Tellini SRL, with registered offices in Via Stiria 45/49 – 33100 Udine, in its capacity as the Data Controller as to the personal data as per Art. 4 of the EU Regulation 679/2016 (GDPR) informs you, pursuant to Art. 13 of the Regulation, that it will process your personal data for the following purposes. By personal data processing we mean any operation or operations, carried out with or without the use of automated processes and applied to personal data or sets of personal data, e.g. collecting, recording, organizing, structuring, storing, adapting or modifying, extracting, perusing, using, communicating by means of transmission, disclosure or any other form of making available, comparing or interconnecting, limiting, erasing or destroying the data.
The Data Controller is Tellini SRL, registered offices in Via Stiria 45/49 - 33100 Udine.
The Controller can be contacted at [email protected], so that the interested person can exercise his rights.
Purposes of the Processing
The personal data supplied by you will be processed for contractual purposes, including any pre-contractual stage, and namely, sending messages of various kinds and through different media (by telephone, cell phone, texts, e-mail, telefax, ordinary mail); formulating requests or replying to requests; exchanging information for the purpose of finalizing the execution of the contractual relationship, including any pre-contractual activities and post-contractual activities. For the sale or purchase of goods and related services.
Your data can be processed for internal purposes such as statistical analysis and market research. The data can be processed both by means of paper and IT archives, and they will be processed solely according to the procedures required to deal with the purposes listed above.
A failure to provide the personal data will cause the impossibility, on our part, to enter contracts and carry out other related obligations, as well as to correctly manage our mutual business relationships.
Subject to a specific, separate prior consent by you, your personal data can also be processed for each of the following purposes:
- sending through e-mail, ordinary mail, texts, telephone contacts, newsletters, commercial and/or promotional messages or advertising materials about products or services our company provides, or in order to measure the level of satisfaction about their quality;
- transmitting your data to third parties in order for them to carry out information, commercial, advertising, and promotional activities, including the sending of messages through IT media or in paper form;
- profiling [by profiling we mean any form of automated processing of personal data, consisting of the use of such personal data in order to evaluate some personal aspects concerning a natural person, in particular to analyze or predict aspects concerning that person's performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location and movements (Art. 4 of the EU Regulation679/2016)], in particular in order to create your commercial profile and/or for analyzing your preferences, habits or choices as a consumer, also by cross-checking such personal data with other information collected by means of the profiling cookies you accepted.
Your consent for each of these activities is optional, and it will have no interference or consequence on the purposes mentioned above as to the underlying transaction relationship.
Your personal data will be processed for executing a contract or for executing pre-contractual measures that will be adopted on your request..
The processing of your data is based on the consent given as to the activities of sending through e-mail, ordinary mail and/or texts and/or telephone contacts, newsletter, commercial messages and/or advertising materials about products or services the Data Controller provides.
The Data Controller can transfer personal data to third countries or international organization in order to fulfill contractual obligations.
Your data can also be disclosed to third parties for technical and operational reasons closely linked with the purposes mentioned above, and, in particular, to the following classes of subjects:
a) organizations, professionals, companies or other bodies we appoint to carry out the processing linked with administrative, accounting and management processes, linked with the ordinary operation of our business activities, including for credit recovery;
b) public authorities and administrations for the purposes linked with the fulfillment of legal obligations, or to subjects entitled to access them by operation of law, regulations, EU legislation;
c) banks, financial institutions or other subjects to whom the transfer of said data is necessary for the operation of our company with regard to the fulfillment, on our part of contractual obligations we committed to towards you;
d) suppliers of installation, assistance and maintenance services for IT and electronic systems and plants as well as for all the services that are functionally linked and necessary in order to fulfill the performance that are the object of the Contract;
e) our agents, for the activities of representing the company.
Your personal data, which are the object of processing for the purposes mentioned above, will be stored for the duration of the contract, or according to other storage obligations for administrative and taxation purposes or for other purposes provided for by laws or regulations.
The data will be stored for these purposes for a period of 10 years.
The data pertaining to the promotion and marketing of the Data Controller's services will be stored until you exercise your right to erasure.
Rights of the Interested Party
Pursuant to Article 13, par. 2, and 15 to 21 of the Regulation, we inform you that as to the processing of your personal data you can exercise the following rights:
a) Right to access to your personal data and to the following information: the confirmation of whether the processing of your personal data is ongoing or not; the purposes of the processing; the categories of personal data; the recipients or categories of recipients to whom the personal data have been or will be disclosed; if the data have not been collected from the interested party, all the information available as to their source; the existence of an automated decision-making process, including as to any profiling; a copy of the personal data which are the object of the processing.
b) Right to rectification and integration of personal data;
c) Right to erasure of the data («right to be forgotten») for any of the following reasons: the personal data are no longer necessary with regard to the purposes for which they were collected or otherwise processed; the interested party withdraws his consent to the data processing and there is no other legal basis for the processing; the interested party objects to the processing and there is no overriding legitimate grounds for carrying on with the processing; the personal data have been unlawfully processed; the personal data must be erased in compliance with a legal obligation provided for by the European Union legislation or the legislation of the Member State to which the Data Controller is subject. The Data Controller, if it has made the personal data public and is obliged to erase them, must inform other controllers processing the personal data of the request to erase all links, copies or replications of the data.
d) Right to restriction of the processing in cases when: the interested party contests the accuracy of his personal data, for the period that is necessary for the Data Controller to verify the accuracy of said personal data; the processing is unlawful and the interested party objects to the erasure, but requests the restriction of their use, instead; while the Data Controller no longer needs the data for the purposes of processing, but the personal data are needed for the interested party in order to establish, exercise or defend a right in a legal controversy; the interested party objected to the processing, pending the verification as to whether there are overriding legitimate rights of the Data Controller over those of the interested party.
e) Right to lodge a complaint with the Data Protection Authority, according to the procedures and directions published on the official website of the Authority: www.garanteprivacy.it.
f) Right to data portability, i.e. the right to receive in a structured and commonly used format, readable by an automatic device, the personal data concerning him, supplied to a Data Controller, and to transmit them to another Data Controller, if the processing is based on consent or on a contract and it is carried out by automated means. If it is technically feasible, the interested party has the right to have the personal data directly transmitted from one Data Controller to the other one.
g) Right to object at any time to the processing of personal data, including profiling, in particular in cases when: the processing is taking place on the basis of the legitimate interests of the Data Controller, provided the reasons for objecting are explained; the personal data are processed for purposes of direct marketing.
h) Right not to be subject to a decision based solely on automated processing, including profiling, save if the decision: is necessary for the stipulation or execution of a contract between the interested party and the data Controller, is authorized by EU laws or the laws of the member State to which the Data Controller is subject, or is based upon the explicit consent of the interested party.
i) Right to revoke consent at any time; obviously, with all the consequences arising from the impossibility to comply with legal or contractual provisions, if the processing is provided for by such provisions.
The rights are not subject to any restriction in form and can be exercised at no cost.