Privacy Policy

(Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 – “General Data Protection Regulation”)

Dear visitor,

With reference to your personal data processed by the undersigned data controller, pursuant to Regulation (EU) No. 2016/679 (GDPR), we provide you with the following information.

First of all, it is specified that this information is provided pursuant to Article 13 of Regulation (EU) 2016/679, as your data were collected directly from you.

1. Purpose of data processing
The processing of the collected data is mainly aimed at the execution of the mandate and/or a contract to which the data subject is a party and/or the execution of pre-contractual measures taken at the request of the data subject and/or to comply with a legal obligation to which the data controller is subject and/or to safeguard the vital interests of the data subject or another natural person and/or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the data controller and/or for the pursuit of the legitimate interests of the data controller or third parties.

Your personal data may also be processed for the communication of our products and/or services. It is specified from now that such communications may be made in paper form, electronically, or by message. We are opposed to spam and the sending and/or receiving of unwanted emails/messages/letters; therefore, you may at any time decide to no longer receive our communications by sending a simple reply specifying this decision.

2. Methods of processing
In relation to the aforementioned purposes, data processing takes place in compliance with the methods provided for in Articles 5a, 6, 12, and 32 of Regulation (EU) 2016/679.

The data are processed both electronically and on paper. The processing operations are carried out by the Data Controller and/or the data processors, in such a way as to ensure the logical, physical security and confidentiality of your personal data.

3. Identification details of the data controller
The data controller is …, email: info@amami-philo.com, represented by ….

4. Mandatory or optional nature of the provision
With regard to the purposes referred to in Article 1, the provision of your personal data is mandatory and any refusal would make it impossible or, in any case, extremely difficult to execute the contract and/or carry out activities related to the aforementioned legal obligations.

5. Scope of communication and dissemination of data
Your personal data will be communicated to the company’s employees and/or collaborators – previously trained and appointed – in order to ensure a prompt, timely service and in compliance with Regulation (EU) 2016/679.

In addition, subject to any communications made to fulfill legal obligations or orders of the judicial authority, your personal data may be communicated to other data controllers and/or processors established in Italy, such as: credit institutions; debt collection companies; professionals and consultants; companies operating in the IT sector. In any case, should the above circumstances arise, the data controller will inform the data subject, with a separate document, to which subject(s) their data will be transmitted.

Your personal data may be transferred to other countries within the European Union and/or to third countries that guarantee a level of protection considered adequate by Regulation (EU) 2016/679.

In the event that the data are to be transferred to third countries that do not guarantee a level of protection considered adequate by Regulation (EU) 2016/679, such transfer will only take place following specific informed consent, which will be requested from the data subject with a separate document, subject to the right of refusal by the data subject. Even in this last case, the data controller will inform the data subject, with a separate document, to which subject(s) their data will be transmitted.

6. Period of retention of personal data
Your personal data will be retained for the maximum retention period provided by law and in any case for not less than 10 years from the conclusion of the activity, except in the case of any disputes. At the end of this period, you will receive appropriate communication regarding the destruction of your personal data, and any further processing will be subject to new prior information in accordance with the provisions of Regulation (EU) 2016/679.

7. Right of access under Article 15 of Regulation (EU) 2016/679
Pursuant to and for the purposes of Regulation (EU) 2016/679, you have the right to obtain from the data controller access to personal data and the information expressly indicated in Article 15 of Regulation (EU) 2016/679. In the event of exercising the right of access, it will be the responsibility of the data controller to provide you with a copy of the personal data being processed.

8. Right of rectification and erasure under Articles 16 and 17 of Regulation (EU) 2016/679
Pursuant to Articles 16 and 17 of Regulation (EU) 2016/679, you have the right to obtain from the data controller the rectification and/or integration and/or erasure of personal data concerning you, without undue delay.

9. Right to restriction of processing under Article 18 of Regulation (EU) 2016/679
In addition to the previously indicated rights, you have the right to obtain from the data controller the restriction of the processing of your personal data, where one of the conditions of Article 18 of Regulation (EU) 2016/679 applies.

10. Right to object to processing under Article 21 of Regulation (EU) 2016/679
Pursuant to Article 21 of Regulation (EU) 2016/679, you have the right to object at any time, for reasons related to your particular situation, to the processing of personal data concerning you under Article 6, paragraph 1, letters e) or f), including profiling based on these provisions.

In the event of exercising the right to object, your data may no longer be processed, unless the data controller demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.

11. Right to lodge a complaint with a supervisory authority
If you believe that the processing of your personal data violates Regulation (EU) 2016/679, you have the right to lodge a complaint with the competent supervisory authority, located in the territory of the Member State where you habitually reside, or work, or in the place where the alleged violation occurred.

12. Right to data portability under Article 20 of Regulation (EU) 2016/679
Pursuant to and for the purposes of Article 20 of Regulation (EU) 2016/679, you have the right to data portability of the personal data provided to the data controller. This right allows you to receive your personal data in a structured, commonly used, and machine-readable format, or to request their transfer to another controller on an interoperable medium.