Please note that this Notice does not apply to the processing of personal information on behalf of and is subject to the instructions of third parties, such as other service providers or business partners.
The company ICardoo Digital Marketing S.r.l with the registered office via Lussu, SNC - 07100 Sassari (SS) and having VAT number 02756180903 (hereinafter referred to as the Data Controller) as data controller informs you under article 13 of the GDPR 2016/679 that your data will be processed in the manner and for the purposes described below.
An object of the treatment
The owner is responsible for managing non-sensitive personal identification data in full compliance with the law (by way of example but not limited to: name, surname, address, telephone, email - hereinafter referred to as personal data or more simply data) on the occasion of your registration. to this website (hereinafter referred to as the site) owned by the owner, or following participation in opinion and satisfaction surveys, filling out registration forms and participating in events organized by the owner, appeared following online requests and through social networks for clarifications or support requests, or in the case of sending newsletters, promotions or updates on-site activities.
Purpose of the treatment
Service purpose Without your express consent (art. 24 letter a, b, c of the Privacy Code and art. 6 letter b, e of the GDPR) the personal data provided will be collected for the following purposes: operate and maintain the site; allow you to use the services you requested; participate through the site in initiatives organized by the owner (for example: events, premières and exhibitions) to which you have subscribed; process and manage a contact, support or payment request; monitor and analyze site traffic data; interact with social networks or other external platforms, for example through "Like" buttons (provided by the external service and for which the privacy settings relating to the service itself apply); fulfill the obligations established by law and by community legislation; fulfill the obligations established by an order from the Authorities; fulfill the obligations related to the management of the community of users of the site; fulfill the processing obligations connected to the VAT regulation (VAT tax register, etc.); prevent or identify fraudulent activities or abuses against the site or the owner; exercise the rights of the owner, for example to exercise a right in court. In some cases, the provision of the data that is requested is mandatory for access to the service, any refusal to provide such data involves the failure to improve or maintain the requested services.
Subject to your specific and distinct consent (Articles 23 and 130 of the Privacy Code and Article 7 of the GDPR) the personal data provided will be collected for the following other purposes: send you via email newsletters, opinion and/or satisfaction surveys, invitations to events organized by the owner. The provision of this data is optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing the data already provided for Other Purposes. In this case, you will not be able to receive email newsletters, invitations to events or opinion and satisfaction surveys but in any case you will continue to be entitled to the services related to the Service Purposes. Methods of data processing The processing of your data is carried out by means of the operations indicated in the art. 4 Privacy Code and art. 4 no. 2 of the GDPR, or more precisely: collection, registration, organization, conservation, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your data is subjected to both paper and electronic and/or automated processing. The owner will process your personal data for the time necessary to fulfill the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for service purposes and for no more than 2 years from data collection for other purposes. The updated list of data processors and persons in charge of processing is kept at the owner's headquarters.
The owner has adopted various security measures to protect your data against the risk of loss, misuse or alteration. In particular: he has adopted the measures referred to in Articles 32-34 Privacy Code and art. 32 GDPR; uses data encryption technology according to the most modern standards and uses the protected data transmission protocol (HTTPS).
Your personal data may be communicated to: staff and collaborators of the owner as managers and persons in charge of the treatment and management of personal data and the right to privacy; State bodies in charge of checks and controls on the regularity of the obligations required by law; external subjects who carry out specific tasks on behalf of the owner in relation to site management; by way of example but not limited to: the provider (hosting) of the site, cloud service providers, electronic payment service providers, credit institutions, merchandising suppliers or other businesses related to the site, shippers and carriers . In any case, the prohibition to communicate or disseminate personal data to subjects not necessary for the performance of services or products relating to the site remains unaffected.
Without your express consent (pursuant to article 24 letter a, b, d of the Privacy Code and article 6 letter b and c of the GDPR) the owner will be able to communicate your data to Supervisory Bodies, Judicial Authorities as well as to all subjects which communication is mandatory by law for the accomplishment of the related purposes. Your data will not be disclosed. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet registered, and their communication in an intelligible form. Data will never be disclosed for other purposes not previously expressed or indicated in this privacy statement.
Place of data storage
The data are processed at the owner's operating offices and in any other place where the parties involved in the processing are located. The management and storage of data will take place in Europe. For more information, contact the owner.
As a direct interested party in the data provided, you are entitled on the basis of art. 7 of the Privacy Code and art. 15 of the GDPR to: obtain confirmation of the existence or not of personal data concerning you, even if not yet registered, and their communication in an intelligible form; get the indication: the origin of the personal data; the purposes and methods of processing; of the logic applied in case of treatment carried out with the aid of electronic instruments; of the identification details of the owner, of the managers and of the designated representative pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; of the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as designated or appointed representatives; obtain: updating, rectification or integration of data; the cancellation, transformation into anonymous form or blocking of data processed unlawfully, including data whose retention is unnecessary for the purposes for which the data were collected or subsequently processed; the attestation that the operations indicated in the two previous points have been brought to the attention, also as regards their content, of those to whom the data have been communicated or disseminated, except in the case in which this fulfillment proves impossible or involves a use of means manifestly disproportionate to the protected right; object in whole or in part: for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; to the processing of personal data concerning you for the purpose of sending advertising material or direct sales or for carrying out market research or commercial communication, in whole or only in part. Where applicable, you also have the rights provided for in articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to limitation of treatment, right to data portability, right to object) as well as the right to complain to the Guarantor Authority. Minors This site and the owner's services are not intended for minors under the age of 16 and the owner does not intentionally collect personal information even referring to minors under the age of 18. In the event that personal data on minors under the age of 16 are involuntarily recorded, the holder will delete them in a timely manner as soon as he becomes aware of them and consequently the services associated with them will be interrupted, without prejudice to the possibility of the holder of parental responsibility to authorize consent to the use of the data of the subject under the age of 16.
Methods of exercising rights
You can exercise your rights at any time by sending an email to email@example.com
Types of data collected
To improve personal data management procedures and optimally comply with current regulations, the data collected during registration on this site prior to May 14, 2018, which moreover had not been used for some time now not even for sending newsletters, they will be deleted altogether including from the backup media. A single, last email will then be sent to all those who have registered on the site, informing them that - from that moment on - the data will be deleted and to access future services offered by the site, they will have to register again.
Purpose of Service
Without your express consent (Article 24 letter a, b, c of the Privacy Code and Article 6 letter b, e of the GDPR) the personal data provided will be collected for the following purposes: http://www.garanteprivacy.it/web/guest/regolamentou