All personal data provided by the Customer to Giglio Fiorentino Sas directly or indirectly is treated in accordance with the articles 13 and 14 of GDPR – UE Ruling 2016/679, relating to the protection of persons and other subjects regarding the processing of personal data, which is based on the principles of fairness, legality and transparency to protect the privacy and rights of the subscriber.
In the respect of articles 13 and 14 of GDPR – UE Ruling 2016/679, Giglio Fiorentino Sas provides the following information to the Customer: A. The data treatment is aimed at concluding, managing and executing the supply of the requested services; to organize, manage and execute the delivery of services, to fulfil legal commitment or other obligations required by the competent authorities. The data treatment will be carried out with computerized / manual means; B. The collected data will be shared with our third party suppliers for the execution of the contract; the names of the suppliers may be communicated through a specific request addressed to Giglio Fiorentino Sas. Unless absolutely necessary for the proper performance of the supply contract, the data will not be disclosed to other parties, without the given consent of the customer. It should also be noted that the disclosure of personal data is not mandatory, however it is necessary and essential for the execution of this contract.
The data controller is Giglio Fiorentino Sas, located in Via Pratese 92/94 – 52145 Florence (FI) – ITALY, to whom the customer can ask to assert his rights with respect to the articles 13 and 14 of GDPR – UE Ruling 2016/679, here below reported:
Right to access personal data and other rights
1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.
2. A data subject shall have the right to be informed:
a) of the source of the personal data;
b) of the purposes and methods of the processing;
c) of the logic applied to the processing, if the latter is carried out with the help of electronic
d) of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);
e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.
3. A data subject shall have the following rights:
a) to obtain updating, rectification or, where interested therein, integration of the data;
b) to obtain erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;
c) to obtain certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.
4. A data subject shall have the right to object, in whole or in part,
a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;
b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.
Viewed the information above, according to articles 13 and 14 of GDPR – UE Ruling 2016/679, I give my consent to the processing of my personal data.