Information on the Processing of Customer Personal Data

In accordance with the principles of fairness, lawfulness, transparency, confidentiality protection, and the rights of the data subject concerning the processing of their data, pursuant to Article 13 of the EU Regulation 2016/679, the following information is provided.

DATA CONTROLLER

The data controller is LEVICO ACQUE S.B. S.R.L., represented by the legal representative pro tempore, located at Piazzale Stazione, 6 – 38056 Levico Terme (TN), Email: info@levicoacque.it, PEC: levicoacque@pec.tn.it, phone +39 0461/702311.

PURPOSE AND LEGAL BASIS OF PROCESSING

The personal data provided may be processed for the following purposes:

– implementation of the requested service;

management of the contractual relationship and related obligations;

administrative-accounting purposes;

sending electronic communications (newsletter) with informational and/or commercial content;

fulfillment of obligations provided by law, regulations, and/or an order from the Authority;

exercise of the data controller’s rights (e.g., right of defense in court).

The legal basis of the processing is based on the execution of the contract and related obligations, Article 130, paragraph 4 of Legislative Decree no. 196/2003, and the legitimate interest of the data controller.

METHOD OF DATA PROCESSING AND DECISION-MAKING OR PROFILING PROCESS

The processing will also be carried out with the help of electronic and/or automated tools and, in compliance with current legislation, all appropriate security measures will be adopted to ensure the confidentiality, integrity, and accuracy of the data.

The data controller does not use any decision-making processes aimed at profiling concerning personal data.

RECIPIENTS AND CATEGORIES OF RECIPIENTS OF PERSONAL DATA

The data will be processed by employees and other subjects authorized to process the data that the data controller uses to carry out its activities and by third parties who perform outsourcing activities on behalf of the data controller as external data processors.

PLACE OF DATA PROCESSING

Personal data will generally be processed within the European Union. However, some applications of the services used by the data controller may involve the transfer of personal data to the United States. This processing is legitimized pursuant to Article 45 of the EU Regulation 2016/679 by an adequacy decision adopted by the European Commission. If necessary, the data controller will have the right to move its IT archives to other non-EU countries, ensuring from the outset that the transfer of data outside the EU will only be carried out to countries capable of offering a level of protection adequate to the standards set by current legislation, in compliance with Articles 45, 46, and 49 of the EU Regulation 2016/679.

NATURE OF PROVISION

The provision of data is optional; however, failure to provide the data necessary for the execution of the contract or the requested service will make it impossible to implement it.

DATA RETENTION PERIOD

The data will be processed for the period deemed necessary to fulfill the purposes mentioned above and based on current legislation, at least for 10 years from the termination of the relationship and/or until consent is revoked (in reference to the sending of newsletters).

RIGHTS OF THE DATA SUBJECT REGARDING DATA PROCESSING

Pursuant to Articles 15, 16, 17, 18, 19, 20, 21, and 77 of the EU Regulation, the data subject is informed that:

they have the right to request access to personal data, rectification, deletion of the same, or limitation of processing concerning them or to object to their processing, and the transfer of their data to another data controller where applicable;

any rectifications or deletions or limitations of processing carried out upon request of the data subject – unless this proves impossible or involves a disproportionate effort – will be communicated by the undersigned to each of the processors to whom the personal data have been transmitted;

they have the right to lodge a complaint with the Data Protection Authority, following the procedures and instructions published on the official website of the Authority at www.garanteprivacy.it.

The exercise of rights is not subject to any form constraints and is free of charge.

Information updated on 04/06/2024.