PRIVACY NOTICE

PERSONAL DATA PROCESSING INFORMATION

COMMERCIAL PARTNERS

in accordance with Article 13 of EU Regulation 2016/679 dated 27/04/2016

In accordance with Article 13 of EU Regulation 2016/679 dated 27/04/2016, also known as the General Data Protection Regulation (GDPR), DIMAC SRL, with registered office at Via dell’Industria 51 int. A – 76121 Barletta (BT), Italy, as the data controller, hereby informs you as follows:

Data Controller and Data Processor

The data controller is DIMAC SRL, with registered office at Via dell’Industria 51 int. A – 76121 Barletta (BT), Italy.

Purpose of Data Processing

The personal data provided by you will be processed exclusively for the following purposes:

a) Contractual agreement and execution, and all activities related to it, including but not limited to billing, credit protection, administrative, managerial, organizational, and functional services necessary for the execution of the contract;

b) Compliance with legal obligations, regulations, applicable legislation, and other provisions issued by authorities empowered by law and by supervisory and control bodies.

The processing of personal data for the purposes mentioned above does not require your express consent (Article 6, letters b and c of the GDPR).

Mandatory Nature of Data Provision and Consequences of Refusal to Provide Personal Data

The data required for the purposes mentioned in the above points a) and b) must be provided in order to fulfill legal obligations, conclude and execute the contractual relationship, and provide the requested services. Therefore, your consent cannot be requested, as a refusal to provide such data would make it impossible to establish and manage the relationship itself and provide the requested service.

Data Processing Methods

The processing of personal data is carried out through the operations indicated in Article 4, No. 2 of the GDPR, for the aforementioned purposes, both in paper and electronic format, using electronic or automated tools, in compliance with current legislation, particularly regarding confidentiality, security, and in accordance with the principles of fairness, lawfulness, transparency, and protection of the rights of the customer.

The processing is carried out directly by the organization of the data controller, by its managers and/or appointed representatives.

Communication and Disclosure

Your personal data may be disclosed, to the extent strictly necessary for the obligations, tasks, and purposes mentioned above and in compliance with current legislation, to the following categories of subjects:

– Subjects to whom such communication must be made in order to fulfill or demand compliance with specific obligations prescribed by laws, regulations, and/or EU legislation.

– Companies belonging to the Data Controller’s Group or affiliated companies, in accordance with Article 2359 of the Italian Civil Code, acting as data processors for administrative and accounting purposes (purposes related to internal organizational, administrative, financial, and accounting activities, particularly those necessary to fulfill contractual and pre-contractual obligations).

– External individuals and/or legal entities providing instrumental services to the activities of the Data Controller for the purposes mentioned in point 1 above (e.g., call centers, suppliers, consultants, companies, institutions, professional studios). These entities will operate as data processors.

Personal data will not be disseminated in any way.

Retention Period of Personal Data

Personal data will be stored for the entire duration expressed by the contract concluded with the Data Controller. After the conclusion of the contract, the data will be retained for the time required by law for the storage of administrative documents, after which they will be deleted.

Data Transfer

Personal data is stored on servers located within the European Union. However, it should be understood that the Data Controller may, if necessary, have the authority to move the servers outside the EU.

 In this case, the Data Controller ensures in advance that the transfer of data outside the EU will comply with applicable legal provisions, subject to the conclusion of the standard contractual clauses provided by the European Commission.

Rights of the Data Subject

As the data subject, you have the rights provided by Articles 15-22 of the GDPR, specifically the rights to:

– Obtain confirmation of the existence or non-existence of personal data concerning you, even if not yet recorded, and their communication in an intelligible form.

– Obtain the following information: a) the origin of personal data; b) the purposes and methods of processing; c) the logic applied in case of processing carried out with the aid of electronic tools; d) the identification details of the data controller, data processors, and the designated representative according to Article 3(1) of the GDPR; e) the subjects or categories of subjects to whom personal data may be communicated or who may become aware of it as designated representatives in the territory of the State, data processors, or persons in charge.

– Obtain: a) the updating, rectification, or integration of data; b) the erasure, anonymization, or blocking of data processed unlawfully, including data that does not need to be stored in relation to the purposes for which the data was collected or subsequently processed; c) a statement that the operations mentioned in points a) and b) have been brought to the attention, including their content, of those to whom the data has been communicated or disclosed, except where this proves impossible or involves a disproportionate effort compared to the protected right.

– Object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, using automated call systems without the intervention of an operator, via email and/or traditional marketing methods via telephone and/or postal mail. It should be noted that the data subject’s right to object, as mentioned in the previous point b), to direct marketing purposes using automated methods also extends to traditional methods. However, the data subject still has the option to exercise the right to object only in part. Therefore, the data subject can choose to receive communications only through traditional methods or only through automated communications, or none of the two types of communication. If applicable, the data subject also has the rights provided by Articles 16-21 of the GDPR (right to rectification, right to be forgotten, right to restriction of processing, right to data portability, right to object), as well as the right to lodge a complaint with the Supervisory Authority.

To exercise the rights provided by Articles 15-22 of the GDPR or for questions or information regarding the processing of your data and the security measures adopted, you may submit a request to our company at the following address:

DIMAC SRL

Via dell’Industria 51 int. A

76121 BARLETTA (BT)

Email: privacy@dimacweb.it | PEC: dimacwebsrl@legalmail.it | Tel. 0883348235

VAT number: 03363470729