Document on the treatment of personal data

Studio 19, with registered office in Via Callano, 161/163  Lotto D1 Int. 19 – 76121 Barletta (BT) ITALY and  P:IVA 06890790725 (hereinafter, “Holder”), in his capacity as controller, informs you  in accordance with art. 13 D.Lgs 30.6.2003 n. 196 (later, Privacy Code), and art. 13 EU Regulation n. 2016/679  (hereinafter, “GDPR”) that your data will be processing as and for the following purposes:

1.Undergoing Processing
The owner processes personal data identifying (for exemple name, surname, company name, adress, telephone number, e-mail, bank and payment references – hereinafter, “personal data” or “data”) you supply on occasion of the conclusion of contracts for the service of the Data Controller.

2.Purpose of the Processing
Your personal data are processed without express consent (art. 24 lett. a), b),  c) in Privacy Code and art. 6 lett. b), e) GDPR), for the following service purposes:
finalise the contracts for the  services of  the Holder;
fulfil the pre_contractual, contractual and fax obligations deriving from the existing relationship with you;
fulfil the obbligations laid down by law in regulation, Comunity legislation or an order of the Authority (for exemple regarding anti_money laundering);
exercise the rights of the Owner, for exemple, the right to defense in court.
                                                  
3. Processing methods
The processing of your personal data id performed by means of operations indicated in art. 4 n. 2)  of GDPR and in particular: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, block, communication, dissemination, erasure and distruction of  your data.
Your personal data are processed either on paper or electronic and automated processing.
The Data Controller will process the personal data for the time necessary (within and not beyond the 10 years) to fulfil the aforementioned purposes.

4.Data Access
Your data may be made accessible for the purposes referred to in art. 2:
to employees and collaborators of the Data Controller and/or internal processors and/or system administrators to third companies or other entities (for exemple credit institutions, professional firms, consultants, insurance companies, for the provision of insurance services) which carry out activities in outsourcing on behalf of the Holder, in their capacity of external controllers of the treatment.

5.Data Communication
The Holder may communicate his data for the purpose of art. 2 to Supervisory bodies (which are IVASS,) Judicial Authorities, Insurance companies for the provision of insurance services as well as to these people to whom  communication is required by law without the need for  express consent (ex art. 24 lett a), b), d) in Privacy Code and art. 6 lett. b), c) GDPR.

6.Security
The Data are stored and controllated by appropriate use of suitable measures to reduce the risk of loss and destruction, unauthorised login, unsupported, andunauthorised processing and different for the purposes for which the processing is carried out.

7.Data Transfer
The management and storage of personal Data will take place in the area of European Union.

8.Rights of the Data Subject
In your capacity as an interested party, you have the right set forth in art. 15 GDPR, particulary the rights to:
to obtein confirmation whether or not personal data which concern you, even if they are not yet registred, and their comprehensible communication form.
to obtein the indication about the personal data. For exemple:
 origin of the personal data;
 purposes and methods of treatment;
 logic applied in case of processing carried out with the aid of electronic instruments;
information about the Holder, responsible parties and representative designed pursuant to and by effect of art. 5, para. 2 of Privacy Code and art. 3, para. 1, GDPR;
subject or categories to which the personal data could be communicated or that can be informed in quality of responsible or in charge and in the area of diffusion of the data itself;
to obtein:
updating, rectification or, when interested, the integration of data;
 user holds the right to make an anonymous demand for cancellation, trasformation or block of the data which have been treated in breach of law and to refuse in any case for legitimated reasons to grant permission for thei treatment;
certication which the activities relating to letters a) and b) have been brought to the attention of those persons to whom the data have been communicated and/or diffused, except where such fulfilment proves impossible or involves a manifestly disproportionate use of means
in relation to the protected right;
IV. to object,, fully or partially, for legitimate reason to the treatment of personal data concerning you.
Where applicable, you also have the rights under art. 16 – 21  GDPR ((Right to rectification, right to be forgotten, right to restrict processing, right to data portability, right to object), and the right to complain to the Guarantor Authority.

9.Modality of Exercise of rights
You  may exercise your rights at anytime by sending  a notice:
by e-mail to: officestudio19adv.com or by mail A.R.;
to “Studio 19”, with registred office in Via Callano, 161/163  Lotto D1 Int. 19 – 76121 Barletta (BT) ITALY
10. Owner, responsible and appointed
Studio 19 is the Data Controller
The up-to-date list of controllers and processors is kept and can be consulted at the head office of the Data Controller.