Information on the processing of personal data pursuant to art. 13 of Regulation (EU) n. 2016/679
According to the art. 13 of Regulation (EU) n. 2016/679, also referred to as the General Data Protection Regulation (hereinafter the “GDPR”), KENFITT Srl informs you that your personal data (hereinafter the “Data”) will be treated in compliance with the provisions of the GDPR and any legislation applicable in relation to the processing of personal data in accordance with the following information.
1. Data controller. Data Protection Officer.
The Data Controller is KENFITT Srl, with registered office in Via Mantova, 65 – 25017 Lonato – BRESCIA – ITALY (hereinafter the “Owner”).
The Data Protection Officer can be contacted at the e-mail address firstname.lastname@example.org for information on data processing.
2. Data Categories
The Data processed by the Data Controller include: (i) personal data (name, surname, age, gender), fiscal and administrative data (for the management of trade flows with customers and suppliers), residence or domicile address and contact details (telephone number, address e-mail).
3. Purpose and legal basis of the processing – Legitimate interest
The Data will be processed pursuant to art. 6, paragraph 1, letter b) and c) of the GDPR, for the pursuit of the legitimate interest of the Data Controller, in art. 6, paragraph 1, letter f of the GDPR, with reference to:
to. access to information of an administrative nature (for the correct management of trade flows both with suppliers and customers);
b. the sending of communications of a commercial and promotional nature relating to the products marketed by the Owner, as well as surveys and research reserved for subjects who have previously expressed an interest in the shares of the Owner.
In any case, the processing of your data carried out on the basis of the legitimate interests of the owner takes place, as well as in compliance with the provisions of art. 6, paragraph 1, letter f of the GDPR, also in compliance with the provisions of recital n. 47 and the opinion n. 6/2014 Article 29 Data Protection Working Party, par. III.3.1.
4. Processing methods
Your Data are collected and recorded in a lawful and correct manner for the purposes indicated above and are also handled with the aid of electronic and automated tools, including through the insertion and organization in databases, in accordance with the provisions by the GDPR regarding security measures, and in any case in such a way as to guarantee the security and confidentiality of the Data itself.
5. Recipients or categories of recipients
The Data may be made accessible, brought to the attention of or communicated to the following subjects, who will be appointed by the Data Controller, as the case may be, as data controllers – whose list is available at the Data Controller’s registered office – or those in charge:
• commercial representatives, employees and / or collaborators in any capacity of the Data Controller;
• public or private subjects, natural or legal persons, for which the Data Controller uses for the performance of activities instrumental to the achievement of the aforementioned purposes or to which the Data Controller is required to communicate the Data by virtue of legal or contractual obligations.
In any case, the Data will not be disclosed.
6. Retention period
The Data will be kept for a period of time not exceeding 10 (ten) years for informative purposes and, in any case, for the time strictly necessary to pursue the legitimate interest of the Owner.
7. Access rights, cancellation, limitation and portability
The Owner informs you that you are entitled to the rights set forth in articles from 15 to 20 of the GDPR. By way of example, by sending a specific request to the email address email@example.com , you can:
to. obtain confirmation that your personal data is being processed or not;
b. if processing is in progress, obtain access to the data and information relating to the processing, as well as request a copy of the data;
c. obtain the correction of inaccurate data and the integration of incomplete personal data;
d. obtain, if one of the conditions established by art. 17 of the GDPR, the cancellation of the Data concerning you;
is. to obtain, in the cases provided for by art. 18 of the GDPR, the limitation of the processing of data concerning you;
f. receive the Data concerning you in a structured format, commonly used and readable by an automatic device and request their transmission to another owner, if technically feasible.
8. Right of opposition
According to the art. 21 of the GDPR, you will also have the right to object at any time to the processing of your data carried out for the pursuit of the legitimate interest of the owner by writing to the email address kenfitt @ kenfitt .it .
In the event of opposition, the Data will no longer be processed, provided that there are no legitimate grounds for processing that prevail over the interests, rights and freedoms of the data subjects, or for the establishment, exercise or defense of a right in court.
9. Right to lodge a complaint with the Guarantor
The Owner also informs you that he may lodge a complaint with the Guarantor for the Protection of Personal Data in the event that he believes that the rights he holds under the GDPR or any other applicable legislation have been violated, according to the methods indicated on the website of the Guarantor for the Protection of Personal Data accessible at: www.garanteprivacy.it.