* * *
The processing of the personal data will be inspired by the principles of correctness, lawfulness, transparency, purpose and storage limitation, minimisation and accuracy, integrity and confidentiality as well as the principle of accountability in line with art. 5 of the GDPR. The User’s personal data will therefore be processed in accordance with the legislative dispositions of the Regulation and the obligations of confidentiality foreseen therein.
By processing of personal data we here refer to any operation or set of operations, performed with or without the aid of automated processes and applied to personal data or sets of personal data, such as their collection, registration, organisation, structuring, conservation, adaptation or modification, extraction, consultation, use, communication through transmission, dissemination or any other method by which they may be made available, as well as their comparison or interconnection, limitation, cancellation or destruction.
The personal data that is subjected to processing may include texts, photos or video images and any other information that may identify or allow identification of the interested party.
* * *
1. Data Controller and organisational supervision
The Data Controller is:
Via dei Grandi Maestri Pastai, 1
82100, Benevento, Italy
Tax code and VAT no. 01418030621
Economic and administrative index BN 118763
registration date: 24/12/2007
Share capital € 32,305,810.00
Tel. +39 0824 331 111
The Data Controller can be contacted at Rummo S.p.A. Via dei Grandi Maestri Pastai, 1, 82100, Benevento, Italy; email: firstname.lastname@example.org
2. Personal data subject to processing
2.1. Navigation data – log files
The computer systems and software procedures used to operate this website during normal operation, acquire a few personal details (the transmission of which is implicit in the use of Internet communication protocols) not associated to directly identifiable users.
The data collected includes the IP addresses and the names of the computer domains used by the Users that access the site, the addresses in URI (Uniform Resource Identifier) notation of the requested resources, the time of the request, the method used to forward the request to the server, the size of the file obtained by way of reply, the numeric code indicating the state of the reply given by the server (success, error, etc.) and other parameters related to the user’s operating system and computer environment. This data is processed, for the time that is strictly necessary and for the sole purpose of obtaining anonymous statistical information on the use of the site and to verify its regular operation.
2.2. Data voluntarily supplied by the user
The voluntary and explicit sending of e-mails to the addresses indicated in the various access channels to this site and filling in the specifically prepared “forms” (windows) subsequently entail the acquisition of the address and of the sender/user data, required to answer the questions raised and/or provide the requested service. Specific summed up information will be reported or displayed on the site’s pages prepared for specific on demand services.
2.3. Third party data voluntarily provided by you
When using specific services, the processing of third party personal data may take place that has been communicated to Rummo by the User. Regarding this possibility, the User in this case becomes an independent processing controller and takes on all the obligations and responsibilities foreseen by law. In this respect, the User shall hold the Controller harmless in any dispute, claim, processing damage reimbursement request that may be brought against the Controller by third parties whose personal data has been processed through your use of the Site’s services in violation of the applicable regulations for the protection of personal data. In any case, if the User provides or in any other way processes third party data when using the Site, they guarantee as of now – and take on all connected responsibility – that this particular processing possibility is based on the prior acquisition – by the User – of third-party consent to the processing of information that concerns said party.
3. Purpose of the personal data processing and relative judicial basis
The Rummo site carries out processing of personal data to the extent that is strictly necessary for the performance of its institutional functions, ruling out all processing when the purpose pursued may be achieved using anonymous data or methods that enable the identification of the interested party only in the case of need.
Specific purposes, related to single processes, may be reported in a more detailed fashion within the context of the various access channels. Within them, the User may find additional information on personal data processing.
The personal data collected via the Rummo site may be used, with the optional consent of the interested party, for the following purposes:
- marketing activities of various kinds, the distribution of information and promotional material, the sending of e-mails containing updates and newsletters on Rummo activities and products.
The conferment of the data for these purposes is optional, with the result that the User may decide not to provide his or her consent, or to revoke it at any time.
4. Categories of personal data beneficiaries
The personal data supplied by the User may be made accessible to:
- Rummo employees and collaborators, in their capacity as authorised personnel engaged in data processing activities (or so called “data processors”),
- to third parties engaged in outsourcing activities on Rummo’s behalf, in their capacity as data controllers,
- to affiliated companies or subsidiaries that are part of “Rummo S.p.A.”,
- to judicial or supervisory authorities and public administrations, entities and organisms (both national and foreign).
5. Processing method
The personal data is processed using automated instruments for the time that is strictly required to pursue the purposes for which they were collected. Specific security measures are complied with to prevent the loss of data, any illicit or incorrect use of the same and unauthorised access to it.
- Optional nature of data conferral
The user is free to provide the personal data included in the request forms for the various services provided by the portal; the failure to confer data that is compulsorily requested, will lead to the impossibility of obtaining the service.
7. Transfer, communication and distribution of personal data
No data item is shared outside the European Economic Space.
The personal data of the Users that ask to receive informative material (mailing-lists, answers to questions, notifications and newsletters, etc.) are used for the sole purpose of executing the service or job required and are only communicated to third parties when:
- this is required in order to fulfil the requests (i.e. the sending of any documentation requested);
- the communication is required by legal or regulatory obligations;
- during legal proceedings.
The processing connected to the web services provided by this site are exclusively maintained by Rummo technical personnel appointed to perform the processing procedures.
8. Period of data storage
After such a time, the user’s personal data will only be kept to fulfill legal and regulatory obligations (such as for example, for 10 years, for accounting purposes; for the duration of compulsory conservation, for tax purposes; etc.) or to enable the Company to retain evidence of mutual rights and obligations.
9. Data subject rights
Pursuant to articles 15 and following of the GDPR, the Users have the right to request Rummo, at any time, to access their personal data, its rectification or cancellation, or to oppose its processing pursuant to art. 21 of the Regulation. The Users also have the right to request that processing to be restricted in the instances foreseen by art. 18 of the Regulation, as well as obtaining all data that concerns you in a structured, commonly used and readable format on an automatic device, in the instances foreseen by art. 20 of the Regulation.
The requests should be addressed in writing to the Controller at the address: email@example.com
In any case, the Users shall always retain the right to file a complaint with the competent authority (Personal Data Protection Guarantor), pursuant to art. 77 of the Regulation, if they believe that the processing of their data is being performed in a manner contrary to the current legislation.
More information on the data conservation period and the criteria used to establish that period may be requested by sending a written request to the Controller at the address: firstname.lastname@example.org
Rummo shall inform the Users as soon as they are introduced and they shall be binding as soon as they are published on the Site.
In order to exercise the above rights or for any other request one can write to the Processing Controller:
Rummo S.p.A. with offices in Benevento Via dei Grandi Maestri Pastai 1, or to the address email@example.com