INFORMATION ON THE PROCESSING OF PERSONAL DATA
EU Regulation 679/2016 (hereinafter "GDPR") regarding the protection of personal data requires providing data subjects with information regarding the processing of their personal data.
To this end, STAMPERIA REGIONALE BRAILLE ETS provides the following information:
DATA CONTROLLER
The Data Controller is "Stamperia Regionale Braille Onlus", with registered office in via Aurelio Nicolodi n. 4 Catania, Tax ID and VAT number 93116920872 (hereinafter, "Controller"), in the person of its pro tempore legal representative, Mr. Vincenzo Gueli, having the following contact details:
E-mail: presidente@stamperiabrailleuic.it
Tel: 095/553489
DATA PROCESSOR
The Data Processor for users and clients is the General Manager, Dr. Pino Nobile, for users, clients, staff, and suppliers is the Administrative Manager Dr. Vitaliano Morsicato domiciled for the assignment at the headquarters of the Stamperia, in via Aurelio Nicolodi n. 4 Catania, having the following contact details:
E-mail: direzione.generale@stamperiabrailleuic.it
Tel: 095/553489
DATA PROCESSOR
The Data Processor for staff and suppliers is the Administrative Manager, Dr. Patrizia Finocchiaro, domiciled for the assignment at the headquarters of the Stamperia, in via Aurelio Nicolodi n. 4 Catania, having the following contact details:
E-mail: direzione.amministrativa@stamperiabrailleuic.it
Tel: 095/553489
1. Subject of the Processing
The Controller processes identifying personal data (name, surname, place and date of birth, tax code, address, telephone, e-mail, UICI membership card number, etc.), hereinafter also "data", communicated by the data subject.
Only occasionally are special categories of data processed (political opinions, religious beliefs, trade union membership, data concerning health or sexual orientation, judicial data).
2. Legal basis of the processing
The legal basis that justifies the processing of your data is determined by the "Consent of the data subject" or by the "Performance of a contract".
3. Purposes of the processing
Your personal data are processed:
-
pursuant to Art. 6 lett. b and lett. e of the GDPR, for the following purposes:
- to fulfill the data subject's request;
- to fulfill the obligations established by law, by a regulation, by community legislation or
by an order of the Judicial Authority;
- to exercise the Controller's rights, such as the right of defense in court.
B) pursuant to Art. 7 of the GDPR, for the following purposes:
- to assess the degree of satisfaction with the quality of the service provided, via e-mail, mail and/or
telephone contact.
4. Nature of the data provision and consequences of refusal to consent
The provision of data for the purposes indicated in the previous point under letter A) is mandatory.
In the absence of consent, the Stamperia will not be able to fulfill the request or continue the contract.
The provision of data for the purpose indicated in the previous point under letter B) is instead optional.
Therefore, the data subject can decide for said purpose not to allow the use of their data or to subsequently deny the possibility of processing data already provided. In this case, they will still continue to have the right to the fulfillment of the request or to continue the contract.
5. Processing methods
The processing of personal data is carried out for the following operations: collection, recording, storage, consultation, modification, use, blocking, communication, cancellation, and destruction.
Personal data are subjected to both paper and electronic and/or automated processing; the electronic ones are stored on servers located at the Stamperia.
Personal data are not subject to any fully automated decision-making process.
6. Data retention
The Controller will process personal data for the time strictly necessary to fulfill the purposes indicated in previous point 3, and in any case for no more than 2 years from the fulfillment of the request for services by the users.
Relevant personal data from contracts, invoices, or equivalent documents are kept for 10 years from the conclusion of the relationship.
7. Data access
The data may be made accessible, for the purposes referred to in previous point 3, to:
- Employees of the Stamperia, in their capacity as Persons in charge of processing;
- IT system administrator, in their capacity as External Data Processor;
- UICI National Library "Regina Margherita" of Monza, in execution of the Convention signed to comply with the legislation on the respect of "copyright" in the reproduction of books;
- Owners and employees of companies that perform services for the Stamperia;
- Public entities that carry out control activities over the Stamperia.
The updated list of the Persons in charge of data processing is kept by the Processors mentioned in the premise.
8. Security
The data are stored with the adoption of suitable preventive security measures, aimed at minimizing the risks of loss and destruction, unauthorized access, unpermitted processing, and processing not in accordance with the purposes for which the processing is carried out.
9. Rights of the data subject
In your capacity as a data subject, the GDPR grants you the following rights:
- to obtain confirmation of the existence or not of personal data, even if not yet registered, and their communication in an intelligible form;
- to obtain the indication:
a) of the origin of the personal data;
b) of the purposes and methods of the processing;
c) of the logic applied in case of processing carried out with the aid of electronic instruments;
d) of the identification details of the Controller and Data Processors;
e) of the subjects or categories of subjects to whom personal data may be communicated;
- to obtain:
a) the updating, rectification, or, when interested, integration of data;
b) the cancellation, transformation into anonymous form, or blocking of data processed in violation of the law, including those that do not need to be kept for the purposes for which the data were collected or subsequently processed;
c) certification that the operations as per letters a) and b) have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case where this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right;
- to object, in whole or in part:
a) for legitimate reasons, to the processing of personal data, even if pertinent to the purpose of collection;
b) to the processing of personal data for the purpose of assessing the degree of satisfaction with the quality of the service provided, by e-mail, telephone, or mail.
The right of objection in this point can be limited to excluding certain methods
(e-mail or telephone or mail).
You also have the right to lodge a complaint with the Supervisory Authority (Privacy Guarantor: www.garanteprivacy.it).
10. Methods of exercising rights
The data subject may exercise their rights at any time by sending:
- a registered letter with return receipt to Stamperia Regionale Braille Onlus, via Aurelio Nicolodi n. 4 – 95125 Catania;
or
- an e-mail to the address: protocollo@stamperiabrailleuic.it
or
- an e-mail to the Controller or to the Data Processor indicated in the premise.
THE DATA CONTROLLER
(Mr. Vincenzo Gueli)
N.B.
This policy is of a completely general nature, and reading it does not determine its acceptance. For each individual relationship, the explicit signing of a policy specifically prepared for that purpose will be required.