ARTT. 13 AND 14 OF REGULATION (UE) 2016/679

Parties involved: browsers

GEMMA GROUP S.R.L., in the capacity of Data Controller of your personal data, pursuant to and for the purposes of Regulation (EU) 2016/679 hereinafter ‘GDPR’, hereby informs you that the aforementioned legislation provides for the protection of data subjects with respect to the processing of personal data and that such processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights

In order to achieve its purposes, relating to the management of the relationship, the owner needs to acquire personal data, such as, for example, name and surname, telephone or cell phone number, email address, tax code.

Your personal data will be treated in accordance with the legislative provisions of the above mentioned legislation and the confidentiality obligations therein.

Purpose of treatment: Your data will be processed to respond to any requests that may be received from the forms available on the website, or requests received by e-mail. 

Legal Basis: The legal basis for processing is contractual in the sense that data processing is carried out in response to a request for information followed by a response.

Consequences of non-disclosure: the processing of functional data for the fulfilment of these obligations is necessary for a correct management of the relationship and their conferment is compulsory to implement the above mentioned purposes. The Owner also informs that the possible non-communication, or wrong communication, of one of the compulsory information, can cause the impossibility for the Owner to guarantee the congruity of the treatment itself

Method of processing:The processing is carried out with manual and / or computer and telematic tools, so as to ensure the security, integrity and confidentiality of data in compliance with the physical and logical organizational measures, provided by the provisions in force, so as to minimize the risk of destruction or loss, unauthorized access, modification and unauthorized disclosure in accordance with the procedures referred to in Articles 6, 32 of the GDPR.

Target Audience: For the performance of certain activities, or to provide support for the operation and organization of the activity, some data may be brought to the attention of or communicated to recipients. These subjects are distinguished in: 

Third parties: (communication to: natural or legal persons, public authorities, service or other body other than the data subject, data controller, data processor and authorized persons responsible for processing) including:

  • Companies that manage traditional or computerized postal services 
  • Any other subjects whose data communication is necessary for the achievement of the above mentioned purposes. 

Data Processors: (the natural or legal person, public authority, service or other body that processes personal data on behalf of the data controller)

  • Providers of computer, web, or other services necessary to achieve the purposes necessary to manage the relationship.

Inside the company structure, your data will be treated only by personnel expressly authorized by the Owner, with assurance of adoption of confidentiality agreement and, in particular, by the following categories of employees:

  • Administration;
  • Other personnel whose treatment is necessary for the proper execution of the relationship;

Outreach: Your personal data will not be disseminated in any way.

Data transfer to third countries: Vedi Policy Privacy.

Data storage period: We point out that, in accordance with the principles of lawfulness, purpose limitation, data minimization, pursuant to art. 5 of the GDPR, the period of conservation of your personal data is established for a period of time not exceeding the achievement of the purposes for which they are collected and processed, in the event that a contract is signed this period of conservation may cease with the forfeiture or termination of the contract, the same dsti can be retained, where applicable, for a further period of time for the purpose of managing any disputes, the legal basis for such conservation is the legitimate interest of the owner of the treatment. The conservation period for data processing related to marketing is functional to the purposes pursued by the owner of the treatment, and in any case not more than 3 years from the last contact, or feedback received.

Owner of the processing: the owner of the data processing, according to the law is GEMMA GROUP S.R.L., with legal and operational headquarters in Via Dante Alighieri, 6 – 47853 Coriano (RN), P.iva/Fiscal Code: 00245400403 in the person of its legal representative pro tempore.

By sending an e-mail to the following address you may request more information about the data provided. UE 2016/679: Artt. 15, 16, 17, 18, 19, 20, 21, 22, 23 – Rights of the interested party

  1. The interested party has the right to obtain confirmation of the existence or not of personal data concerning him, even if not yet recorded, and their communication in intelligible form.
  2. The interested party has the right to obtain the indication:
    1. the origin of personal data
  3. The interested party has the right to obtain:
    1. updating, rectification or, when interested, integration of data;
  4. The interested party has the right to object, in whole or in part:
    1. for legitimate reasons to the processing of personal data concerning him, even if pertinent to the purpose of collection;

Complaint: GThe interested parties, if necessary, also have the right to complain to the Guarantor as a supervisory authority in accordance with the procedures provided. For any further information, and to enforce the rights recognized by the European Regulation, you may contact the data controller at the above references.