Privacy Policy

informative ai pursuant to and for the purposes of art. 13, European General Regulation on data protection no. 679/2016

Dear CUSTOMER,

pursuant to art. 13 par. 1 and art. 14 par. 1 of the European General Data Protection Regulation No. 679/2016, the undersigned company informs you that it is in possession of data relating to you, acquired by you in verbal or written form or acquired from public registers.

The data will be processed in full compliance with the principles of confidentiality, correctness, necessity, pertinence, lawfulness and transparency imposed by the Regulations to protect your privacy and your rights.

1) The Data Controller

The Data Controller is SERVICE GROUP USA INC.1208 S Myrtle Ave – Clearwater, 33756 FL (USA).

The company has not deemed it necessary to appoint any RPD/DPO (Data Protection Officer).

 

2) Purpose of the processing for which the data is intended

The treatment is necessary to formalize and manage the contract with SERVICE GROUP USA INC.

 

3) Processing methods and data retention period

We remind you that the communication of personal data is a necessary requirement for the performance of contractual obligations linked to precise legal or regulatory provisions. Failure to provide such data may prevent the execution of the contract.

Personal data exceeding the purposes of the contract, such as for example the personal mobile phone number or personal e-mail address, are subject to specific consent.

Personal and non-personal data can be processed both electronically and on paper. In particular, in the electronic processing of data, no automated decision-making process is used, including profiling.

Personal data may be used to send promotional and/or informative material on the company's commercial activities and offers. These personal data are not disclosed to third parties for commercial purposes unless expressly authorized.

The data retention period will be 10 years, in accordance with the obligations related to tax and legal obligations.

In particular, the office is subjected to video surveillance on the outside, for the protection of the company's assets. The data is kept for the time necessary to ascertain the absence of fraudulent phenomena (24 hours or closing periods). They can be transferred to the Authority in the case of reports of crimes against company assets.

 

4) Scope of communication and dissemination of data

In relation to the purposes indicated in point 2, the data may be communicated to the following subjects:

  1. a) all subjects to whom the right to access such data is recognized by virtue of regulatory provisions, for example police bodies and public administration in general;
  2. b) to all those natural and/or legal, public and/or private persons when the communication is necessary or functional to guarantee the legal obligations for the purposes illustrated above.
  3. c) Furthermore, the data will always be communicated to the accountant for the purpose of fulfilling the legal obligations associated with the performance of the contract.
  4. d) Other third parties, where consent has been given.

 

5) Rights pursuant to articles 15, 16, 17, 18, 20, 21 and 22 of the REG. EU No. 679/2016

Recalling that if we have obtained consent for the processing of personal data exceeding the purposes of the contract with our firm, you have the right to withdraw consent at any time, we inform you that in your capacity as an interested party, it is possible to exercise the right to lodge a complaint with the Guarantor for the Protection of Personal Data.

We also list the rights, which you can assert by making a specific request to the Data Controller:

Art. 15 – Right of access

The interested party has the right to obtain confirmation from the data controller as to whether or not personal data concerning him is being processed and, in this case, to obtain access to personal data and information regarding the treatment.

Art. 16 – Right of rectification

The interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him without unjustified delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by providing a supplementary declaration.

Art. 17 – Right to cancellation (right to be forgotten)

The interested party has the right to obtain from the data controller the cancellation of personal data concerning him without unjustified delay and the data controller is obliged to cancel the personal data without unjustified delay.

Art. 18 – Right to limit processing

The interested party has the right to obtain from the data controller the limitation of the treatment when one of the following hypotheses occurs.

  1. a) the data subject disputes the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data;
  2. b) the processing is unlawful and the interested party opposes the cancellation of personal data and instead requests that their use be limited;
  3. c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to ascertain, exercise or defend a right in court;
  4. d) the interested party has opposed the processing pursuant to art. 21, paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

Art. 20 – Right to data portability

The interested party has the right to receive, in a structured format, commonly used and readable by an automatic device, the personal data concerning him provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller to whom you provided them.

In exercising his rights in relation to data portability pursuant to paragraph 1, the interested party has the right to obtain the direct transmission of personal data from one data controller to another, if technically feasible.

Art. 21 – Right to object

The interested party has the right to object at any time, for reasons related to his particular situation, to the processing of personal data concerning him pursuant to art. 6, paragraph 1, letters e) of), including profiling on the basis of these provisions.

Art. 22 – Right not to be subjected to automated decision-making, including profiling

The interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or which significantly affects his person in a similar way.

6) Intention to transfer data abroad

The data will not be transferred outside Italy. Using cloud backup services, there is a possibility that data is stored on foreign servers.

7) Changes to treatment

If you would like more information on the processing of your personal data, or exercise the rights referred to in point 5 above, you can write to info@elitekno.org or call 045 4770786. An answer will be provided as soon as possible and in any case within legal limits.

8) Changes to our privacy policy

Applicable law changes over time. Should we decide to update our privacy policy, we will publish the changes on the proprietary site (www.elitekno.org). If we need to change the way we handle personal data, we will provide notice, or where required by law, consent will be obtained before implementing such changes. The privacy policy was last modified on 24.5.2018.