access to the data by virtue of a provision of law, regulation or Community legislation, within the limits provided for by such legislation;
to parties who need access to Your data for purposes ancillary to the relationship between You and us, to the extent strictly necessary to carry out ancillary tasks (for example, credit institutions, forwarding agents, etc…);
to our consultants, to the extent necessary for them to perform their duties in our organisation, subject to our specific instructions as to how the data are to be processed and an explicit commitment to confidentiality and compliance with the technical and organisational measures taken to protect personal data.

PERIOD OF RETENTION OF PERSONAL DATA

Personal data will be processed by the Data Controller only to the extent necessary for the fulfilment of the purpose set out in this Policy. In particular, your personal data will be processed for a period of time equal to the minimum necessary, as indicated by Recital 39 of the EU Regulation 2016/679, without prejudice to a further retention period that may be imposed by law, as also provided by Recital 65 of the EU Regulation 2016/679.

RIGHTS OF THE INTERESTED PARTIES (ART. 15, 16, 17, 18, 19, 20, 21, 22 REG.TO UE 2016/679)

In relation to the data itself, the Data Subject, or a person delegated in writing, may exercise the following rights: a) the right of access, expressly provided for in Article 15 of EU Regulation 2016/679, i.e. the possibility of access to all information of a personal nature concerning him/her; b) the right of rectification, expressly provided for in Article 16 of EU Regulation 2016/679, i.e. the possibility of obtaining the updating of inaccurate personal data concerning him/her without justified delay; c) the right to be forgotten, expressly provided for in Article 17 of EU Regulation 2016/679, consisting in the right to the deletion of personal data concerning the data subject; d) the right to restriction of processing when one of the hypotheses provided for by Art. 18 of EU Regulation 2016/679 applies; e) the right to data portability, expressly provided by Art. 20 of EU Regulation 2016/679, i.e. the right to receive one’s own data in an interoperable format and/or the right to have one’s own personal data transmitted to another data controller without hindrance; f) the right to object to the processing of personal data, expressly provided for in Article 21 of EU Regulation 2016/679; g) the right to cancel consent at any time, as set out in Article 7 of the EU Regulation 2016/679; h) the right to lodge a complaint with a supervisory authority; i) the right to lodge a judicial appeal in the event of unlawful data processing, including against acts taken by the Authority pursuant to Article 78 of the EU Regulation 2016/679. To exercise your rights, you may contact the Data Controller at the contact addresses indicated in this notice.