REPORT ON THE HANDLING OF PERSONAL DATA for the acquisition of products by Cartiera
(article 13 of the E.U. Regulation 2016/679)
This report has been drafted in accordance with article 13 of the EU Regulation 2016/679 – General Regulation for the Protection of data.
According to the law in question, such handling will be based on principles of correctness, lawfulness and transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity and confidentiality.
The data controller and the processing location
The data controller of the information gathered is Cartiera Soc. Coop. Sociale, based at the office in via Lama di Reno 34, 40043 Marzabotto (BO), frazione: Lama di Reno (Email: firstname.lastname@example.org).
Data processing takes place at the aforementioned location of Cartiera and is the responsibility of the staff working there.
Person in charge of data processing
The controller of the data collected is Miriam Anna Paola Salussolia c/o Cartiera Soc. Coop. Sociale, based in via Lama di Reno 34, 40043 Marzabotto (BO), frazione: Lama di Reno (Email: email@example.com).
He is entitled to process personal data collected on the basis of the contract stipulated with the data controller on 09th November 2018, in accordance with the provisions of art. 28 paragraph 4 of the EU Regulation.
If needed, the controller can appoint one or more sub-controllers in compliance with art. 28, paragraph 4 of the EU Regulation.
Nature of data collected
The data that Cartiera will collect and process is exclusively that which is provided by the user (personal data, shipping address, contact data, invoice data, IP address) on the occasion of a purchase request for Caritera products through the relative form on the website www.coopcartiera.it.
Purpose of the data processing
The data provided by users is used exclusively for sending products by Cartiera.
Recipients of the personal data
The personal data provided by users is used solely for Cartiera Soc. Coop. Sociale for the indicated purpose and will not be disclosed to third parties.
Period of retention of the personal data
The personal data provided by users is kept for the period of time strictly necessary for the aforementioned purposes, and in any case for a maximum period coinciding with the expiry of legal accounting obligations.
Methods of data processing
The collected data is processed using computer tools.
Appropriate security measures are implemented to prevent data loss, illicit or incorrect use and unauthorized access.
Obligation to provide data
The provision of personal data is mandatory and any refusal to provide such data makes it impossible to use the sales service used for Cartiera publishing products.
The rights of the interested parties
The subjects to whom the personal data refer have the right at any time to:
- ask the data controller to access their personal data, rectify, cancel or limit the processing that concerns them, as well as the right to object to the processing and the right to data portability;
- withdraw their consent at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation;
- file a complaint to a supervisory authority
The above requests can be addressed to Cartiera at the following addresses:
Cartiera Soc. Coop. Sociale
via Lama di Reno 34, 40043 Marzabotto (BO)
frazione: Lama di Reno