INFORMATION FOR THE PROCESSING OF PERSONAL DATA
(Ex Article 12 of EU 2016/679 Regulation of the European Parliament and of the Council)

Dear Customer / Supplier,
Mr. GIACOMELLO Daniele from Company F.lli. GIACOMELLO SRL with registered office in Via Magenta 77, 20017 Rho, (MI) VAT number IT 08138470151, as Data Controller of personal data, informs you that EU 2016/679 Regulation of the European Parliament and Council ("General Regulation on Data Protection") establishes rules concerning the protection of individuals with regard to the processing of personal data, as well as rules concerning the free movement of such data.
The regulation protects the fundamental rights and freedoms of natural people, in particular the right to the protection of personal data.
The data controller (natural or legal person who determines the purposes and means of processing personal data) shall adopt appropriate measures to provide the data subject with all the information related to the processing.

According to the law, this treatment will be based on principles of correctness, lawfulness and transparency and protection of your privacy and your rights.
Pursuant to Article 12 of EU 2016/679 Regulation, in case of that data concerning him are collected from the data subject, the Data Controller shall provide the data subject, at the time the personal data are obtained, with the following information:

1. Object of the Treatment
The Data Controller processes personal data, identifying information concerning a natural person (interested) such as, for example, name, surname, identification number, company name, address, telephone number, e-mail address, bank and payment details, etc. ...... You communicated on the occasion of the conclusion of contracts for the services of the Owner.

2. Data Controller and Representative of the Data Controller

The Data Controller is: GIACOMELLO Daniele.

c/o Società F.lli. GIACOMELLO S.n.c. with registered office in Via Magenta 77, shed 15a, 15b, 4a - 20017 Rho, (MI) P.IVA 08138470151, Tel +39 02 9301278 / Fax +39 02 9301690, info@fratelligiacomello.it
The Representative of the Data Controller (if applicable) is: Not appointed.

The updated list of people in charge (where applicable) and the people in charge of processing it is kept at the registered office of the Data Controller.

3. Data Protection Officer (where applicable)
The Data Protection Officer is: Not appointed.

4. Purposes of data processing
The data you provide will be processed without your express consent for the following purposes:
2A) execution of a contract
3A) execution of pre-contractual measures
4A) legal obligation to which the data controller is subject
7A) pursuing the legitimate interests of the Data Controller or third parties.

Data processing is lawful:
2C) the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same,
3C) the processing is necessary to fulfill a legal obligation to which the data controller is subject,
4C) the treatment is necessary for the safeguard of the vital interests of the interested party or of another physical person;
6C) the processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or the fundamental rights and freedoms of the data subject who request the protection of personal data do not prevail (in particular if the data subject he is a minor.)

5. Legitimate interests of the data controller (where applicable only if the conditions of lawfulness of the processing referred to in point 3 are of type 6C)
The processing of data is based on the following legitimate interests: any right of defense in court.

6. Methods of data processing
The processing of personal data is carried out by means of the operations indicated in art. 4 paragraph 2) and precisely: the collection, registration, organization, structuring, preservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction;

The processing of data is done through the use of tools and procedures suitable to ensure security and confidentiality.
The processing of personal data will be carried out in the following ways:

■ manual paper
■ computerized manual (without automated decision making)
■ other: Video shooting

7. Dissemination of data
Without the need for express consent (pursuant to Article 6 letters b) and c)), the Data Controller may communicate your data for the purposes referred to above to Supervisory Bodies, Judicial Authorities, insurance companies, as well as to those subjects to which the communication is mandatory by law for the accomplishment of the said purposes. These subjects will process the data in their capacity as independent data controllers.
■ the data may be / will be communicated to the following categories of recipients: external managers who take part in the business process solely to fulfill specific legal obligations and in compliance with contractual obligations, public and private bodies for social security, welfare and insurance purposes
■ the data may be / will be communicated to the following recipients:
C.S.A. S.R.L. - Via Don Minzoni, 39 - 21053 Castellanza (VA) - COMMERCIALIST
C.F.C. Computer S.R.L. - Via F. Corridoni, 18 - 20025 Legnano (MI) - INFORMATION SYSTEM
Law Firm Lawyer Bonzi Federico - C.so Porta Vittoria, 54 - 20100 Milan (MI) - LEGAL STUDY
Valeo Studio - Via Gabriele Rosa, 30 - 24125 Bergamo (BG) - WEB SITE
Banca Intesa S. Paolo - Ag. Pero (MI)
Dropbox - DATA ARCHIVE

8. Dissemination of data to a third country or an international organization
■ Personal data will not be transferred to a third country or to an international organization.

9. Nature of the provision of data and consequences of refusal to reply
The Data Controller is obliged to inform the data subject if the communication of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, and if the data subject is obliged to provide personal data as well as the possible consequences of not communicating such data;

The provision of data is:
■ mandatory (Point 4, letters A)

In the event that the provision of data for the purposes indicated is mandatory, the reason for the obligation is due to the execution of a contract or pre-contractual measures.
In the event that the provision of data for the purposes indicated is mandatory any refusal to provide such data:
□ has no consequence,
■ could result in the non-execution of the contract,
■ could result in the partial execution of the contract,
■ failure to continue the relationship,
■ non-provision of services.

10. Storage of Data
The Data Controller will process the personal data for the time strictly necessary to fulfill the purposes mentioned above and in any case for no more than 10 years from the termination of the relationship for the purposes of service.

■ The personal data processed will be stored up to: 10 years after the contract has been terminated.

11. Rights of the interested party
At any time the person concerned can exercise your rights towards the data controller.

Article. 13 letter b) of EU 2016/679 Regulation, states that when the personal data are obtained, the data controller provides the data subject with the existence of the following rights necessary to ensure correct and transparent processing of personal data:
- access to data (Article 15)
- correction of data processing (Article 16)
- cancellation of data (Article 17)
- limitation of data processing (Article 18)
- of opposition to the processing of data (Article 21)
- to the portability of data (Article 20).

In addition to the rights referred to in Article 13, the EU Regulation provides that the person concerned may exercise further rights:
- withdrawal of consent (Article 7)
- propose a complaint to a supervisory authority (Article 77).

The Annex contains articles that specifically address the individual rights of the interested party.

12. Right of withdrawal of consent (Article 7)

Article 7 paragraph 3, states that the interested party has the right to withdraw his consent at any time in the following cases:
- if the processing is based on the consent given to the processing of personal data for one or more specific purposes (Article 6 paragraph 1 lett.a),
- if the treatment concerns the particular categories of personal data (personal data revealing racial or ethnic origin, political opinions, religious or philosophical convictions, union membership, genetic data, biometric data, data related to health or sexual life or sexual orientation) and is based on consent given to the processing of personal data for one or more specific purposes (Article 9 paragraph 2 lett.a).

The withdrawal of consent does not affect the lawfulness of the treatment based on the consent given prior to the revocation.
Before giving his consent, the interested party is informed about this. The consent is revoked with the same ease with which it is granted.

13. Right to lodge a complaint with a supervisory authority (Article 77)
Article. 77, states that if the interested party considers that the treatment that concerns him violates this regulation, he has the right to lodge a complaint with a supervisory authority, particularly in the Member State in which he normally resides, works or the place where he is verified the alleged violation. It is without prejudice to any other administrative or judicial appeal.

The data controller informs the data subject of the possibility to lodge a complaint with a supervisory authority and to bring a judicial remedy.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status or outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78.

Article 78.

The person concerned also has the right to bring an effective judicial remedy, if the supervisory authority that does not deal with a complaint or does not inform him within three months of the state or the outcome of the proposed complaint. It is without prejudice to any other administrative or judicial appeal.

14. Methods of exercising the rights of the data subject
The interested party may at any time exercise the rights by sending the Data Controller and / or the Data Processor (if appointed):
- A registered letter with return receipt: F.lli. GIACOMELLO S.n.c. with registered office in Via Magenta 77, shed 15a, 15b, 4a - 20017 Rho, (MI) P.IVA 08138470151, Tel +39 02 9301278 / Fax +39 02 9301690
- an e-mail address: fratelligiacomello@pec.it

The Data Controller
Rho, 21 May 2019

ATTACHMENTS:

10. THE RIGHTS OF THE INTERESTED PARTY (Articles 13-21)

10.1. Right of access to personal data (Article 15)
"1. The interested party has the right to obtain from the data controller confirmation that it is or is not undergoing the processing of personal data concerning him and in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations;
(d) when possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
g) if the data are not collected from the data subject, all information available on their origin;
(h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraph1 and 4 and, at least in such cases, significant information on the logic used, and the importance and expected consequences of such processing for the interested party.

2. Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the existence of adequate safeguards pursuant to Article 46 relating to the transfer.
3. The data controller provides a copy of the personal data being processed.
In case of further copies requested by the interested party, the data controller may charge a reasonable fee contribution based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.
4. The right to obtain a copy referred to in paragraph 3 shall not affect the rights and freedoms of others. "

10.2. Right to rectify personal data (Article 16)
"The data subject has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing an additional declaration. "

10.3. Right to delete personal data ("right to be forgotten") (Article 17)
"1. The data subject has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay if one of the following reasons exists:
a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
(b) the data subject revokes the consent on which the processing is based in accordance with Article 6 paragraph 1 lett.a or Article 9 paragraph 2 lett.a and whether there is no other legal basis for the processing ;
(c) the data subject opposes the processing pursuant to Article 21 paragraph 1 and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21 paragraph 2;
d) personal data have been processed unlawfully;
e) personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the controller is subject;
f) the personal data have been collected in relation to the information society service offer referred to in Article 8 paragraph 1. "

10.4. Right to limit the processing of personal data (Article 18)
"1. The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;

c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in court;
d) the interested party has opposed the treatment pursuant to Article 21 paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

2. If the processing is restricted pursuant to paragraph 1, such personal data shall only be processed, except for storage, with the consent of the data subject or for the establishment, exercise or defense of a right in court. or to protect the rights of another natural or legal person or for reasons of Union relevant public interest or of a Member State.

3. The data subject having obtained the processing restriction pursuant to paragraph 1 shall be informed by the controller before the limitation is revoked. "

10.5. Right to object to the processing of personal data (Article 21)
1. You have the right to object at any time, for reasons connected with your particular situation, to the processing of your personal data pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.
The data controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or the defense of a right in court.

2. If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him / her for such purposes, including profiling in so far as it is related to such marketing direct.

3. If the data subject objects to processing for direct marketing purposes, personal data are no longer processed for these purposes.

4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the interested party and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the data subject.

5. In the context of the use of information society services and without prejudice to Directive 2002/58 / EC, data subjects may exercise their right to object by automated means using technical specifications.

6. Where personal data are processed for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 paragraph 1, the data subject shall have the right to object to the processing of personal data for reasons connected with his particular situation concerning him, except for himself, treatment is necessary for the performance of a task in the public interest. "

10.6. Right of portability of personal data (Article 20)
"1. The data subject has the right to receive, in a structured, commonly used and automatically readable form, the personal data concerning him / her provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller to whom he has provided them if:
(a) the processing is based on consent pursuant to Article 6 paragraph 1 lett.a or Article 9 paragraph 2 lett. a) or on a contract within the meaning of Article 6 paragraph 1 lett. b;
b) the treatment is carried out by automated means.

2. In exercising its rights relating to the portability of data in accordance with paragraph 1, the data subject shall have the right to obtain direct transmission of personal data from one controller to another, if technically executable.

3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right does not apply to the treatment necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority as the data controller is invested.

4. The right referred to in paragraph 1 shall not affect the rights and freedoms of others. " I agree Close

INFORMATION FOR THE PROCESSING OF PERSONAL DATA
(Ex Article 12 of EU 2016/679 Regulation of the European Parliament and of the Council)

Dear Customer / Supplier,
Mr. GIACOMELLO Daniele from Company F.lli. GIACOMELLO SRL with registered office in Via Magenta 77, 20017 Rho, (MI) VAT number IT 08138470151, as Data Controller of personal data, informs you that EU 2016/679 Regulation of the European Parliament and Council ("General Regulation on Data Protection") establishes rules concerning the protection of individuals with regard to the processing of personal data, as well as rules concerning the free movement of such data.
The regulation protects the fundamental rights and freedoms of natural people, in particular the right to the protection of personal data.
The data controller (natural or legal person who determines the purposes and means of processing personal data) shall adopt appropriate measures to provide the data subject with all the information related to the processing.

According to the law, this treatment will be based on principles of correctness, lawfulness and transparency and protection of your privacy and your rights.
Pursuant to Article 12 of EU 2016/679 Regulation, in case of that data concerning him are collected from the data subject, the Data Controller shall provide the data subject, at the time the personal data are obtained, with the following information:

1. Object of the Treatment
The Data Controller processes personal data, identifying information concerning a natural person (interested) such as, for example, name, surname, identification number, company name, address, telephone number, e-mail address, bank and payment details, etc. ...... You communicated on the occasion of the conclusion of contracts for the services of the Owner.

2. Data Controller and Representative of the Data Controller

The Data Controller is: GIACOMELLO Daniele.

c/o Società F.lli. GIACOMELLO S.n.c. with registered office in Via Magenta 77, shed 15a, 15b, 4a - 20017 Rho, (MI) P.IVA 08138470151, Tel +39 02 9301278 / Fax +39 02 9301690, info@fratelligiacomello.it
The Representative of the Data Controller (if applicable) is: Not appointed.

The updated list of people in charge (where applicable) and the people in charge of processing it is kept at the registered office of the Data Controller.

3. Data Protection Officer (where applicable)
The Data Protection Officer is: Not appointed.

4. Purposes of data processing
The data you provide will be processed without your express consent for the following purposes:
2A) execution of a contract
3A) execution of pre-contractual measures
4A) legal obligation to which the data controller is subject
7A) pursuing the legitimate interests of the Data Controller or third parties.

Data processing is lawful:
2C) the processing is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same,
3C) the processing is necessary to fulfill a legal obligation to which the data controller is subject,
4C) the treatment is necessary for the safeguard of the vital interests of the interested party or of another physical person;
6C) the processing is necessary for the pursuit of the legitimate interest of the data controller or third parties, provided that the interests or the fundamental rights and freedoms of the data subject who request the protection of personal data do not prevail (in particular if the data subject he is a minor.)

5. Legitimate interests of the data controller (where applicable only if the conditions of lawfulness of the processing referred to in point 3 are of type 6C)
The processing of data is based on the following legitimate interests: any right of defense in court.

6. Methods of data processing
The processing of personal data is carried out by means of the operations indicated in art. 4 paragraph 2) and precisely: the collection, registration, organization, structuring, preservation, adaptation or modification, extraction, consultation, use, communication by transmission, dissemination or any other form of making available, comparison or interconnection, limitation, cancellation or destruction;

The processing of data is done through the use of tools and procedures suitable to ensure security and confidentiality.
The processing of personal data will be carried out in the following ways:

■ manual paper
■ computerized manual (without automated decision making)
■ other: Video shooting

7. Dissemination of data
Without the need for express consent (pursuant to Article 6 letters b) and c)), the Data Controller may communicate your data for the purposes referred to above to Supervisory Bodies, Judicial Authorities, insurance companies, as well as to those subjects to which the communication is mandatory by law for the accomplishment of the said purposes. These subjects will process the data in their capacity as independent data controllers.
■ the data may be / will be communicated to the following categories of recipients: external managers who take part in the business process solely to fulfill specific legal obligations and in compliance with contractual obligations, public and private bodies for social security, welfare and insurance purposes
■ the data may be / will be communicated to the following recipients:
C.S.A. S.R.L. - Via Don Minzoni, 39 - 21053 Castellanza (VA) - COMMERCIALIST
C.F.C. Computer S.R.L. - Via F. Corridoni, 18 - 20025 Legnano (MI) - INFORMATION SYSTEM
Law Firm Lawyer Bonzi Federico - C.so Porta Vittoria, 54 - 20100 Milan (MI) - LEGAL STUDY
Valeo Studio - Via Gabriele Rosa, 30 - 24125 Bergamo (BG) - WEB SITE
Banca Intesa S. Paolo - Ag. Pero (MI)
Dropbox - DATA ARCHIVE

8. Dissemination of data to a third country or an international organization
■ Personal data will not be transferred to a third country or to an international organization.

9. Nature of the provision of data and consequences of refusal to reply
The Data Controller is obliged to inform the data subject if the communication of personal data is a legal or contractual obligation or a necessary requirement for the conclusion of a contract, and if the data subject is obliged to provide personal data as well as the possible consequences of not communicating such data;

The provision of data is:
■ mandatory (Point 4, letters A)

In the event that the provision of data for the purposes indicated is mandatory, the reason for the obligation is due to the execution of a contract or pre-contractual measures.
In the event that the provision of data for the purposes indicated is mandatory any refusal to provide such data:
□ has no consequence,
■ could result in the non-execution of the contract,
■ could result in the partial execution of the contract,
■ failure to continue the relationship,
■ non-provision of services.

10. Storage of Data
The Data Controller will process the personal data for the time strictly necessary to fulfill the purposes mentioned above and in any case for no more than 10 years from the termination of the relationship for the purposes of service.

■ The personal data processed will be stored up to: 10 years after the contract has been terminated.

11. Rights of the interested party
At any time the person concerned can exercise your rights towards the data controller.

Article. 13 letter b) of EU 2016/679 Regulation, states that when the personal data are obtained, the data controller provides the data subject with the existence of the following rights necessary to ensure correct and transparent processing of personal data:
- access to data (Article 15)
- correction of data processing (Article 16)
- cancellation of data (Article 17)
- limitation of data processing (Article 18)
- of opposition to the processing of data (Article 21)
- to the portability of data (Article 20).

In addition to the rights referred to in Article 13, the EU Regulation provides that the person concerned may exercise further rights:
- withdrawal of consent (Article 7)
- propose a complaint to a supervisory authority (Article 77).

The Annex contains articles that specifically address the individual rights of the interested party.

12. Right of withdrawal of consent (Article 7)

Article 7 paragraph 3, states that the interested party has the right to withdraw his consent at any time in the following cases:
- if the processing is based on the consent given to the processing of personal data for one or more specific purposes (Article 6 paragraph 1 lett.a),
- if the treatment concerns the particular categories of personal data (personal data revealing racial or ethnic origin, political opinions, religious or philosophical convictions, union membership, genetic data, biometric data, data related to health or sexual life or sexual orientation) and is based on consent given to the processing of personal data for one or more specific purposes (Article 9 paragraph 2 lett.a).

The withdrawal of consent does not affect the lawfulness of the treatment based on the consent given prior to the revocation.
Before giving his consent, the interested party is informed about this. The consent is revoked with the same ease with which it is granted.

13. Right to lodge a complaint with a supervisory authority (Article 77)
Article. 77, states that if the interested party considers that the treatment that concerns him violates this regulation, he has the right to lodge a complaint with a supervisory authority, particularly in the Member State in which he normally resides, works or the place where he is verified the alleged violation. It is without prejudice to any other administrative or judicial appeal.

The data controller informs the data subject of the possibility to lodge a complaint with a supervisory authority and to bring a judicial remedy.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status or outcome of the complaint, including the possibility of a judicial remedy pursuant to Article 78.

Article 78.

The person concerned also has the right to bring an effective judicial remedy, if the supervisory authority that does not deal with a complaint or does not inform him within three months of the state or the outcome of the proposed complaint. It is without prejudice to any other administrative or judicial appeal.

14. Methods of exercising the rights of the data subject
The interested party may at any time exercise the rights by sending the Data Controller and / or the Data Processor (if appointed):
- A registered letter with return receipt: F.lli. GIACOMELLO S.n.c. with registered office in Via Magenta 77, shed 15a, 15b, 4a - 20017 Rho, (MI) P.IVA 08138470151, Tel +39 02 9301278 / Fax +39 02 9301690
- an e-mail address: fratelligiacomello@pec.it

The Data Controller
Rho, 21 May 2019

ATTACHMENTS:

10. THE RIGHTS OF THE INTERESTED PARTY (Articles 13-21)

10.1. Right of access to personal data (Article 15)
"1. The interested party has the right to obtain from the data controller confirmation that it is or is not undergoing the processing of personal data concerning him and in this case, to obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data in question;
c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if recipients of third countries or international organizations;
(d) when possible, the retention period of the personal data provided or, if not possible, the criteria used to determine this period;
e) the existence of the right of the interested party to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose their treatment;
f) the right to lodge a complaint with a supervisory authority;
g) if the data are not collected from the data subject, all information available on their origin;
(h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraph1 and 4 and, at least in such cases, significant information on the logic used, and the importance and expected consequences of such processing for the interested party.

2. Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the existence of adequate safeguards pursuant to Article 46 relating to the transfer.
3. The data controller provides a copy of the personal data being processed.
In case of further copies requested by the interested party, the data controller may charge a reasonable fee contribution based on administrative costs. If the interested party submits the request by electronic means, and unless otherwise indicated by the interested party, the information is provided in a commonly used electronic format.
4. The right to obtain a copy referred to in paragraph 3 shall not affect the rights and freedoms of others. "

10.2. Right to rectify personal data (Article 16)
"The data subject has the right to obtain from the data controller the correction of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, also by providing an additional declaration. "

10.3. Right to delete personal data ("right to be forgotten") (Article 17)
"1. The data subject has the right to obtain from the data controller the deletion of personal data concerning him without undue delay and the data controller is obliged to cancel the personal data without undue delay if one of the following reasons exists:
a) personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed;
(b) the data subject revokes the consent on which the processing is based in accordance with Article 6 paragraph 1 lett.a or Article 9 paragraph 2 lett.a and whether there is no other legal basis for the processing ;
(c) the data subject opposes the processing pursuant to Article 21 paragraph 1 and there is no legitimate overriding reason to proceed with the processing, or opposes the processing pursuant to Article 21 paragraph 2;
d) personal data have been processed unlawfully;
e) personal data must be deleted to fulfill a legal obligation under Union or Member State law to which the controller is subject;
f) the personal data have been collected in relation to the information society service offer referred to in Article 8 paragraph 1. "

10.4. Right to limit the processing of personal data (Article 18)
"1. The interested party has the right to obtain from the data controller the limitation of processing when one of the following hypotheses occurs:
a) the interested party disputes the accuracy of personal data for the period necessary for the data controller to verify the accuracy of such personal data;
b) the processing is illegal and the interested party opposes the cancellation of personal data and asks instead that its use is limited;

c) although the data controller no longer needs it for processing purposes, personal data are necessary for the data subject to verify, exercise or defend a right in court;
d) the interested party has opposed the treatment pursuant to Article 21 paragraph 1, pending verification of the possible prevalence of the legitimate reasons of the data controller with respect to those of the interested party.

2. If the processing is restricted pursuant to paragraph 1, such personal data shall only be processed, except for storage, with the consent of the data subject or for the establishment, exercise or defense of a right in court. or to protect the rights of another natural or legal person or for reasons of Union relevant public interest or of a Member State.

3. The data subject having obtained the processing restriction pursuant to paragraph 1 shall be informed by the controller before the limitation is revoked. "

10.5. Right to object to the processing of personal data (Article 21)
1. You have the right to object at any time, for reasons connected with your particular situation, to the processing of your personal data pursuant to Article 6, paragraph 1, letters e) or f), including profiling on the basis of these provisions.
The data controller refrains from further processing personal data unless he demonstrates the existence of binding legitimate reasons to proceed with the processing that prevail over the interests, rights and freedoms of the data subject or for the assessment, exercise or the defense of a right in court.

2. If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him / her for such purposes, including profiling in so far as it is related to such marketing direct.

3. If the data subject objects to processing for direct marketing purposes, personal data are no longer processed for these purposes.

4. The right referred to in paragraphs 1 and 2 shall be explicitly brought to the attention of the interested party and shall be presented clearly and separately from any other information at the latest at the time of the first communication with the data subject.

5. In the context of the use of information society services and without prejudice to Directive 2002/58 / EC, data subjects may exercise their right to object by automated means using technical specifications.

6. Where personal data are processed for the purposes of scientific or historical research or for statistical purposes in accordance with Article 89 paragraph 1, the data subject shall have the right to object to the processing of personal data for reasons connected with his particular situation concerning him, except for himself, treatment is necessary for the performance of a task in the public interest. "

10.6. Right of portability of personal data (Article 20)
"1. The data subject has the right to receive, in a structured, commonly used and automatically readable form, the personal data concerning him / her provided to a data controller and has the right to transmit such data to another data controller without impediments from part of the data controller to whom he has provided them if:
(a) the processing is based on consent pursuant to Article 6 paragraph 1 lett.a or Article 9 paragraph 2 lett. a) or on a contract within the meaning of Article 6 paragraph 1 lett. b;
b) the treatment is carried out by automated means.

2. In exercising its rights relating to the portability of data in accordance with paragraph 1, the data subject shall have the right to obtain direct transmission of personal data from one controller to another, if technically executable.

3. The exercise of the right referred to in paragraph 1 of this Article shall be without prejudice to Article 17. This right does not apply to the treatment necessary for the performance of a task carried out in the public interest or in connection with the exercise of official authority as the data controller is invested.

4. The right referred to in paragraph 1 shall not affect the rights and freedoms of others. " I agree Close