The EU Regulation 679/2016 of 25 May 2016 ("Regulation concerning the protection of physical persons with regard to the processing of personal data", hereinafter referred to as "GDPR") concerns the protection of persons and other subjects with regard to the processing of personal data. Pursuant to that regulation, this treatment shall be based on principles of propriety, legality and transparency and the protection of your confidentiality and rights. In accordance with article 13 of the GDPR, therefore, we are providing you with the following information:
The Data Controller is Nova Systems Services S.r.l., Viale del Lavoro 39/a S. Martino Buon Albergo (VR), hereinafter referred to as “Data Controller”. The Data Controller will be assisted by Nova Systems Engineering S.r.l., Viale del Lavoro 39/a S. Martino B.A. (VR), P.I. 00674850227, which will act as joint data controller in accordance with article 26 of the GDPR (hereinafter along with the Data Controller, referred to as the "Joint Data Controllers" handling). The joint Data Controllers have entered into a co-ownership agreement, with which are committed to: jointly determine purposes and methods of processing personal data; jointly determine, in a clear and transparent manner, the procedures to provide feedback regarding exercising the rights of the concerned; jointly define this policy in the parts of common interest indicating all information required by Regulation. All interested parties can exercise their rights towards each of the joint Data Controllers by contacting them at the above listed references.
Your data shall be subject to processing by the Data Controller for the following purposes:
The processing of your personal data is carried out with the aid of manual instruments on paper media and electronic and data transmission instruments (including online and remotely) and, in any event, with methods designed to guarantee their security.
The legal basis on which the processing is founded is: the granting of consent for the purposes referred to in points a) and c); the cases of legality laid down by the GDPR, Article 6, for which the granting of consent for the purposes referred to in points b), d) is not required.
The data requested are exclusively the minimum required to meet the request referred to in the previous point a) and for the execution of the contractual relationship referred to in the previous point b) (personal details, email addresses, telephone numbers, company positions, signatures); names, contact information, cookies, date of use, data communicated by the user for the execution of the communications referred to in point c); images captured by the video surveillance system for the purposes referred to in point d).
The provision of the data is optional and consent can be given separately for each of the purposes referred to in the previous points a), b), c); however, should you refuse to the provision and subsequent processing of the data, this would prevent the provision of the information referred to in point a), the contractual relationship referred to in point b) and the communications referred to in point c). With regard to the purposes referred to in point d) (video surveillance), the acquisition is automatic and does not require consent to be granted.
Without prejudice to the communications carried out in execution of legal obligations, your data may be communicated, to the extent necessary and sufficient for the attainment of the aforementioned purposes, to external subjects that carry out specific commissions on behalf of the Data Controller (outsourcing services, book-keeping, financial statements, tax fulfilments etc..). Your data shall be processed for the entire duration of the contractual relationship established and also subsequently for the fulfilment of all the legal obligations.
Your data shall not be disseminated.
The personal data shall be retained for the time necessary to perform the services requested and, in the event a contractual relationship is established, for its entire duration, on the conclusion of which the data shall be retained for the periods laid down by the law for the retention of administrative documents, after which they shall be eliminated. With regard to the processing referred to in point d), refer to the specific information briefing (video surveillance).
The person concerned has the right to:
request access to the data in accordance with Article 15 of the GDPR;
request the correction of inaccurate data in accordance with Article 16 of the GDPR;
request the deletion of the data (the right to be forgotten) in accordance with Article 17 of the GDPR;
request a limitation on the processing of the data in accordance with Article 18 of the GDPR;
object to the processing of the data in accordance with Article 21 of the GDPR, in addition to the right of data portability laid down by Article 20 of the GDPR;
revoke the consent previously granted to the data processing without prejudicing the legality of the processing based on the consent granted before the revocation;
lodge a complaint with the Control Authority.
Ver.1092C Date of last update 25/05/2018