According to the art. 13 of EU Regulation 2016/679, your data will be processed in accordance with the principles of correctness, lawfulness, transparency and in full protection of your privacy and your rights. To this end, I inform you of the following.
The data controller is La Cucina di Luciana, based in Zola Predosa, via Carrani 22, VAT number: 01234567890 e-mail: firstname.lastname@example.org, pec: email@example.com, telephone: 335 8382222.
Purpose of data processing.
The processing of your personal data is aimed at:
a. allow correct navigation on this website;
b. perform aggregate and anonymous statistical analysis of navigation and users;
c. find requests made by e-mail and / or through the contact form;
d. send you information and / or advertising communications, via e-mail (newsletter), about the services offered by the owner;
is. receive, manage and eventually find work requests (and related curricula vitae) by e-mail and / or through the specific contact form;
f. comply with all the obligations incumbent on the data controller in accordance with current legislation;
g. defend a right in court or before courts with jurisdictional functions.
Legal basis of the processing.
The processing of your personal data is lawful, since:
a. necessary for the execution of the contract of which you are part, or the execution of pre-contractual measures adopted at your request, to: allow the correct navigation on this website; receive, manage and eventually find work requests (and related curricula vitae) by e-mail and / or through the contact form; find requests made by e-mail and / or through the contact form;
b. necessary to fulfill a legal obligation to which the data controller is subject;
c. necessary for the pursuit of the legitimate interest of the data controller, for carrying out aggregate and anonymous statistical analysis of user navigation, aimed at a possible improvement of this website and understanding of how the data controller is searched on the Internet, and for the defense of a right in court or before judicial authorities;
d. based on your express consent, with reference to subscription to the newsletter and sending of information and / or advertising communications, via e-mail (newsletter), on the services offered by the owner.
Data processing methods.
The processing of your personal data is carried out, with methods strictly necessary to meet the aforementioned purposes, by means of some or the set of operations indicated in art. 4, n. 2) of the EU Regulation 2016/679: collection, registration, organization, structuring, storage, consultation, processing, adaptation, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. The operations can be carried out with or without the use of electronic, telematic or automated means.
Provision of data.
Providing your personal data, although not a legal obligation:
a necessary requirement for: allowing correct navigation on this website; receive, manage and eventually find work requests (and related curricula vitae) by e-mail and / or through the contact form; find requests made by e-mail and / or through the contact form; therefore any refusal or failure to provide it will make it impossible to allow you to use this website correctly, to receive work requests (and related curricula vitae), or to reply to your requests by e-mail or contact form;
it is optional, with reference to the sending of informative and / or advertising communications, by e-mail (newsletter), on the services offered by the owner; therefore, failure to provide the data will prevent you from sending the aforementioned communications.
In relation to work requests, the interested party is not required to indicate within his or her curriculum vitae the data included in the particular categories pursuant to art. 9 of EU Regulation 2016/679, ie those suitable for detecting the original racial and ethnic, political opinions, religious or philosophical beliefs, trade union membership, as well as genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sex life or sexual orientation of the person. Where the interested party also confers such data, it will be considered expressed, by the interested party, consent to the relative processing for conclusive facts.
In any case, by giving personal data to the data controller, or to his authorized persons, for any of the purposes listed above, the data controller may process such data to pursue his legitimate interests in carrying out aggregate and anonymous statistical analysis of navigation of users and the protection of their own rights in court or before judicial authorities.
Your personal data will be processed and stored for the entire period necessary to fulfill the aforementioned purposes, expressly including the correct fulfillment of the conservation obligations for tax purposes or for other purposes provided for by law or regulation which the owner is subject to of the treatment.
Your personal data may be disclosed to, or become aware of, for the purposes listed above and to provide, improve, protect and promote our services:
to. subjects authorized to treat;
b. data controllers and related additional managers and authorized parties, such as, by way of example and not limited to: accountants, consultants, service providers, IT service or support providers, and related technical personnel, any collaborators, occasional employees maintenance operations, all adequately trained in protecting privacy;
c. judicial or administrative authorities, for the fulfillment of legal obligations;
d. subjects that process data in compliance with specific legal obligations.
Your personal data are not subject to any fully automated decision-making process, including profiling.
Data transfer abroad.
Your personal data may be transferred to third countries with respect to the European Union, using the owner of services provided by Google LLC (“Google”), with offices at 1600 Amphitheater Parkway, Mountain View, CA 94043, United States, which uses offices located in the United States. Google is, however, compliant with the regulations of the EU-US Privacy Shield, as established by the US Department of Commerce regarding the collection, use and storage of personal data from the European Union and transferred to the States US. To consult Google’s Privacy Shield certifications, visit https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI.
Furthermore, in the event that information and / or commercial e-mails (newsletters) are sent by the data controller, your personal data may be transferred to the United States, as the same owner uses the “MailChimp” service offered by The Rocket Science Group LLC, based in 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308, United States. The Rocket Science Group LLC is, however, compliant with the regulations of the EU-US Privacy Shield, as established by the US Department of Commerce regarding the collection, use and storage of personal data from the European Union and transferred to the United States. To consult the Rocket Science Group LLC / MailChimp certifications related to the Privacy Shield, visit https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG.
Rights of the interested party.
Pursuant to the articles 15-18 and 20-21 of the EU Regulation 2016/679, you have the right to obtain:
a. confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form;
b. the indication:
– the origin of personal data;
– the purposes and methods of processing;
– of the logic applied in the case of processing carried out with the aid of electronic instruments;
– of the identification data concerning the data controller and any data supervisors;
– the subjects or categories of subjects to whom the personal data may be communicated or who can learn about them as managers or agents;
c. updating, rectification or, when interested, integration of data;
d. the deletion, transformation into anonymous form or blocking of data processed in violation of the law, including those for which conservation is not necessary in relation to the purposes for which the data were collected or subsequently processed;
is. the attestation that the operations referred to in letters c) and d) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case where such fulfillment proves impossible or involves a manifestly disproportionate use of resources with respect to the protected right.
You have the right to object, in whole or in part:
a. for legitimate reasons, to the processing of personal data concerning you, even though they are relevant to the purpose of the collection;
b. to the processing of personal data concerning you for the purpose of sending advertising materials or direct sales or for carrying out market research or commercial communication.
You have the right to revoke, at any time, the consent given, in relation to the processing activities of which it represents the legal basis, without prejudice to the lawfulness of the processing based on the consent given before the revocation.
You have the right to data portability, ie to receive in a structured format, commonly used and readable by an automatic device, the personal data concerning you and has the right to transmit such data to another data controller without hindrance. You also have the right to propose the claim right to a supervisory authority (in Italy, the Guarantor for the protection of personal data: www.garanteprivacy.it). You can exercise your rights with a written request sent to the data controller, to the addresses (registered office, pec or e-mail) indicated above.