DATA RECIPIENTS

Personal data will be disclosed to the data controller’s employees who are authorised to process this data as part of their duties. Data may be accessed by third parties who assist the data controller in managing information systems and in technical assistance activities. They may also be communicated to Authorities upon request in cases provided for by law. Data are not disseminated in any way.

DATA TRANSFER

The Data Controller will not disclose any personal data to third countries ( non EU member states) or international organisations.

DATA SUBJECT’S RIGHTS AND HOW TO EXERCISE THESE RIGHTS

As a data subject and in relation to processing operations described in this Information Notice, the data subject may exercise the following rights by sending a formal request to the e-mail address privacy@ferasrl.it:

•  Rights of access i.e. the right to obtain confirmation as to whether or not personal data concerning him/her is being processed and, if so, obtaining access to that personal data, including a copy thereof.
•   The right to rectification i.e. the right to obtain, without undue delay, the correction of inaccurate personal data concerning him/her and/or the supplementation of incomplete personal data;
•   The right to erase data (the right to be forgotten) i.e. the right to obtain, without undue delay, the deletion of personal data concerning an individual, if one of the following grounds applies:
  •   personal data is no longer necessary in relation to the purpose for which they were collected or otherwise processed;
  •   the subject of this data objects to data processing and there is no overriding legitimate ground for this processing;
  •   personal data has been processed unlawfully;
  •   personal data must be erased in order to comply with a legal obligation laid down by Unionor Member State law to which the Data Controller is subject;
•   The right to limit processing, i.e. the right to obtain a restriction on processing, when:
  •  the subject of this data disputes the accuracy of personal data, for the period necessary for the Data Controller to verify the accuracy of such data;
  •   processing is unlawful and the data subject objects to the deletion of personal data and requests, instead, that its use is restricted;
  •   personal data is necessary for the establishment, exercise or defence of a legal claim;
  •   the data subject has objected to processing in accordance with Art. 21 GDPR, during the period pending verification as to whether legitimate reasons of the Data Controller prevailover those of the data subject;
•  The right to data portability, i.e. the right to receive, in a structured, commonly used andmachine-readable format, personal data concerning you and the right to have it transmitted to another Data Controller without hindrance, where processing is based on consent and is carried out by automated means. Furthermore, the right to have your personal data transmitted directly to another Data Controller if this is technically feasible;
•   Right to object i.e. the right to object, at any time, to the processing of personal data;
•   Right to complain i.e. the right to lodge a complaint with the Data Protection Authority,following the procedures and indications published on the Authority’s official website www.garanteprivacy.it.