C.R.G S.p.A. Via Mantova 4 25017 Lonato del Garda
P.IVA 08586340013 Telefono 0309912604
Information pursuant to Art. 13 of the European Regulation 679/2016 and consent
Pursuant to art. 13 of the European Regulation (EU) 2016/679 (hereafter GDPR), and in relation to the personal data that the company will come available with the assignment of your practice, we inform you as follows:
Controller of personal data processing and responsible for its protection
The data controller is C.R.G S.p.A. Via Mantova 4 25017 Lonato del Garda
Vat n.08586340013 Phone 0309912604 and the person in charge of the processing is Vanaria Marina.
The Holder can be contacted via crg@kartcrg.com or at the company address.
Type of data processed
The data processed (such as name, surname, residence, profession, telephone number, social security number, and e-mail address) are provided by you, in general, to comply with the purposes of data processing, and to fulfill certain obligations of law.
Purposes of data processing
Purposes related to the establishment and execution of the contractual relationship between the Client and the Company, with the execution of an exploratory assignment or of a contract / assignment of which you are a part.
Your data will also be processed in order to fulfill the obligations set forth in the tax and accounting fields.
Personal data may be processed by means of both paper and electronic files (including portable devices) and processed in strictly necessary ways to meet the aforementioned purposes.
- Purposes related to the establishment and execution of the contractual relationship
- or an exploratory assignment between the Client and the Company.
- Legal basis: Execution of an exploratory assignment of which you are a part.
- Direct marketing purposes: by way of example, sending – with automated methods of contact (such as texting, mms and e-mail) and traditional (such as phone calls with operator and traditional mail) – of promotional and commercial communications relating to services / products offered by the Company o reporting of corporate events, as well as carrying out market studies and statistical analyzes
Subjects authorized to treatment
The data may be processed by employees and collaborators of the company departments responsible for the pursuit of the aforementioned purposes, expressly authorized to process and adeguately trained.
C.R.G S.p.A. will process your personal data lawfully, where the processing:
- it is necessary for the execution of the mandate, a contract of which you are a part, or the execution of pre-contractual measures taken on request;
- it is necessary to fulfill a legal obligation impending on C.R.G S.p.A.
- is based on the expressed consent
Consequences of failure to communicate personal data
With regard to personal data relating to the execution of the contract of which you are party or related to the fulfillment of a regulatory obligation referred to the purpose, failure to communicate personal data prevents the improvement of the contractual relationship itself.
Data retention
Your personal data, object of treatment for the above mentioned purposes, will be kept for the duration of the contract and, subsequently, for the time in which C.R.G S.p.A. is subject to conservation obligations for tax purposes or for other purposes, provided by law or regulation.
For the purpose of direct marketing the storage period is 24 months from their collection, in case of incontracts the storage period is 24 months from the termination of the contract.
Data transfer abroad
Your personal data may be transferred to member countries of the European Union and to countries outside the European Union, always within the purpose of the aim indicated in this statement and in compliance with applicable international standards and agreements.
Data communication
Your personal data may be disclosed to:
- consultants and accountants or other legal persons who provide functional services for the purposes indicated above;
- banking and insurance institutions that provide functional services for the purposes indicated above;
- subjects who process data in execution of specific legal obligations;
- Judicial or administrative authorities, for the fulfillment of legal obligations.
Rights of the interested part
Among your rights recognized by the GDPR are those of:
- asking C.R.G S.p.A the access to your personal data and information related thereto; the correction of inaccurate data or the integration of incomplete data; the cancellation of personal data concerning yourself (upon the occurrence of one of the conditions indicated in article 17, paragraph 1 of the GDPR and in compliance with the exceptions provided for in paragraph 3 of the same article); the limitation of the processing of your personal data (upon the use of one of the hypotheses indicated in Article 18, paragraph 1 of the GDPR);
- requesting and obtain from C.R.G S.p.A. – in the cases in which the legal basis of the treatment is the contract or consent, and the same is done by automated means – your personal data in a structured and readable format by automatic device, also in order to communicate this data to another data controller (so-called right to the portability of personal data);
- oppose at any time the processing of your personal data to the occurrence of particular situations that affect you;
- withdraw consent at any time, limited to the cases in which the processing is based on your consent for one or more specific purposes and concerns common personal data (for example date and place of birth or place of residence), or particular categories of data (for example, data revealing your racial origin, your political opinions, your religious beliefs, your health status or your sex life). The treatment based on consent and carried out prior to the revocation of the same preserves, however, its lawfulness;
- propose a complaint to a supervisory authority (Authority for the protection of personal data – www.garanteprivacy.it).
You can request the execution of these rights at any time through the following email addresses: kartcrg@legalmail.it , crg@kartcrg.com