Data Processing Notice for ** Personal Data – Visitors
******* Sir/Madam,
we have ******* to process information concerning you, your **** personal data, in order to ******** access to our premises while respecting ** measures ** to protect the staff working there, the assets contained therein, and the ****** of overall safety (e.g., in case ** fire).
At *** purpose, **** as prescribed by European data protection law (European Regulation 679/2016), ** ******** ** the following information.
1. ** Data Controller *** processing, ****** the entity to which ******** decisions ******** regarding the purposes, methods, and security of personal data are entrusted, is Ciancaleoni S.r.l. VAT IT00261629546, with its registered office at Via della Meccanica 2/4 – 06038 Spello (PG) – Tel. 0742/301626
emailinfo@ciancaleoni.com
, represented by its *** legal ************** pro tempore.
2. Purposes and legal bases *** processing.
The data ********* that you provide and that may be collected during your ****** will be processed for the purposes according to ** legal bases ********** set forth below:
|
Purposes (Why we process your data) |
Legal Basis (On which legal provision we process them.) |
*********** ** case ** refusal to process (**** ****** if you ******* to provide your personal data and/or to authorize processing) |
|
*** protect ** people who ******** in the premises and the **** company *** ** **** are located. |
– Art. 6, Par. 1, Lett. f) GDPR ** *********** is ********** for the pursuit of the ********* interest of the Company in protecting its ********* and its assets. |
The ******** is not required. |
|
To protect you and ensure your *** safety, ** **** of accident, during your stay on our premises. |
– Art. 6, Par. 1, Lett. c) **** the processing is necessary *** ********* a ******* legal entity to which ** Company is subject. |
Consent is not required. |
- Recipients and Categories of Processed Data.
The personal data you provide or that we acquire will be processed exclusively by duly authorized personnel or by designated data processors via our IT system.
Your data will not be disseminated or disclosed to third parties except as expressly and mandatorily provided by law (e.g., in the case of a request by a Judicial Authority), or at your explicit request.
In addition to any other information you may choose to send us, we will process the following categories of data:
– Identifying data (first name and last name)
– Contact details (addresses, telephone numbers, e-mail).
- International Data Transfer
Your personal data are not transferred outside the European Union.
- Retention Period of Personal Data and Criteria Used
The records are automatically deleted after forty-eight hours, unless the right to restriction is exercised or retention is required for legal purposes.
- Data Subject Rights
You have the right to obtain from the Data Controller, where applicable, access to your personal data and the rectification or erasure thereof or the restriction of processing concerning you, or to object to processing (Articles 15 et seq. of the Regulation). The appropriate request must be submitted in writing, accompanied by an identification document, at the contact points of the Data Controller provided above.
- Right to Lodge a Complaint
If you believe that the processing of your personal data through our websites violates the Regulation, you have the right to lodge a complaint with the Supervisory Authority (Art. 77 of the Regulation) or to take legal action (Art. 79 of the Regulation).
- Collaboration
The protection of your data and compliance with legal principles, particularly the principle of transparency, are of primary importance to us; we would be grateful if you could help us by reporting any misunderstandings in this document or by suggesting improvements through the contact points of the Data Controller indicated above.
