CAST Alimenti Srl, in its capacity as Data Controller, informs you that EU Regulation no. 2016/679 (c.d. GDPR) regulates the protection of personal data.
CAST Alimenti has the treatment of data on the principles of correctness, lawfulness, transparency and necessity, as required by the aforementioned legislation.
To this end, pursuant to art. 13 of the GDPR, we provide you with the following information:
1. Purpose of the processing.
The processing of personal data is directed exclusively to achieve the following purposes:
a) to proceed with the registration and creation of a user profile that allows access to their data and educational material of the courses purchased;
b) for commercial and marketing purposes;
c) for profiling purposes;
The conferment for the purposes referred to in point 1 lett. b) and c) is optional and must be provided in accordance with the procedures set forth in art. 7 of the GDPR. Communications relating to marketing activities may take place through the use of traditional methods (eg: paper mail, telephone calls) and telematics (eg: e-mail). If you are already a customer, we can send you commercial communications relating to services similar to those you are already using, except for your dissent.
2. Processing methods.
The processing of data may consist, in addition to their collection, in their registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction, as provided by art. 4 n. 2) of the GDPR.
It can be carried out both with the use of paper support, and with the help of electronic, computerized and telematics tools, according to methods and with suitable tools to guarantee the security and confidentiality of the data.
In particular, all appropriate technical and organizational measures will be taken to protect data in order to comply with legal requirements and to protect the rights of data subjects.
Starting from their receipt and / or updating, the data will be kept for a reasonable period with respect to the purposes of the processing indicated in point 1 and in any case in accordance with the law.
3. Communication and dissemination of data.
The data will not be disclosed and will be processed by the Company's employees, who act as authorized persons to process data according to the tasks performed and adequately trained.
The data may be communicated to external subjects including also the Managers appointed pursuant to art. 28 of the GDPR.
In particular, the data may be disclosed to the following categories of subjects, listed below as an example and not exhaustive: banks and companies specialized in payment management and credit insurance, law firms and consultancy firms, persons in charge of auditing of the company's financial statements, public authorities or administrations for legal obligations, Italian and foreign suppliers, financing and transport companies.
It is specified that a detailed list of the data processors is available at the registered office of CAST Alimenti Srl.
4. Rights of the interested party.
In relation to the aforementioned data, all the rights referred to in articles 15, 16, 17, 18, 20 and 21 of the GDPR, and specifically:
a) the right of access to personal data;
b) their correction in case of inaccuracy;
c) cancellation of data;
d) limitation to treatment;
e) opposition to treatment;
f) the right to the portability of data, that is to receive in a structured format, commonly used and readable by automatic device, the personal data provided and to obtain the transfer to another Data Controller without hindrance. In case of violation of these provisions, the data subject has the right to lodge a complaint with the competent Supervisory Authority.
5. Withdrawal of consent.
The consent given may be revoked at any time, without prejudice to the lawfulness of the processing based on the consent given prior to the revocation and the further processing of the same data based on different legal bases with respect to the consent, such as the fulfillment of contractual obligations and by law.
For further information on this information or on the subject of privacy, or to exercise your rights or withdraw consent, you can write to firstname.lastname@example.org.