Newsletter information
INFORMATION
pursuant to art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
Pursuant to Article 13 of the General Data Protection Regulation – Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter “GDPR”), it is our responsibility provide you with some information relating to the processing of your personal data provided as part of the relationship with Philip Martin's s.r.l.
DATA CONTROLLER
The data controller is Philip Martin’s s.r.l., with registered office in Padua, Via Armistizio 13 , tax code, VAT number and registration number in the Padua Company Register: 04450040284 (hereinafter "Owner" or "Company".
​
Mandatory purposes for which processing does not require your consent
PURPOSE
Manage the archiving and storage of data, the sending of information and communications, including electronic, requested by you through the Company website, the sending of documents relating to the relationship with the Company.
LEGAL BASIS OF THE PROCESSING
(Art. 6, paragraph 1, letter c), GDPR)
Processing necessary to fulfill a legal obligation to which the Data Controller is subject
(Art. 6, paragraph 1, letter f), GDPR)
Processing necessary for the pursuit of the legitimate interest of the Data Controller connected to the organizational and administrative management of his organization.
Optional purposes for which the processing requires your consent
PURPOSE
Statistics, commercial, promotional and marketing activities with the provision of material and information on new products, promotions, discounts, concessions and other services of interest by the Owner, also through the sending of specific material in paper and/or electronic form, by means of newsletters (email, sms, mms instant messaging); sending information and invitations to events organized or sponsored by the Company.
LEGAL BASIS OF THE PROCESSING
(Art 6, paragraph 1, letter a), GDPR) Consent
Recipients of personal data
For the pursuit of the purposes indicated above, your personal data may be communicated to:
-
employees and/or collaborators of the Data Controller, duly appointed as authorized subjects and instructed on the methods
of processing of such data;
-
third parties other than the Owner, such as:
THIRD PARTY PARTIES OR CATEGORIES
Information technology companies.
PURPOSE
NOTE
Management, maintenance, updating of systems and software used by the Owner.
Information technology companies.
Providers of networks, electronic communications services and IT and telematics services of archiving, conservation and IT management of data.
Hosting, housing, Cloud, SaaS and other remote IT services essential for the provision of the Data Controller's activities; archiving and conservation services in accordance with electronic documents.
Cloud Services may involve data processing in non-EU countries, which guarantee suitable privacy rights.
Consultants, professionals, law firms, arbitrators, insurance companies, experts, brokers .
Judicial, extrajudicial and insurance activity in the event of accidents
Organizational, administrative, financial and accounting management.
The third parties to whom your personal data may be communicated act as:
-
data controllers, i.e. subjects who determine the purposes and means of the processing of personal data;
-
data controllers, i.e. subjects who process personal data on behalf of the Data Controller;
-
joint data controllers who jointly determine the purposes and means of the same with the Company. The list and updated information of the subjects identified as owners, managers or joint owners is available at the Company.
​
Period of retention of personal data
We illustrate below the period for which personal data will be retained or, if this is not possible, the criteria used to determine this period.
PERSONAL DATA AND DOCUMENTS
Personal data and documents relating to the relationship with the Company.
STORAGE PERIOD OR CRITERIA FOR DETERMINING IT
For duration necessary to pursue the purposes of the processing and also subsequently, within the limits permitted by law, for administrative and accounting purposes, as well as to assert or protect the rights of the Data Controller, where necessary.
Rights of the interested party
We inform you of the existence of some rights provided for by the GDPR relating to personal data and the related processing that you may request from the Data Controller.
RIGHT
DESCRIPTION
MODE
TO MAKE IT EFFECTIVE
Right to withdraw consent
(art. 13, paragraph 2, letter c).
You have the right to withdraw consent for the processing for which you are requested, without prejudice to the lawfulness of the processing based on consent before the revocation.
Forms available on the Owner's website.
Right to access data
(art. 15).
You may request: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients are from third countries or international organisations; d) when possible, the expected retention period of personal data or, if this is not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or to limit the processing of personal data needing him or to oppose their processing; f) the right to lodge a complaint with a superfacery authority; g) if the data are not collected from the interested party, all available information on their origin; h) the existence of an automated decision-making process, including profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and the expected consequences of such processing for the interested party.
You have the right to request a copy of the personal data subject of treatment.
Right of rectification (art. 16).
You have the right to request rectification of inaccurate personal data that you need and to obtain the integration of incomplete personal data.
Forms available on the Owner's website.
Right to be forgotten (art. 17).
You have the right to obtain from the Data Controller the deletion of personal data that need you if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed.
Forms available on the Owner's website.
Right to restriction of processing
(art. 18).
You have the right to obtain from the Data Controller the limitation of processing when you have contested the accuracy of the personal data (for the period necessary for the Data Controller to verify the accuracy of such personal data) or whether the processing is unlawful, but you oppose the deletion of the personal data and instead request that it be limited use or if they are necessary for the assessment, exercise or defense of a right in court, while they are no longer necessary to the Owner.
Forms available on the Owner's website.
Right to portability (art. 20).
You have the right to receive in a structured, commonly used format and readable by automatic device, the personal data needing you provided to us and has the right to transmit them to another owner if the processing: (i) is based on consent, (ii) on the contract and (iii) if the processing is carried out using automated, unless the processing is necessary for the execution of a task of public interest or connected to the exercise of public authority and such transmission does not infringe the rights of a third party.
The right is exercised by opening an appropriate procedure with the Data Controller.
Right to object (art. 21).
You have the right at any time to object, in whole or in part party, to the processing of your personal data if the processing is carried out for the pursuit of a legitimate interest of the Data Controller or if the processing is carried out for direct marketing purposes.
The right is exercised by opening an appropriate procedure with the Data Controller.
Right to lodge a complaint with the Superfacery Authority (art. 77) .
You have the right to lodge a complaint with the Superfacery Authority if you believe that the processing needing you violates the GDPR.
​
The exercise of the aforementioned rights is subject to the limits, rules and procedures established by the GDPR and which the interested party must know and implement. Furthermore, in accordance with the provisions of article 12 paragraph 3, the Data Controller will provide the interested party with information relating to the action taken without unjustified delay and, in any case, at the latest within one month of receiving the request itself. This deadline may be extended by two months, if necessary, taking into account the complexity and number of requests. The Data Controller informs the interested party of this extension, and of the reasons for the delay, within one month of receiving the request.
​
The personal data provided may be processed by the Data Controller with and without the aid of IT tools.
​
We also inform you that the communication of your personal data for the mandatory purposes indicated is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, therefore you have the obligation to provide personal data, because otherwise it will not be possible to manage the relationship with the Company.
​