INFORMATION RELATING TO THE PROCESSING OF PERSONAL DATA
1. Identity and contact details of the data controller
This information regulates the processing of personal data, in compliance with current data protection regulations, including, in particular, EU Regulation 2016/679 (hereinafter "GDPR"), carried out by Chilometro 162 srl, Via Soardi, 5, 47921 Rimini (RN), VAT number 04522410408, PEC [chilometro162srl@pec.it] Tel. [3356949975], Fax [—], (hereinafter also “the Owner”). Since the Owner is established in Italy, no representative has been appointed.
2. Purpose of the processing, optional consent and consequences of failure to consent and legal basis of the processing
The data subject's personal data is processed, subject to their consent, to enable the sending of newsletters via email and messaging systems. In this case, the data subject's express consent constitutes the legal basis. Providing the data is therefore entirely optional and does not constitute a contractual obligation on the part of the data subject. Without this data, it will not be possible to send the newsletter.
3. Processing methods and retention period
The data will be processed using CRM software and automated systems, as well as other computerized and paper-based systems.
4. Methods of expressing consent
Consent to the processing of personal data may be expressed by clicking on a specific box.
5. Source from which the personal data originate
Only data provided by the interested party in accordance with this policy will be processed. Data from publicly accessible sources will not be processed.
6. Recipients and possible categories of recipients of personal data
[Emiliano Neri and Enzo Vicennati]
7. Data categories
The data subject's personal data will be processed. Specially identified data pursuant to Art. 9 of the GDPR will not be processed.
8. Data transfer
The Data Controller intends to transfer personal data to a third country or to an international organization. Such entities may include, for example: • Communications companies that perform communications activities on behalf of the Data Controller; • Companies that offer information society services, including, in particular, those that offer hosting services;
• Communications company service providers; The transfer of personal data to these entities, if established in a third country or an international organization, is carried out in the presence of an adequacy decision by the European Commission, which has verified that the third country, the territory, or one or more specific sectors within the third country or the international organization in question guarantees an adequate level of protection of your rights. In any case, the Data Controller – if it deems it appropriate – reserves the right to enter into specific separate agreements that oblige these entities to adopt adequate security measures, including organizational measures, aimed at offering appropriate guarantees regarding your rights. Google Inc., in particular, is contractually bound to ensure adequate protection of the rights of the data subject. The data may therefore be transferred to the following countries: United States of America, [Italy]. To obtain a copy of such data or the location where it was made available, simply send a request to: [info@km162.com]
9. Retention period of personal data
The data is processed until deletion is requested. The Data Controller reserves the right, in any case, to request the interested party to renew their consent to processing and/or to verify the consent already given.
10. Rights of the interested party
10.1 Right to object
The data subject has the right to object, on grounds relating to his or her particular situation, at any time to processing of personal data concerning him or her pursuant to Article 6, paragraph 1, letters e) or f) of the GDPR, including profiling based on those provisions. The Data Controller will no longer process the personal data unless the Data Controller demonstrates compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or for the establishment, exercise, or defense of legal claims. If personal data are processed for direct marketing purposes, the data subject shall have the right to object at any time to processing of personal data concerning him or her for such purposes, including profiling to the extent that it is related to such direct marketing. If the data subject objects to processing for direct marketing purposes, the personal data will no longer be processed for such purposes. It is specified that the data subject's right to object to the processing of their personal data for the aforementioned purposes may be exercised only in part, for example by objecting only to the sending of promotional communications via automated and/or digital means, or to the sending of paper communications and/or the receipt of telephone communications. If personal data is processed for scientific or historical research purposes or for statistical purposes pursuant to Article 89, paragraph 1 of the GDPR, the data subject, for reasons relating to their particular situation, has the right to object to the processing of personal data concerning them, unless the processing is necessary for the performance of a task carried out in the public interest.
10.2 Other rights
The Data Controller also intends to inform the interested party of the existence of the following rights:
• Right of access by the interested party: the interested party has the right to obtain confirmation from the Data Controller as to whether or not personal data concerning him or her are being processed and, where that is the case, to obtain access to the personal data and specific information, in accordance with art. 15 of the GDPR;
• Right to rectification: The data subject has the right to obtain from the Data Controller without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by providing a supplementary statement, pursuant to Article 16 of the GDPR;
• Right to erasure of data, including the right to withdraw consent: the interested party has the right to obtain from the Data Controller the erasure of personal data concerning him or her without
unjustified delay, and the Data Controller is required to erase the personal data without undue delay; the data subject also has the right to withdraw his or her consent, if the reasons set forth in Article 17 of the GDPR apply; in this case, the right to withdraw consent may be exercised at any time without affecting the lawfulness of processing based on consent before its withdrawal;
• Right to restriction of processing: the data subject has the right to obtain from the Data Controller restriction of processing when the hypotheses defined in art. 18 of the GDPR apply;
• Right to data portability: the data subject has the right to receive the personal data concerning him or her, provided to the Data Controller, in a structured, commonly used and machine-readable format and has the right to transmit such data to another controller without hindrance from the Data Controller in the cases and under the conditions specified in art. 20 of the GDPR.
• Right of the contractor to object to commercial communications: the contractor has the right to object at any time, free of charge, to receiving commercial communications.
11. Exercise of rights
Requests to exercise the rights indicated in this policy, including, in particular, the right to erasure and the right to withdraw consent, must be addressed directly to the Data Controller at the email address [info@km162.com]. Alternatively, you can exercise your rights by sending a registered letter with return receipt to the following address: Chilometro 162 srl, Via Soardi, 5, 47921 Rimini (RN).
12. Accessibility of the information
The information is accessible at [www.bici.pro] and from the Data Controller. If expressly requested by the interested party, the information may also be provided verbally, provided the interested party's identity is verified, by telephone request to the Data Controller's address.
13. Contact details of the data protection officer
The Data Controller has not appointed a data protection officer.