Privacy Policy

RGPD europeo (General Data Protection Regulation) – 679/2016

( Personal data protection code – PRIVACY)

The protection of your data is an issue of fundamental importance.

For this reason, full compliance with all the rules established by the Law for the protection of Privacy is guaranteed, confirming compliance with the provisions of the Gdpr Regulation n.679/2016 and with what derives from it, and in particular with what is contained in the art. . articles 13 to 22, and article 34.

Eva Tosi, in qualità di Titolare dei dati personali raccolti direttamente presso l’interessato, considera privacy and the protection of personal data are fundamental and invites its customers to carefully read the Privacy Policy. Notice containing important information on Data Processing (in short, “Notice”).

In any case, it is guaranteed that the data collected will not be used for purposes other than those explicitly agreed upon, that if not explicitly granted, they will not be communicated to third parties, and that they will be stored and protected by adopting appropriate methods, for the necessary period of time. for the execution of the work and, subsequently, for the archiving of the works carried out, for a period of (two) years, unless otherwise agreed.

Furthermore, the logical and physical security of the data and, in general, the confidentiality of the personal data processed will be guaranteed, implementing all the necessary technical and organizational measures to guarantee their security.

At any time, you can contact the data controller Eva Tosi by contacting him at the email address: info@evatosiphoto.com for any information, correction, variation or cancellation you wish on the data concerning you.

I would like to thank you for the trust you have placed in me and I reciprocate by paying particular attention to the processing of information concerning you.

EXTENDED VERSION

Information on the processing of personal data pursuant to European Regulation 2016/679 of the European Parliament and of the Council of 27 April 2016, relating to the protection of natural persons with regard to the processing of personal data (in short “GDPR”). span>

Pursuant to and for the purposes of the aforementioned legislation, Eva Tosi hereby wishes to inform you in advance of both the use of your personal data and your rights, communicating the following:

  • Data controller and person responsible for the protection of personal data

The data controller is Eva Tosi; registered office: Via Antonio Gramsci 30, Borgomanero NO, 28021 and the data controller is Eva Tosi. The Owner can be contacted by email: info@evatosiphoto.com or at the address indicated above.

  • Type of data processed and collected

Among the personal data collected by this application, independently or through third parties, there are: Cookies, usage data, name, surname, telephone number, company name, email and city.

Personal data may be freely provided by the user or, in the case of usage data, collected automatically during the use of this application.

Unless otherwise specified, all data requested by this application is mandatory. If the user refuses to communicate them, it may be impossible for this application to provide the service. In cases where this application indicates some data as optional, users are free to refrain from communicating such data, without this having any consequence on the availability of the service or its operation.

Users who have doubts about which data are mandatory are encouraged to contact the owner.

Any use of cookies or other tracking tools by this application or by the owners of third-party services used by this application, unless otherwise specified, has the purpose of providing the service requested by the user, in addition to the additional purposes described in this document and in the cookie policy, if available.

The user assumes responsibility for the personal data of third parties obtained, published or shared through this application and guarantees that he has the right to communicate or disseminate them, freeing the owner from any liability towards third parties.

  • Purpose and mandatory or optional nature of the processing

The data that the user indicates will be processed for the purpose of:

  • Allow the Owner to provide his Services, including sales, and to contact the interested user to provide him with more information in this regard.
  • Direct and indirect marketing purposes: for example, the sending, with automated contact methods (such as text messages or e-mail) and traditional methods (phone calls with an operator or traditional mail), of promotional and commercial communications relating to services/products offered by the Company, as well as carrying out market studies and statistical analyses, advertising, remarketing and behavioral targeting, display of content from external platforms, tag management, content commenting, interaction with live chat platforms, management of user databases.

  • Subjects authorized to process

The data may be processed by employees and collaborators of the company functions responsible for pursuing the purposes indicated above, expressly authorized for processing and adequately trained.

  • Treatment methods

The owner adopts appropriate security measures aimed at preventing unauthorized access, disclosure, modification or destruction of personal data..

The processing is carried out using IT and/or telematic tools, with organizational methods and with logic strictly related to the purposes indicated. In addition to the owner, in some cases, other parties involved in the organization of this application (administrative, commercial, marketing, legal, system administrators) or external parties (with third-party technical service providers, postal couriers, hosting providers, IT companies, communication agencies) also appointed, if necessary, as data controllers by the owner. The updated list of data controllers can always be requested from the data controller.

  • Place

The data is processed at the owner’s operational offices and in any other place where the parties involved in the processing are located. For further information, contact the Owner.

Your personal data may be transferred to a country other than the one in which you are located. To obtain further information on the place of processing, the user can request information directly from the data controller.

The user has the right to obtain information regarding the legal basis of the transfer of data outside the European Union to an international organization governed by public international law or constituted by two or more countries, such as for example the UN, as well as in regarding the security measures adopted by the owner to protect the data.

  • Retention period

The data are processed and stored for the time required by the purposes for which they were collected.

Therefore:

  • Personal data collected for purposes related to the execution of a contract between the owner and the user will be retained until the execution of this contract is completed.
  • Personal data collected for purposes attributable to the legitimate interest of the owner will be retained until such interest is satisfied. The user can obtain further information regarding the legitimate interest pursued by the owner in the relevant sections of this document or by contacting the owner.
  • In the specific case of marketing purposes, the retention times are 24 months from data collection; in the case of a current contract, the retention times are 24 months from its termination.

The owner may be obliged to retain personal data for a longer period in compliance with a legal obligation or by order of an authority.

At the end of the retention period, the personal data will be deleted. Therefore, upon expiry of this deadline the right of access, cancellation, rectification and the right to data portability can no longer be exercised..

  • Legal basis of the processing

The owner processes personal data relating to the user if one of the following conditions exists:

  • The user has given consent for one or more specific purposes;
  • The processing is necessary for the execution of a contract with the user and/or the execution of pre-contractual measures;
  • The processing is necessary for the execution of a task of public interest or for the exercise of public powers vested in the owner;
  • The processing is necessary for the pursuit of the legitimate interests of the owner or third parties.

However, it is always possible to ask the owner to clarify the concrete legal basis of each processing and in particular to specify whether the processing is based on the law; provided for by a contract or necessary to conclude a contract.

  • Transfer of data abroad

Your personal data may be transferred to member countries of the European Union and to countries outside the European Union, always within the scope of the purposes indicated in this information and in compliance with the regulations and international agreements in force.

  • Rights of the interested party

The rights recognized to you by the GDPR include those of:

  • Right of access : Request access to your personal data and information relating to them; the rectification of inaccurate data or the integration of incomplete data; the cancellation of personal data concerning you (upon the occurrence of one of the conditions indicated in art. 17, paragraph 1 of the GDPR; the limitation of the processing of your personal data (upon the occurrence of one of the hypotheses indicated in art. 18, paragraph 1 of the GDPR);
  • Right of rectification – Obtain, without unjustified delay, the rectification of inaccurate personal data concerning you and the integration of incomplete personal data (Article 16, GDPR);
  • Right of limitation – Obtain the limitation of processing, in the cases provided for by the GDPR (Article 18, GDPR);
  • Right to erasure – Obtain, without unjustified delay, the deletion of personal data concerning you, in the cases provided for by the GDPR (Article 17, GDPR);
  • Right to portability: Request and – in the cases in which the legal basis of the processing is the contract or consent, and the same is carried out by automated means – your personal data in a structured and machine-readable format, also for the purpose of communicating such data to another data controller (so-called right to portability of personal data);
  • Right of opposition: Object at any time to the processing of your personal data in the event of particular situations concerning you (Article 21, GDPR);
  • Right of revocation: Revoke consent at any time, limited to cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (for example data revealing your racial origin, your political opinions, your religious beliefs, your state of health or sexual life). Processing based on consent and carried out prior to its revocation, however, retains the its lawfulness;
  • Right to lodge a complaint with the supervisory authority: Propose a complaint to the supervisory authority (Personal Data Protection Authority). www.garanteprivacy.it);

You can request the execution of these rights at any time to the address of the data controller, or to his email address indicated above. Requests will be processed free of charge by the owner as soon as possible, and in any case within one month of the request.