(ARTICLE 13 European Regulations 2016/679-GDPR)

This information is given to all the natural persons operating in their own name or on behalf of legal entities and it's prepared and released pursuant to art. 13 of the 2016/679 European Regulation (GDPR)[cite: 65, 66]. This information updates and replaces any previous versions released heretofore[cite: 67].

• As a result of the establishment of the relationship and during the course of the same, our Company will collect and process your personal data[cite: 68].
• The following definitions are specified for the sake of clarity[cite: 69]:
  • Personal data: any information relating to an identified or identifiable natural person ('data subject')[cite: 70]. This includes identifiers such as a name, an identification number, location data, an online identifier or factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity[cite: 71].
  • Processing: any operation or set of operations performed on personal data, such as collection, recording, organization, structuring, storage, adaptation, consultation, use, disclosure, restriction, erasure or destruction[cite: 72].

1. DATA CONTROLLER

The Data Controller of your data for the establishment and management of the relationship is:
Parisotto+Formenton & Partners STP S.r.l.
Via Archimede n. 6 - 20129 Milano - Tel. +39 0254050276
VAT: IT14612860966 [cite: 74, 75, 76]

2. PURPOSE AND LEGAL BASIS OF PROCESSING

The collection and processing of personal data are carried out for the purpose of fulfilling the contract between the two parties, which includes[cite: 77, 78]:

• the execution of the contract[cite: 78];
• the fulfillment of fiscal and accounting obligations[cite: 79];
• activities connected to obligations foreseen by law, regulations or community legislation[cite: 79].

The processings are carried out for the fulfillment of legal and contractual obligations[cite: 80].

3. DATA PROCESSED AND PROCESSING METHODS

The data processed are "Personal Data" and are updated, relevant and not excessive[cite: 82]. All data will be processed in compliance with the principles of correctness, lawfulness, transparency and protection of your privacy[cite: 83]. Processing takes place using both automated (electronic/magnetic) and non-automated (paper based) methods[cite: 84].

4. DATA COMMUNICATION

Data collected and processed may be communicated exclusively for the purposes referred to in point 2 to[cite: 86]:

• Banks and Credit Institutions (for transactions relating to payments)[cite: 87].

Furthermore, your data may be processed by the following categories of persons in charge and/or internal and external managers[cite: 88]:

• Employees and collaborators[cite: 89];
• Professionals or service companies for administration, management and auditing[cite: 90].

5. TRANSFER OF DATA ABROAD

The management and storage of personal data takes place within the territory of the European Community[cite: 97]. If necessary to communicate data (limited to e-mail and telephone number) to recipients in Third Countries, this will be performed in compliance with regulations and solely for the purposes referred to in point 2[cite: 100].

6. DURATION OF DATA CONSERVATION

The data provided will be stored in our archives for a duration of 10 years from the termination of the contract, except for the establishment of any disputes[cite: 102].

7. RIGHTS OF THE INTERESTED PARTY

As a data subject, you have the right to[cite: 104]:

• request access to the Data Controller (Art. 15 GDPR)[cite: 105];
• obtain correction (Art. 16), cancellation (Art. 17 "Right to be forgotten"), or limitation (Art. 18)[cite: 106];
• obtain data in a structured, commonly used and readable format (Art. 20 "Right to data portability")[cite: 107, 108];
• exercise the right of opposition (Art. 21)[cite: 109];
• revoke consent to treatment at any time (Art. 7)[cite: 110];
• propose a complaint to the Supervisory Authority (Art. 77)[cite: 111].

These rights may be exercised by sending communications to: info@parisottoeformenton.it[cite: 112].

8. DATA CONFECTION AND REFUSAL

The provision of data is necessary for the activities related to the purposes in paragraph 2; refusal makes it impossible to fulfill these activities[cite: 114].