Information pursuant to art. 13 of the European Regulation 679/2016

Pursuant to art. 13 of the European Regulation (EU) 2016/679 (hereinafter GDPR), and in relation to the personal data of which the company will become available with the completion of the assignment, we inform you of the following:

Data Controller and Personal Data Protection Officer

The data controller is D-ARS DI CONZATO DENIS (VAT number: 04431820267), with headquarters in Via Trento Trieste, 78/A – Cavasagra di Vedelago (TV) The Data Controller can be contacted at the e-mail address: info@d- ars style
The Data Controller has appointed more data processors and more data processors to assist the owner, whose name will be communicated upon request. The company has not appointed a person responsible for the protection of personal data, as the conditions are not recognized.

Purpose of data processing

The treatment is aimed at the correct execution of the assignment entrusted. Your data will also be processed for the purpose of:

• • perform the services detailed in the contract signed between the parties;

  
  

  • fulfill the obligations established in the administrative, tax and accounting fields;

  
  

  • comply with the obligations incumbent on the company and established by current legislation.
    Personal data may be processed by means of both paper and computerized archives (including portable devices) and processed in ways strictly necessary to cope with the purposes indicated above.

Legal basis of the treatment

The company processes your personal data lawfully, where the processing is necessary for the execution of the task entrusted, on the basis of a contract signed between the parties, or to fulfill a legal obligation as well as, where it is based on express consent, for all further purposes.

Consequences of failure to provide personal data

With regard to personal data relating to the execution of the assignment of which you are a part or relating to the fulfillment of a regulatory obligation (for example the obligations related to the keeping of accounting and tax records), failure to communicate personal data prevents the perfecting of the contractual relationship itself.

Data Retention

Your personal data, subject to processing for the purposes indicated above, will be kept for the duration of the requested service and, subsequently, for the time in which conservation obligations remain for tax purposes or for other purposes, established by law or regulation. The data controller does not transfer personal data to third countries or to international organizations. However, it reserves the right to use cloud services, in which case, the suppliers will be selected from among those equipped with adequate guarantees, pursuant to art. 46 EU Reg. 679/2016.

Data communication

Your personal data may be communicated to:

1. 1. consultants and accountants or lawyers for accounting / tax compliance or protection of contractual rights (e.g. the accountant and the labor consultant, data processors);

   
   

   2. banking institutions that provide functional services for payments, collections, reimbursements connected to the contractual service;

   
   

   3. subjects who process data in execution of specific legal or contractual obligations (e.g. employees and collaborators, persons in charge of processing);

   
   

   4. Judicial or administrative authorities, for the fulfillment of legal obligations.

Violation of personal data (Data Breach)

The Data Controller undertakes to communicate without delay from the detection, any violation (loss, dissemination or compromise) of the personal data collected. This communication will take place in the first place to the competent guarantor authority, and if the conditions set out in art. 34, also to those directly involved.

Data Profiling and Dissemination

Your personal data is not subject to disclosure, nor to any fully automated decision-making process, including profiling, except for the release of express and specific written consent.

Rights of the interested party

Among the rights granted to you by the GDPR are those of:

• • request access to your personal data and information relating to them; the rectification of inaccurate data or the integration of incomplete ones; the cancellation of personal data concerning you (upon the occurrence of one of the conditions indicated in article 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (in the event of one of the hypotheses indicated in article 18, paragraph 1 of the GDPR);

  
  

  • request and obtain – in the cases in which the legal basis of the processing is the contract or consent, and the same is carried out by automated means – your personal data in a structured and readable format by automatic device, also for the purpose of communicating such data to another data controller (so-called right to the portability of personal data);

  
  

  • oppose the processing of your personal data at any time;

  
  

  • withdraw consent at any time, limited to the cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data ( for example data revealing your racial origin, political opinions, religious beliefs, health status or sex life). The processing based on consent and carried out prior to the revocation of the same, however, retains its lawfulness;

  
  

  • propose a complaint to a supervisory authority, if it considers that the processing that concerns you violates the regulations on the protection of personal data (Authority for the protection of personal data – protocol@pec.gpdp.it).