INFORMATION ON THE PROCESSING OF PERSONAL DATA
of users who consult the websites of Dondi S.p.A. for the protection of personal data pursuant to Article 13 of Regulation (EU) 2016/679
WHY YOU ARE PROVIDED WITH THIS INFORMATION
Pursuant to Regulation (EU) 2016/679, this page describes the modalities for processing personal data of users who consult the website of Dondi S.p.A. (hereafter the Company) accessible electronically at the following address www.dondinet.it.
This information does not concern any other sites, pages or online services accessible through hypertext links that may be published on the sites but referring to resources external to the company's domain.
Following consultation of the sites listed above, data relating to identified or identifiable natural persons may be processed.
The Data Controller is DONDI S.p.A., 94/102 viale Europa Ospedalicchio Bastia Umbra (PG) Madonna di Campagna, 123, email@example.com.
PURPOSE AND MODALITIES OF PROCESSING
The personal data (Data) collected may be processed for the following purposes:
a) to execute a specific user request or provide the requested service
b) to allow the Company to carry out surveys aimed at improving the quality of the products and services provided, by virtue of the legitimate interest of the Company ("Customer Satisfaction");
c) with the prior consent of the data subject, to send commercial and/or promotional communications on the Company's products and services, as well as to carry out market research ("Marketing");
d) to improve the experience of the user on the Company's websites.
The Data may be processed using paper-based, automated or electronic methods and, in particular, by ordinary mail or email, telephone, fax and any other IT channel
OTHER SUBJECTS WHO MAY PROCESS THE DATA
The Data may be processed by parties operating on behalf of the Company and by virtue of specific contractual obligations, in EU member states or in non-EU countries.
The Data may be disclosed to third parties to fulfil legal obligations, to comply with orders from public authorities or to exercise a right of the Company in court.
TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
In the context of the Company's contractual relations, the Data may be transferred outside the European Economic Area (EEA), also by being included in databases managed by third-party companies operating on behalf of the Company. The management of the databases and the processing of the Data are restricted to the purposes for which they were collected and are carried out in strict compliance with the applicable law on the protection of personal data.
Whenever the Data is transferred outside the EEA, the Company will take all appropriate contractual measures necessary to guarantee an adequate level of data protection.
RETENTION OF DATA
The Data processed to provide the Service and for Customer Satisfaction will be kept by the Company for the period considered strictly necessary to achieve these purposes.
However, the Company may continue to retain such Data for a longer period, in order to be able to handle any disputes related to the provision of the Service.
Data processed for marketing purposes will be retained by the Company from the time the data subject has given their consent until such consent is revoked. In the event that consent is revoked, the Data may no longer be processed for the aforementioned Marketing purposes but could still be stored in order to manage any disputes and/or complaints.
The Data processed to improve the user’s experience on the websites will be kept for the periods indicated in the Cookies Policy.
RIGHTS OF THE DATA SUBJECT
The data subject has the following rights:
1. the right to obtain from the Company confirmation as to whether or not personal data concerning him or her are being processed, and, in such case, obtain access;
2. the right to request rectification or erasure, that is the right to obtain rectification of incorrect Data and/or the completion of incomplete Data or the erasure of Data for legitimate reasons;
3. the right to restrict the processing, that is the right to request the suspension of processing if there are legitimate reasons;
4. the right to data portability, that is the right to receive the Data in a structured, commonly used and readable format, as well as the right to transmit the Data to another data controller;
5. the right of objection, that is the right to object to the processing of Data if there are legitimate reasons, including the processing of data for marketing and profiling purposes, if any;
6. the right to contact the competent data protection authority in case of unlawful Data processing.
The data subject may exercise the rights listed above by sending the form downloadable from the website to Dondi S.p.A., 94/102 viale Europa Ospedalicchio Bastia Umbra (PG) 123, 06083 Bastia Umbra (PG), or by sending an e-mail to firstname.lastname@example.org.