Privacy

Privacy Policy

Information pursuant to Article 13 of European Regulation 2016/679

Personal data communicated to the Data Controller will be treated with correctness and transparency for lawful purposes and protecting the privacy and rights of the customer in compliance with the Community legislation on the protection of personal data (EU Regulation 2016/679).

1. Data Controller

In accordance with the privacy legislation in force (Art. 13 of European Regulation 2016/679 "GDPR"), the Data Controller is the company Elevante srl, Via Machiavelli 15, 34132 Trieste, Tel. +39 040 9751124, [email protected].

2. Type of Data Processed

The Data Controller will process the personal data communicated by the Customer in the pre-contractual and contractual context for the purposes indicated in this statement. Only data strictly necessary for the stated purposes will be processed.

3. Purposes and Lawful Basis of Processing

The data are processed by the Data Controller for the following purposes:

Information & Estimation Requests

To allow the Data Controller to respond to any requests for information and/or estimation sent by the Customer in the pre-contractual premises. Legal basis: execution of the contract for which the Data Subject is a party.

Booking & Purchase of Services

To allow the Data Controller to process a request for the booking/purchase of a service from the Customer and all related and consequent activities. Legal basis: execution of the contract for which the Data Subject is a party.

Legal & Accounting Obligations

To allow the Data Controller to comply with legal and accounting obligations. Legal basis: compliance with legal obligations.

4. Data Recipients

Data communicated by the customer will be accessible to employees and collaborators of the Controller. The data will not be disseminated and will be treated with organizational and logical methods related to the aforementioned purposes.

5. Methods of Data Processing

The processing of data by the competent corporate structures will take place through appropriate tools to ensure security and confidentiality and can be carried out, as well as with analogical tools, also through automated tools (both IT and telematics tools) to store, manage and transmit data themselves.

The treatment and storage of personal data will be carried out on servers located within the EU, in the headquarters of the Data Controller and/or third-party companies in charge, and no transfer will be made outside the European Union.

6. Data Retention Policy

Personal data communicated by the customer will be retained until the end of the pre-contractual negotiations and, in case of a successful conclusion, for the duration of the contract and afterwards for a duration of 10 years as required by the Civil Code on the conservation of correspondence and by the law on the conservation of fiscal documents.

7. Rights of Data Subjects

As a Data Subject, the Customer has the possibility to exercise the following rights:

  • To access personal data concerning him or her, once confirmation of processing has been received.
  • Of rectification and integration of data pertaining to him or her.
  • To obtain the erasure of the data pertaining to him or her.
  • To obtain the restriction of processing of the data pertaining to him or her.
  • To receive the data communicated to the Data Controller in a structured format of common use, so that they can be sent to another Data Controller (data portability).
  • To object to the processing of his/her personal data if there are reasons related to his or her personal circumstances.
  • Not to be subjected to an automated decision-making process, including profiling, which produces legal effects concerning him or her.
  • To obtain communication in the event that his/her data are subject to a serious violation.
  • To withdraw consent at any time, without prejudice to the lawfulness of processing carried out prior to the revocation.
  • To lodge a complaint with a supervisory authority (Data Protection Authority).

The above rights can be exercised by sending a request without a formal procedure to the Data Controller at the address reported in Art. 1.

8. Nature of Providing Data and Consequences of Refusing to Answer

The communication of data for the above purposes is necessary and mandatory; in fact, in the absence of the aforementioned data, it will not be possible to proceed with the provision of the services described in Art. 3.

The consent to the use of the email for the period of 60 months is optional. The Customer can therefore decide not to give such consent or to revoke the consent given, according to the procedures set out in Art. 7, without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation.

I declare I have received the information pursuant to Art. 13 of European Regulation 2016/679 by Elevante srl.