Privacy policy

Information on Processing of Personal Data – Art. 13 – EU Regulation 679/2016

The above-mentioned Regulation lays down rules relating to the protection of personal data and imposes certain obligations to those who process information relating to other parties’ personal data.  Among the obligations to fulfil is to appropriately inform individuals to whom data are related (Person concerned) about how their data will be used so that their consent to process these data is freely and unequivocally expressed.

Personal Data is any information relating to an identified or identifiable natural person (data subject); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. 

 Processing of personal data is any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

Processing shall be lawful only if and to the extent that at least one of the following applies:

1. the data subject has given consent to the processing of his or her personal data for one or more specific purposes;
2. processing is necessary for the performance of a contract to which the data subject is party or in order to take steps at the request of the data subject prior to entering into a contract;
3. processing is necessary for compliance with a legal obligation to which the controller is subject;
4. processing is necessary in order to protect the vital interests of the data subject or of another natural person;
5. processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
6. processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require protection of personal data, in particular where the data subject is a child.

In order to comply with the above-mentioned provisions, we hereby provide you with the following information:

Data Controller

ASSOCIATI AUDIOVISIVI SRL

Via di Montalbano, 8 – FIRENZE (FI)

telephone: +390559062146

VAT: IT04664300482

Email :   sandro.pollini@misseristudio.com

PEC : associatiaudiovisivi@arubapec.it

 Purpose of The Processing

Your personal data are processed with the aim to enable services and functionalities to process the order(s) for the product(s) you are buying. Communications, contracts and/or other documents (including fiscal documents) govern the relationship between the Data Controller and the Processor(s).

Processing Procedures

Your personal data will be processed in electronic and printed formats by authorised subjects, constantly identified, duly instructed and informed about the obligations set by law on this matter, using appropriate security measures to guarantee the data subject’s privacy and prevent unlawful access by third parties or non-authorised personnel.

Data Storage Period

Data will be stored no longer than is necessary for the purposes for which the personal data are processed, including compliance with legal and fiscal obligations, payment operations, management of guarantees on the service/product and other rights. When the personal data are no longer functional for the purpose they were collected and there are no legal reasons to store them, they will be erased.

Personal data will be erased also in case of withdrawal of consent by the data subject.

The data storage period may depend also on the fiscal regulations and other national and European laws. Some data may be useful for the whole period of the relationship with the data subject. Sometimes it is not clear whether such relationship has definitively ended or just suspended, therefore the personal data cannot be erased.

After a reasonably long period of time, data will be erased because they could turn out to be not updated in case the relationship with the data subject would resume.

 Rights of the Data Subject

We inform the data subject that he/she shall have the right to ask the Data Controller what follows:

• Access their personal data (art. 15 EU Regulation 679/2016)
• Supplement the personal data when they have changed (art. 16 EU Regulation 679/2016)
• Rectify the data (art. 16 EU Regulation 679/2016)
• Data erasure or “right to be forgotten”, as the case may be (art. 17 EU Regulation 679/2016)
• Restriction of processing because, for instance, some data exceed the purposes of the processing (art. 18 EU Regulation 679/2016)
• Data portability, that means the right to transmit the data to another controller without hindrance nor expenses (art. 20 EU Regulation 679/2016)
• Object to processing of personal data for legitimate reasons (art. 21 EU Regulation 679/2016)
• Withdraw their consent at any time without prejudice to the lawfulness of the processing based on consent before their withdrawal (art. 7 par. 3 EU Regulation 679/2016)
• File a complaint to the Supervisory Authority (Garante Privacy) following the procedures and instructions published on the Authority’s official website: garanteprivacy.it (art. 51 EU Regulation 679/2016)

 Communication of data to third parties other than the controller

Your data will not be publicized and will not be transferred to foreign countries or international organizations.

Data can be processed by the company’s authorised processors (Employees, Collaborators) and/or external resources (external subjects can learn about the data for purposes relating to fiscal, accounting or contractual obligations, or for IT support): an updated list of the subjects who can get to know about the data can be consulted at the Controller’s headquarters;

The exercise of your rights is not subject to any obligation and it is free.

You can exercise your rights at any time sending:

• A registered post with return receipt to: Associati Audiovisivi Srl - Via di Montalbano, 8 – FIRENZE (FI)
• A Certified Email (PEC) to: associatiaudiovisivi@arubapec.it