Security and processing of personal data
Information on the Processing of Personal Data pursuant to Article 13 of Regulation (EU) 2016/679
Pursuant to Article 13 of Regulation (EU) 2016/679 ("GDPR"), IRCA S.p.A. and Irca Distribuzione inform you that the personal data collected will be subject to shared processing for the purposes indicated below and in compliance with the above mentioned regulations; in relation to the above mentioned processing IRCA S.p.A. and Irca Distribuzione provide the following information:
Joint controllers (Article 26 of the GDPR)
IRCA S.p.A. headquarters at Via degli Orsini 5, 21013 Gallarate (VA), VAT number 09684290969, email: [email protected] or [email protected] (hereinafter: Controller or Joint Controller)
Personal Data Collected
The personal data subject to the processing is exclusively related to identification data (as an example: name, surname, e-mail, telephone number and work).
Purposes of the processing, legal basis and data retention
The personal data provided by the user are processed and used exclusively for the following specified purposes. The purposes of the processing of personal data are as follows:
Obligatory data provision
The personal data required to register for the reserved area of the website are marked with an asterisk (*).
Any refusal to provide the above-mentioned data does not, therefore, allow the registration to the reserved area of the website.
The data will be processed by the employees of the Joint Controllers duly appointed and authorized to pursue the above purposes and who have received adequate training and operating instructions.
The data may be processed, on behalf of the Joint Controller, by external subjects duly appointed as Data Processors, to whom operational instructions are given. Such subjects could be included, as an example, in the following categories:
a. companies offering e-mail services;
b. companies offering website maintenance services;
c. companies offering support in carrying out market studies.
We may also be required to disclose personal data to external parties who operate as independent Data Controllers, such as competent judicial authorities or supervisory and control bodies.
Transfer of Personal Data to countries outside the European Union
Personal data will not be transferred to third countries and/or international organisations.
Rights of the data subject
By contacting Irca by e-mail at [email protected], the data subjects may ask the Joint Controller for access to the data concerning them, their erasure, rectification of inaccurate personal data, integration of incomplete data, restriction of processing in the cases provided for in Article 18 GDPR, as well as object to processing, on grounds related to their own particular situation, in the event of a legitimate interest of the Joint Controller.
Furthermore, where the processing is based on consent or contract and is carried out by automated means, the data subjects have the right to receive the data in a structured, commonly used and machine-readable format and, if technically feasible, to transmit them to another joint controller without hindrance.
The data subjects have the right to withdraw the consent given at any time for marketing purposes and to object to the processing of the data. The possibility for the the data subject who prefers to be contacted for the above mentioned purpose exclusively through traditional methods, to express his object only to the receipt of communications through automated means, remains unchanged.
Data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State where they habitually reside or work or in the State where the alleged infringement has occurred.