General Data Protection Regulation

General Data Protection Regulation Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 Information on the collection of personal data pursuant to art. 13 of Regulation (EU) 2016/679 Pursuant to art. 13 of Regulation (EU) 2016/679 (GDPR) with reference to the personal data that are intended to be processed, the following information is provided:

1. Purpose of the treatments

The treatments to which the personal data will be subjected, which will be acquired and periodically updated, have the purposes corresponding to the performance of the services requested from Serifoto S.r.l., specifically described in the General Conditions of Sale

2. Nature of the provision

The provision of personal data is necessary to establish the contractual relationships mentioned in the previous point 1) and any refusal to provide such data would make it impossible to manage these relationships, with the consequent impossibility of establishing the relationships themselves, whether these contracts of work, other contracts, authorizations, which are the responsibility of Serifoto Srl

3. Processing and storage methods

The processing will be carried out in an automated and / or manual form, with methods and tools, in compliance with the security measures referred to in art. 32 of the GDPR 2016/679, by persons specifically appointed, in compliance with the provisions of art. 29 GDPR 2016/679. It should be noted that, in compliance with the principles of lawfulness, purpose limitation and data minimization, pursuant to art. 5 GDPR 2016/679, the retention period of personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed and in compliance with the deadlines prescribed by law;

4. Scope of data

The data will not be disclosed to third parties, except for the fulfillment of payment transactions involving the transfer of data to PayPal inc.

5. Subjects who may become aware of the data

The Data Processor, the Data Processors as well as those in charge of maintenance of the electronic computers and management software supplied to Serifoto S.r.l. may become aware of the data.

6. Data Controller and Data Processors

The Data Controller is Serifoto S.r.l., with registered office in Viale Delle Industrie, 8 – 20864 Agrate Brianza (MB). The Data Processors are distinguished by: internal staff in carrying out their activities and duties, external staff who carry out configuration and maintenance activities of the Systems and Plants used by Serifoto S.r.l. 7. 

7. Rights of the interested party art. from 15 to 22

At any time, the interested party may exercise, pursuant to articles from 15 to 22 of the GDPR, the right to: to. Ask for confirmation of the existence or otherwise of their personal data;

• b. Obtain information on the purposes of the processing, the categories of personal data, the recipients or categories of recipients to whom the personal data have been or will be communicated and, when possible, the storage period
• c. Obtain the correction and deletion of data;
• d. Obtain the limitation of the processing; is. Obtain data portability, i.
• e. receive them from a data controller, in a structured format, commonly used and readable by an automatic device, and transmit them to another data controller without impediments;
• f. Object to the processing at any time;
• g. Oppose to an automated decision-making process relating to natural persons, including any profiling