1. DATA CONTROLLER
The data controller is A.S.S.O. SPA, Via Enrico Mattei no. 6 - Fermo 63023 (FM) Italy;VAT reg. no. 01125370443 Phone 0734/628940 E-mail address: firstname.lastname@example.org
2. PURPOSES AND METHODS OF DATA PROCESSING
Following consultation of this website and use of one or more services, data concerning identified or identifiable natural persons may be processed. Any personal data acquired, always in compliance with the regulations in force, will be processed solely for the following purposes: for purposes strictly connected and instrumental to grant access to and use the website, its functions and the services requested; b to fulfil the obligations envisaged by law and by European regulations; c for internal operational and managerial requirements within A.S.S.O. SPA and relating to the services and/or products offered; d for the creation of a personal user account; e to provide the newsletter service; In the case of explicit and voluntary manifestation of consent, the data collected for the purposes specified in paragraph 1 herein above will also be processed for the purposes of direct marketing by the Data Controller, in particular to send information, commercial or advertising material relating to the services and/or products offered by A.S.S.O. SPA, also via e-mail, text message, MMS and fax. The data will be processed in a lawful and correct manner and used only for the purposes specified in the previous paragraphs. The processing will occur using suitable tools to guarantee security and confidentiality of the personal data, and may be carried out with hard-copy instruments and/or with the aid of automated means designed to store, manage and transmit the said data.
3. NATURE OF THE CONFERMENT OF DATA AND CONSEQUENCES OF A POSSIBLE REFUSAL
The conferment of personal data is compulsory only for the purposes specified in Art. 2, paragraph 1, to allow the use of the website and related services requested by the user, possibly after disclosure for every additional service, which will be provided to users in the manner prescribed by law. The website may nevertheless be consulted without providing any personal data, but certain functions will not be available and certain services will not be provided. The conferment of the data and the provision of processing consent for the purposes specified in Art. 2, paragraph 1(d), (e) and (f), and paragraph 2, is optional: in the absence of a request by the user and/or the provision of his/her explicit consent, these services will not be provided, but there are no other consequences. Should you choose not to provide your consent for the purposes specified in Art. 2, paragraph 2, you may nevertheless use the website and services for the purposes specified in Art. 2, paragraph 1. In other words, the consequences of a possible refusal to answer or provide your consent are always made explicit and are connected to each service provided: for example, a refusal to the related processing may prevent the consultation of the website with all its functions (in the case of cookies), the sending of our newsletter (in the case of Art. 2, paragraph 1, letter e) or the receipt of advertising material (in the case of Art. 2, paragraph 2). In any case, the user may consult the website even without providing his/her personal data and refusing to provide his/her consent to data processing, where required; in this case, however, some functions or characteristics of the website may be disabled.
4. LOCATION OF DATA PROCESSING
Data processing connected to the web services specified in this website is carried out on the premises of A.S.S.O. SPA, barring any explicit exceptions, and is only handled by technical staff appointed specifically for this processing by the Data Controller.
5. TYPES OF DATA PROCESSED/SPECIFIC PROCESSING
6. DATA STORAGE PERIODS
The data conferred will be stored for the time prescribed by law and, in any case, for the time strictly necessary to fulfil the activities for which they were collected (for example, the data provided in the 'Leave a message' form will be deleted after the related request has been accommodated) and/or until you revoke the consent provided for the purposes specified in Art. 2, paragraph 2. The personal data collected will however not be stored for more than twenty-four months for the marketing purposes specified in Art. 2, paragraph 2 (barring any amendments and/or addenda to the reference legislation regarding the protection of the personal data which you will be expressly notified of).
7. CATEGORIES OF PERSONAL DATA RECIPIENTS
For the purposes specified in Art. 2, where necessary and only with prior consent, the data may be disclosed to third parties whose collaboration A.S.S.O. SPA may and/or shall use for the provision of the services offered. The data acquired via the web, or in any way arising from web services, may be disclosed to technological and instrumental partners whom the Data Controller uses for the provision of the services requested by users/visitors, always in compliance with the purposes specified in Art. 2. The data collected for the purposes set out above may also be disclosed to companies related to or belonging to the same corporate group as the Data Controller and to entities authorised for this purpose by legal provisions and European regulations. A list of entities to whom the Data Controller discloses the personal data collected for the above-mentioned purposes is available to data subjects from the Data Controller himself and can be received subject to prior written request sent to the Data Controller.
8. RIGHTS OF DATA SUBJECTS
The data subject is the natural person, identified or identifiable, to whom the personal data subject to processing refer. We hereby inform you that, as the data subject, you have the right to request from the Data Controller at any time which data concerning you are processed, how they were collected, with what methods and for what purposes they are processed (right of access) in order to verify their accuracy and to verify the lawfulness of the processing carried out by the Data Controller. You may also exercise all the rights acknowledged by the regulations currently in force, at both national and European level, on the protection of personal data (Italian Leg. Decree 196/2003 and EU Reg.no. 2016/679 and subsequent amendments and addenda): in particular, you may request at any time the correction and updating of incorrect or inaccurate data, the limitation of the processing performed and the cancellation of the same (right to be forgotten), as well as lodge a complaint with the Supervisory Authority for the protection of personal data. With reference to the personal data processed using automated means, you are also acknowledged the right to receive the data concerning you in a structured and widely used format and possibly to transmit them to another Data Controller (right to data portability). Every request in relation to the processing of personal data and any communication concerning the exercise of your rights can be directed to the Data Controller using the 'Contact Us' form on the assoitaly.it website or by sending an e-mail to the address: email@example.com; or, instead, by mail, to A.S.S.O. SPA, Via Enrico Mattei no. 6
9. RIGHT TO REVOKE CONSENT AND TO OBJECT
Every data subject is also entitled to revoke at any time the consent provided, without prejudice to the lawfulness of the processing carried out by the Data Controller up until that time. The data subject is also always entitled to object to the processing of data concerning him/her if it is carried out for the purposes of direct marketing as specified in Art. 2, paragraph 2; in this case, once your notice of revocation of consent has been received, your data will no longer be processed for such purposes (right to objection).