Newsletter information
INFORMATIVE
pursuant to art. 13 of Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016
Pursuant to Article 13 of the General Data Protection Regulation - Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 concerning the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data (hereinafter "GDPR"), it is our responsibility to provide you with some information relating to the processing of your personal data provided in the context of the relationship with Philip Martin's srl
HOLDER OF THE TREATMENT
The Data Controller is Philip Martin's srl, with registered office in Padua, Via Armistizio 13, tax code, VAT number and registration number in the Padua Company Register: 04450040284 (hereinafter "Owner" or "Company").
​
Mandatory purposes for which the processing does not require your consent
PURPOSE
Manage the archiving and storage of data, sending information and communications, including electronic ones, requested by you through the Company's website, sending documents relating to the relationship with the Company.
LEGAL BASIS OF THE PROCESSING
(Article 6, paragraph 1, letter c), GDPR)
Treatment necessary to fulfill a legal obligation to which the Data Controller is subject
(Article 6, paragraph 1, letter f), GDPR)
Treatment necessary for the pursuit of the legitimate interest of the Data Controller connected to the organizational and administrative management of its organization.
Optional purposes for which the processing requires your consent
PURPOSE
Statistics, commercial, promotional and marketing activities with the provision of material and information on new products, promotions, discounts, concessions and other services of your interest by the Owner, also by sending specific material in paper form and / or electronic, by means of newsletters (e-mail, sms, mms instant messaging); sending information and invitations to events organized or sponsored by the Company.
LEGAL BASIS OF THE PROCESSING
(Article 6, paragraph 1, letter a), GDPR) Consent
Recipients of personal data
For the pursuit of the aforementioned purposes, your personal data may be disclosed to:
employees and / or collaborators of the Data Controller, duly appointed as authorized subjects and instructed on the methods
the processing of such data;
third parties other than the Data Controller, such as:
THIRD PARTIES OR CATEGORIES
IT companies.
PURPOSE
NOTE
Management, maintenance, updating of systems and software used by the Owner.
IT companies.
Providers of networks, electronic communication services and IT and telematic services for archiving, storage and IT management of data.
Hosting, housing, Cloud, SaaS and other remote IT services essential for the provision of the Controller's activities; archiving and conservation services for electronic documents.
Cloud Services may involve data processing in non-EU countries, which guarantee suitable confidentiality rights.
Consultants, professionals, law firms, arbitrators, insurance companies, experts, brokers.
Judicial, extrajudicial, insurance activities in the event of claims
Organizational, administrative, financial and accounting management.
Third parties to whom your personal data may be disclosed act as:
data controllers, i.e. subjects who determine the purposes and means of the processing of personal data;
data processors, i.e. subjects who process personal data on behalf of the Data Controller;
joint data controllers who jointly determine the purposes and means of the same with the Company. The list and updated information of the individuals identified as owners, managers or joint owners is available from the Company.
​
Retention period of personal data
We illustrate below the retention period of personal data or, if this is not possible, the criteria used to determine this period.
PERSONAL DATA AND DOCUMENTS
Personal data and documents relating to the relationship with the Company.
STORAGE PERIOD OR CRITERIA FOR DETERMINING IT
For the duration necessary to pursue the purposes of the processing and also subsequently, within the limits allowed by law, for administrative and accounting purposes, as well as to assert or protect the rights of the Data Controller, where necessary.
Rights of the interested party
We inform you of the existence of some rights provided by the GDPR regarding personal data and the related processing that you may request from the Data Controller.
RIGHT
DESCRIPTION
MODE
TO MAKE IT EFFECTIVE
Right to withdraw consent
(Article 13, paragraph 2, letter c).
You have the right to revoke the consent for the treatments for which it is requested, without prejudice to the lawfulness of the treatment based on the consent before the revocation.
Forms available on the website of the Data Controller.
Right of access to data
(art.15).
You may request: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients of third countries or international organizations; d) when possible, the retention period of the personal data envisaged or, if not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the data controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their treatment; f) the right to lodge a complaint with a supervisory authority; g) if the data are not collected from the data subject, all available information on their origin; h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the interested party.
You have the right to request a copy of the personal data being processed.
Right of rectification (Article 16).
You have the right to request the rectification of inaccurate personal data concerning you and to obtain the integration of incomplete personal data.
Forms available on the website of the Data Controller.
Right to be forgotten (Article 17).
You have the right to obtain from the Data Controller the deletion of personal data concerning you if the personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed.
Forms available on the website of the Data Controller.
Right to limitation of processing
(art. 18).
You have the right to obtain from the Data Controller the limitation of the processing when the accuracy of the personal data has been contested (for the period necessary for the Data Controller to verify the accuracy of such personal data) or if the processing is unlawful, but you oppose the cancellation of personal data and instead requests that their use be limited or if they are necessary for the assessment, exercise or defense of a right in court, while the Data Controller is no longer necessary.
Forms available on the website of the Data Controller.
Right to portability (Article 20).
You have the right to receive the personal data concerning you provided to us in a structured format, commonly used and readable by an automatic device and you have the right to transmit them to another data controller if the processing: (i) is based on consent, (ii ) on the contract and (iii) if the processing is carried out by automated means, unless the processing is necessary for the performance of a task of public interest or connected to the exercise of public authority and that such transmission does not affect the right of a third party.
The right is exercised by opening a suitable procedure with the Data Controller.
Right to object (Article 21).
You have the right at any time to object, in whole or in part, to the processing of your personal data if the processing is carried out for the pursuit of a legitimate interest of the Data Controller or if the processing is carried out for direct marketing purposes.
The right is exercised by opening a suitable procedure with the Data Controller.
Right to lodge a complaint with the Supervisory Authority (Article 77).
You have the right to lodge a complaint with the Supervisory Authority if you believe that the processing that concerns you violates the GDPR.
​
The exercise of the aforementioned rights is subject to the limits, rules and procedures provided for by the GDPR and which the interested party must know and implement. Furthermore, in accordance with the provisions of article 12 paragraph 3, the Data Controller will provide the interested party with information relating to the action taken without undue delay and, in any case, at the latest within one month of receipt of the request. This deadline may be extended by two months, if necessary, taking into account the complexity and number of requests. The Data Controller informs the interested party of this extension, and of the reasons for the delay, within one month of receiving the request.
​
The personal data provided may be processed by the Data Controller with and without the aid of IT tools.
​
We also inform you that the communication of your personal data for the mandatory purposes indicated is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, therefore you have the obligation to provide personal data, because in default it will not be possible manage the relationship with the Company.
​