- 1. Data Controller
The Data Controller of your personal data is SIGNORINI COCO & C SRL, responsible for you as regards the lawful and correct use of your Personal Data, and who you may contact for any information or request at the following addresses:
Data Controller: SIGNORINI COCO & C SRL
Registered Office: VIA LAZIO 41 – 56035 – FRAZ. CASCIANA TERME LARI – CASCIANA TERME (PI)
Contact data and addresses:
Telephone : (+39) 0587 616198
Fax : (+39) 0587 617540
E-mail : firstname.lastname@example.org
Certified Mail : email@example.com
- 2. Types of data gathered, aims and lawful basis
The Personal Data processed are gathered since they are furnished directly by the User/Data Subject or gathered automatically through the site.
Dati furnished directly by the User/Data Subject:
The data furnished directly by the User/Data Subject are all the Personal Data inserted by the same within the site or which are however furnished to the Data Controller through any procedure. Such data will be processed in compliance with the privacy guarantees and security measures provided by the norm in force, also with the use of electronic instruments directly and/or through third parties, for the objectives given hereunder according to the reference laws:
|DATA PROCESSED||LAWFUL BASIS|
|A||Aims strictly connected to the
execution of pre-contractual
measures and to respond to
specific requests of the data
|Name, Surname, E-mail, Telephone, Address, Zip, City,
Province, Country, Profession
the Data Subject
is part of and/or
execution of pre-
adopted at the
|B||Exercise of the rights of the Data Controller, for example, the right to defend itself in lawsuits||Name, Surname, E-mail, Telephone, Address, Zip, City, Province,
|C||Direct and indirect marketing
objectives and market research,
for the purpose of sending
newsletters and informative and
|Name, Surname and E-mail||Consent|
The User/Data Subject assumes the responsibility for the Personal Data of third parties obtained, published or shared through this
Application and guarantees to be entitled to communicate or diffuse them, freeing the Data Controller of any responsibility towards third parties.
Data gathered automatically through the site:
The data gathered automatically are processed exclusively for the purposes these are gathered, as described subsequently.
- 3. Obligatory and optional features in providing data and the consequences of a refusal to
Furnishing data for the objectives referred to in points a and b is optional but necessary to execute the contract.
Furnishing data for the aims referred to in point c is optional and your data can be used after your consent; in case of a refusal, your data cannot be processed for the objectives described in that point.
If not specified otherwise, all the data requested in order to surf on the site are obligatory. If the User/Data Subject refuses to communicate it, this could prevent the Application from furnishing the Service. In cases where this Application indicates some data as optional, the Users are free to abstain from communicating such data, without any consequence on the availability of the Service or its operations.
Users who may have any doubts as to which Data are obligatory, may contact the Data Controller.
- 4. Processing methods
The Data Controller adopts the opportune security measures aimed at hindering unauthorised access, disclosure, modification or destruction of the Personal Data.
Processing is done through IT and telematic instruments with organisational methods and logics strictly correlated to the purposes indicated.
- 5. Addresses
Your data may be disclosed by the Data Controller not only to the data processing staff, but also to the following subjects, and if necessary to Processing Managers, but also to:
a) Consultants and companies that assist the Company from the IT or infrastructural point of view;
b) Other companies, professionals and agents who work with the Company for the provision of services.
The updated list of Managers can always be requested from the Data Controller.
The data will not be subjected to other disclosure methods.
- 6. Place of processing
The Data are processed in the operating headquarters of the Data Controller and in any other place where the parties involved in the processing are located. Contact the Data Controller for further information.
The data furnished directly by the Data Subject and gathered automatically may be transferred to a country other than that of the User/Data Subject, if located also outside the territory of European Economic Community. In such case, SIGNORINI COCO & C SRL. ensures that the processing of your Personal Data by these subjects to whom the data are transferred, are done in compliance with European Regulation 679/2016, always in conformity with the principles indicated in Art. 45 of the GDPR 2016/679 regarding the subsistence of a decision on adequacy by the European Commission, or in the absence of such decision, in compliance to Art. 46 related to the transfer in the presence of adequate guarantees or in compliance to Art. 49 paragraph 1 lett b) – regarding necessary transfer in the execution of a contract concluded between you and the Data Controller or for the execution of pre-contractual measures.
- 7. Storage period
Data furnished directly by the User/Data subject:
The Personal Data furnished directly by the Data Subject and gathered with the objective of responding to the specific requests and/or to fulfil pre-contractual/contractual transactions shall be processed and retained for the time necessary for the pursuance of the abovementioned purposes and however for not more than 5 years from their collection.
The Personal Data collected for aims retraceable to the lawful interest of the Data Controller will be kept until such interest is satisfied. In case of pending lawsuits, the data shall be further processed up to their resolution. Furthermore, the Data Controller may be obliged to keep the Personal Data for a longer period in compliance with a law obligation or as ordered by an authority.
The Personal Data gathered for the purposes of direct and indirect marketing and market research, in sending newsletters, and advertising and informative material, will be processed and kept for the time necessary for the pursuance of the aforesaid objectives and however for not more than 2 years from their collection.
At the end of the retention period the Personal Data shall be erased. Therefore, upon expiry of such term, the entitlement to access, cancel, or rectify and the portability right of the Data cannot be exercised.
Data gathered automatically through the site:
At the end of the conservation period, the Personal Data will be erased. Therefore, upon expiry of such term, the right to access, cancel or rectify and the portability right of the Data can no longer be exercised.
- 8. Data Subject’s rights
Pursuant to Art. 7 of the Privacy Code and Art. 13 of the GDPR, each User/Data Subject is entitled to obtain the confirmation of the
existence or not of his/her Personal Data, even if they are not yet registered, and their communication is not in readable form.
In particular, the Data Subject is entitled to obtain from the Data Controller the information on:
– the origin of the Personal Data;
– the aims of processing and the processing methods;
– the logic applied in case of processing performed with the use of electronic/IT instruments;
– the identification data of the Data Controller, the assigned processing Managers and Representatives;
– the subjects and categories of subjects to which the data may be communicated or that may come to know the data in their
capacities as the designated Representative in the territory of the State, or the Managers or those Assigned to processing.
Moreover, the data subject is entitled to obtain from the Data Controller:
– the update, rectification or integration of his/her own data;
– the erasure, transformation into anonymous form or the blocking of the data processed in violation of the law;
– the access to his/her own data and the confirmation whether or not his/her Personal Data is being processed;
– processing limitations,
– data portability, that is the right to receive in a structured form, his/her own Personal Data;
– the right to lodge complaints with the Supervisory Authority.
Lastly, the data subject is entitled to totally or partially oppose, for lawful reasons, the processing of his/her Personal Data, even if
pertaining to the scope of the collection. In particular the Data Subject is entitled to oppose the processing of the Personal Data for
the purpose of sending commercial advertising material or for commercial communication aims. The rights mentioned in the previous
points can be exercised by writing to the contacts indicated in point 1 of this circular letter.