INFORMATION FOR THE PROCESSING OF PERSONAL DATA
Pursuant to article 13 of the (EU) 2016/679 general regulation on data protection ("Regulation"), Iride International s.r.l hereinafter referred to as the Company, provides the following information with reference to the personal data provided by the contractual counterparty - the which undertakes to transfer said information to the persons concerned, as well as to the personal data collected for the marketing purposes indicated in this Information.
1. Data Controller
Iride International s.r.l , VAT number 01374170932 with registered office in Via San Giuseppe 5, 33082 Azzano Decimo (PN)
2. Categories of data being processed
2.1 Data processed during the contractual relationship
The object of processing are the personal data provided by the contractual counterparty hereinafter called INTERESTED SUBJECT, at the time of collection of information, hereinafter referred to as PERSONAL DATA or simply DATA, from the site www.irideinternational.com such as for example:
- personal data
- the place of birth
- of residence
- Tax ID code
- VAT number
- telephone number
- email address
- Bank account details
and their subsequent variations, as well as the additional data that will be provided by the INTERESTED PARTY or acquired by the Company during the contractual relationship ("PERSONAL DATA" or "DATA").
All such information is to be considered Personal Data pursuant to the applicable legislation to the extent that it refers directly or indirectly to identified or identifiable natural persons (for example, directors, employees, managers, collaborators, consultants of the contractual counterparty).
For example, the VAT number of a legal person does not fall within the definition of Personal Data.
2.2 Data processed in carrying out marketing activities
The object of processing is the personal data ("Personal Data" or "Data") provided by the user ("INTERESTED SUBJECT") or collected by the Company during its navigation on the Site.
Data provided by the INTERESTED PARTY: these are mainly Data collected during interactions with the Company through the forms on the Site or by subscribing to the Newsletter. This Data includes name, surname, e-mail address and telephone number;
Other Data processed: these are mainly Data collected during the navigation of the INTERESTED SUBJECT on the Site, such as the IP address, the operating system of the browser used, the contents clicked and the web pages visited.
3. Purpose of the Processing, legal basis and consequences of not providing the Data
3.1 Data processed during the contractual relationship
Personal Data is processed by the Company for the following purposes:
fulfill the legal and administrative obligations to which the Company is subject. Any refusal to provide Personal Data for the pursuit of the indicated purposes will result in the impossibility of establishing and continuing the contractual relationship with the Company;
enter into and manage the contractual relationship with the Company. For the aforementioned purpose, the Personal Data will also be processed in the context of the following activities: administration, accounting, contract management, services, invoicing/payments, mandatory/optional auditing and certification of the financial statements, assignment or credit advance, as well as to fulfill specific requests and comply with the other obligations deriving from the Contract with the Company. The provision of Personal Data is necessary for the establishment and performance of the Contract. Any refusal to provide Personal Data for the pursuit of the indicated purposes will result in the impossibility of establishing and continuing the contractual relationship.
3.2 Data processed in carrying out marketing activities
The Data is processed by the Company for the following purposes:
- allow the interested parties to be updated on the Company's products, through the direct marketing of goods and services, the receipt of the newsletter, the distribution of information material, the organization and promotion of events and the sending of related questionnaires the degree of customer satisfaction;
- send personalized information based on the specific profile and interests of the INTERESTED SUBJECT;
The processing of data for the purposes referred to in points a), b) and c) is optional, and is subject to the consent of the INTERESTED PARTY. Any refusal to provide such Data will make it impossible to communicate to the INTERESTED SUBJECT any commercial initiative and offer of the company Iride International s.r.l, as well as to receive commercial information deemed relevant for his profile.
The processing of Personal Data could also take place in the context of carrying out management operations for a possible dispute. Any such treatments could be implemented on the basis of a legitimate interest of the Company, which intends to protect its interests and rights as recognized by current regulations.
4. Processing methods and data retention period
4.1 Data processed during the contractual relationship
Personal Data is mainly processed at the Company with the aid of electronic and manual means capable of guaranteeing its security and confidentiality. In particular, they may be processed in the following ways:
- collection of data from the interested party;
- collection of data from registers, lists of deeds or public documents;
- registration and processing on paper;
- registration and processing on computer support;
- organization of archives in both automated and non-automated form
Personal Data will be stored in compliance with the provisions of current legislation on the subject, for a period of time not exceeding that necessary to achieve the purposes for which they are processed.
The criteria for determining the data retention period take into account the permitted processing period and the applicable regulations on taxation, limitation of rights and the nature of the legitimate interests where they constitute the legal basis of the processing.
In compliance with the provisions of current legislation, Personal Data may be kept for a period subsequent to that originally envisaged, in the event of any disputes or requests from the competent Authorities.
4.2 Data processed in carrying out marketing activities
The communications for the purposes indicated in paragraph 3.2 may be made by e-mail, sms, whatsapp, Telegram paper mail as well as any other present and future means of communication, it being understood that the interested party may oppose the treatment carried out through one or all of these media.
The Data is mainly processed at the Company with the aid of electronic and manual means suitable for guaranteeing its security and confidentiality. In particular, they may be processed in the following ways:
- collection of data from the interested party;
- registration and processing on paper;
- registration and processing on computer support;
- organization of archives in both automated and non-automated form.
The Data will be stored in compliance with the provisions of current legislation on the subject, for a period of time not exceeding that necessary to achieve the purposes for which they are processed. In the absence of specific rules that provide for retention times for the purposes indicated in this Information, the Company will take care to use the Personal Data for the aforementioned marketing purposes for a time congruous with respect to the interest shown by the INTERESTED SUBJECT in promotional initiatives, evaluated over 5 years. In any case, the Company will take every precaution to avoid using the data for an indefinite period, periodically proceeding to verify in an appropriate manner the effective persistence of the INTERESTED PARTY's interest in having the processing carried out for marketing purposes, as above specified.
5. Scope of communication and data transfer
Personal Data will be made available to subjects authorized to process them within the Company only where necessary and for the purposes for which processing is permitted.
5.1 Data processed during the contractual relationship
Personal Data may be communicated by the Company, solely and exclusively for the purposes indicated, as well as to the competent Judicial Authorities where necessary, to the following categories of subjects:
- banking and credit institutions;
- insurance companies;
- legal advisors;
- tax consultants, auditors and accountants;
- debt collection company;
- companies that detect financial risks and that carry out fraud prevention activities;
- public administrations and supervisory and control authorities;
- car rental companies;
- travel agencies;
- companies that provide IT services;
- companies that provide security and surveillance services;
- parent companies and/or affiliates of the Company.
With reference to the Personal Data communicated to them, the subjects belonging to the categories listed above may operate, depending on the case, as data processors (and in this case they will receive appropriate instructions from the Company) or as separate data controllers. In the latter case, i
Personal Data will be communicated only with the express consent of the interested parties, except in cases where the communication is mandatory or necessary by law or for the pursuit of purposes for which the consent of the interested party is not required by law.
If this is instrumental to the pursuit of the purposes indicated in paragraph 3.1, the Data may also be transferred abroad to companies based both inside and outside the European Union.
Some of these jurisdictions may not guarantee the same level of protection of the Data guaranteed by the country in which the interested party resides. In this case, the Company undertakes that the Data will be treated with the utmost confidentiality by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses envisaged by the European Commission.
5.2 Data processed in carrying out marketing activities
The Data may be communicated by the Company, solely and exclusively for the purposes indicated, as well as to the competent Judicial Authorities where necessary, to the following categories of subjects:
- companies that provide IT services;
- Company consultants;
- marketing service providers;
- parent companies and/or affiliates of the Company.
If this is instrumental to the pursuit of the purposes indicated in paragraph 3.2, the Data may also be transferred abroad to companies based both inside and outside the European Union. Some of these jurisdictions may not guarantee the same level of protection of the Data guaranteed by the country in which the interested party resides. In this case, the Company undertakes that the Data will be treated with the utmost confidentiality by stipulating, if necessary, agreements that guarantee an adequate level of protection and/or by adopting the standard contractual clauses envisaged by the European Commission.
6. Existence of an automated decision making process
There is no automated decision-making process in relation to the Data.
7. Rights of the interested party
At any time, the interested party will have the right to:
- obtain confirmation from the Company as to whether or not their Personal Data is being processed and, if so, to obtain access to the information referred to in art. 15 of the Regulation;
- obtain the rectification of inaccurate Data concerning him, or, taking into account the purposes of the processing, the integration of incomplete Personal Data;
- obtain the cancellation of your Personal Data, in the presence of one of the reasons referred to in art. 17 of the Regulation, where applicable;
- revoke the consent at any time in cases where it was previously provided. The withdrawal of consent does not affect the lawfulness of the treatment based on the previously given consent;
- obtain the limitation of the processing of your Data if one of the hypotheses referred to in art. 18 of the Regulation;
- object to the processing of your Personal Data, for reasons related to your particular position, where applicable;
- receive in a structured format, commonly used and readable by an automatic device, the Personal Data concerning him provided as well as to transmit such Data to another data controller, in the cases and within the limits set forth in art. 20 of the Regulation.
The Company may request further information before processing the requests, if it needs to verify the identity of the natural person who submitted them.
Pursuant to the GDPR, the Company is not authorized to charge costs to fulfill one of the requests set out in this paragraph, unless they are manifestly unfounded or excessive, and in particular have a repetitive nature. In cases where an INTERESTED SUBJECT requests more than one copy of their personal data or in cases of excessive or unfounded requests, the Company may (i) charge a reasonable fee, taking into account the administrative costs incurred to process the request or (ii ) refuse to comply with the request. In these cases, the Company will inform the person concerned of the costs before processing the request.
These rights can be exercised by sending:
- a communication by e-mail to the address welcome@irideinternational.com
Without prejudice to any other administrative or judicial appeal, the interested party also has the right to lodge a complaint with a supervisory authority (for Italy: the Guarantor for the protection of personal data), if he considers that the treatment concerning him is carried out in violation of the General Data Protection Regulation. Further information is available on the website http://www.garanteprivacy.it.
The Company undertakes to comply with all the obligations set out in this disclosure. Interested parties who decide to lodge the above appeals or complaints are invited to contact us.