Owner of the data treatment

FERRERA & FERRERA S.R.L.

VIALE REGIONE SICILIANA N. 9478 - PALERMO (PA) - 90146

CF: 05741790827 - P.IVA: 05741790827

  Tel. 0916890118 - Fax 0919825642

E-Mail: info@colibrifun.com - PEC: ferrera.srl@pec.it

HOW WE USE YOUR DATA

(art. 13 del Decreto Lgs. 196/2003 e artt. 13 e 14 del Regolamento UE 2016/679)

Dear Interested,

we would like to provide some necessary information about the methods and purposes relating to the processing of your personal data.

1. Nature and provision of data

The provision of personal data a FERRERA & FERRERA S.R.L. is an essential fulfillment for the execution of the contract/mandate. Therefore, if you refuse to provide the necessary data, the contract/mandate will not be able to take place or will be considered immediately terminated due to your fault.

2. Purpose of the treatment

We inform you that your personal data will be used for the following processing purposes:

connected to the implementation of obligations relating to legislative or contractual obligations:

The Data Controller FERRERA & FERRERA S.R.L. will process your personal data only to the extent that they are indispensable in relation to the objective of the aforementioned purposes, in compliance with the provisions of current legislation on the protection of personal data and in compliance with the provisions of the general authorizations of the Authority Guarantor for the protection of personal data.

3. Processing methods

The personal data of the interested party, in particular:

will be treated with a very high level of security. All the protection measures indicated by the legislation on the protection of personal data and by the applicable legislation are implemented, as well as those determined by the Data Controller. In particular, your data will be processed by means of:

The data will be processed from the authorized categories indicated below :

·       External manager/sub-manager of the treatment

·       internal processor

4. Data communication and transfer

The data collected by the Data Controller may be communicated, in addition to those indicated above, also:

·       To the categories of subjects for whom the communication is strictly necessary, functional and compatible with the legal basis that regulates the processing of your data :

As part of the processing carried out by the subjects described above, your data they will not be transferred to third countries.

If strictly necessary for the aforementioned purposes, the processing may also concern the images of the interested party (photographs, video recordings, audio-video recordings, ...). The processing of these images will take place in compliance with the provisions of the law, guaranteeing in all cases where this is possible the anonymity of the interested party through the obscuring of the somatic features. For the processing of images, a specific consent is required from the interested party, also in accordance with the provisions of the law on copyright, considering that, albeit in particular cases, even images relating to people whose faces have been obscured can allow the identification.

5. Automated decision making and profiling

The processing of your data does not happen:

·       with the aid of automated decision-making processes

·       with the use of profiling techniques

6. Rights of the interested party

In your quality of interested party, the subjects enjoy the rights referred to in sections 2, 3 and 4 of chapter III of Regulation (EU) 2016/679 (e.g. ask the Data Controller: access to personal data and rectification or the cancellation of the same; the limitation of the treatment that concerns you; to oppose their treatment). In particular, the interested party has the right to:

·       obtain confirmation from the data controller as to whether or not personal data concerning him is being processed and, in this case, to obtain access to the personal data and information required by art. 15 of EU regulation no. 679 of 2016;

·       obtain from the data controller the rectification of inaccurate personal data concerning him;

·       obtain the cancellation of personal data concerning him where these are no longer necessary with respect to the purposes for which they were collected or otherwise processed, or where they resort to further conditions pursuant to art. 17 EU regulation n. 679/2016 and provided that the conditions referred to in art. 17, paragraph 3, EU regulation no. 679/2016;

·       obtain from the data controller the limitation of processing when: a) the interested party contests the accuracy of the personal data, for the period necessary for the data controller to verify the accuracy of such personal data; b) the processing is unlawful but the interested party himself opposes the cancellation and instead requests the application of limitation measures or requests that the processing of the same take place for the assessment or defense of his right in court;

·       receive personal data concerning him in a structured, commonly used and machine-readable format; in the event of the exercise of this right, the interested party will have the right to request that the data controller transmit the aforementioned data directly to another data controller;

·       oppose the processing of personal data concerning him in the event that the conditions of Art. 21 EU regulation n. 679/2016, paragraph 2.

·       submit a complaint to a supervisory authority. With regard to the exercise of these rights, the interested party can contact:

Data controller

FERRERA & FERRERA S.R.L.

VIALE REGIONE SICILIANA N. 9478 - PALERMO (PA) - 90146

CF 05741790827 - P.IVA 05741790827

Tel. 0916890118 - Fax 0919825642

            E-Mail info@colibrifun.com - PEC ferrera.srl@pec.it

7. Data Retention

The personal data that you provide to us will be kept for the purpose of carrying out the agreed service and will be kept for the time necessary to complete it. Storage can take place via:

-        storage within the hardware systems of the data controller or its managers;

-        archiving in accordance with the Digital Administration Code; in this case, the owner will only resort to accredited subjects pursuant to art. 29 CAD where the same is not performed directly on its application systems

PALERMO , 28/05/2018

  Definitions that help to understand the activity carried out by our studio/company and the relationship between it and the data it has provided us. It is therefore appropriate for you to know that pursuant to art. 4 EU regulation no. 679 of 2016 means:

·       personal data: any information relating to an identified or identifiable natural person ("data subject"); an identifiable natural person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier or one or more characteristic elements of his physical identity, physiological, genetic, psychic, economic, cultural or social;

·       particular categories of data (or sensitive data): personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership, as well as processing genetic data, biometric data intended to uniquely identify a natural person, data relating to the person's health or sex life or sexual orientation;

·       treatment: any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as collection, registration, organization, structuring, conservation, adaptation or modification, extraction, consultation, use, communication by transmission, diffusion or any other form of making available, comparison or interconnection, limitation, cancellation or destruction;

·       data controller: the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of processing personal data; when the purposes and means of such processing are determined by Union or Member State law, the data controller or the specific criteria applicable to his designation may be established by Union or Member State law;

·       data controller: the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller;

·       profiling: any form of automated processing of personal data consisting of the use of such personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning professional performance, economic situation, health, preferences personalities, interests, reliability, behaviour, location or movements of that natural person