INFORMATION PURSUANT TO ART. 13 GDPR 2016/679
Carnival Toys srl, with registered office in Godo di Russi (RA), via Carlo Goldoni, 1 TAX CODE and VAT number 00130140395, as Data Controller of personal data,
The information that the personal data of customers, suppliers and users of the site are processed in the following ways and in compliance with the principles established by the GDPR (General Data Protection Regulation).
1. Purpose and legal basis of the processing
Personal data will be processed for:
1.1. finalize contracts with the Data Controller and manage the related relationships in the pre-contractual, contractual, tax and accounting phases; (the legal basis of the aforementioned processing is the fulfillment of both contractual obligations and legal obligations to which the Data Controller is subject).
1.2. for any direct marketing activities towards existing customers (sending newsletters, information activities, advertising communications); (the legal basis of the aforementioned processing is the legitimate interest).
2. Processing methods and data retention period
Data processing will be carried out by means of the operations indicated in art. 4 n. 2 of the GDPR in manual form, using IT and telematic tools. The data will be recorded, processed and stored in our paper and electronic archives.
The data will be processed by persons authorized for processing.
For the activities referred to in art. 1.1., Personal data will be kept until its processing is no longer necessary for the purpose for which it was collected and, in any case, no later than 10 years from the termination of the contractual relationship.
For the activities referred to in art. 1.2., Personal data will be kept until its processing is no longer necessary for the purpose for which it was collected and, in any case, no later than 2 years from the termination of the contractual relationship.
3. Recipients of the data processing
Data processing will be carried out by means of the operations indicated in art. 4 n. 2 of the GDPR in manual form, using IT and telematic tools. The data will be recorded, processed and stored in our paper and electronic archives.
The data may be communicated for the obligations imposed by the law or for a correct execution of the contractual relationship, For example, to social security, welfare and insurance institutions, trade associations, tax and labour offices, professional legal, commercial, tax assistance firms, companies auditing, banks and credit institutions.
Third parties who may process data for certain activities have been adequately selected and are appointed as Data Processors for this purpose.
The data will not be disclosed to undetermined subjects.
Personal data is not transferred outside the European Union. In any case, the Data Controller ensures from now on that any future transfer of personal data outside the EU will take place in accordance with the provisions of Articles 44 and following of the GDPR 2016/679.
4. Nature of the provision
The communication of data is mandatory for the purposes referred to in art. 1.1 .; therefore any refusal to provide such data or incorrect communication will make it impossible for the writer to manage the pre-contractual and contractual relationships.
The communication of data for the purposes referred to in art. 1.2. instead it is optional; one can therefore decide not to provide any data or to exercise, even subsequently, the right of opposition pursuant to art. 21 of the GDPR.
In this case, your personal data will no longer be subject to direct marketing (and therefore you will no longer receive newsletters, advertising communications, etc.) but you will still be entitled to the benefits referred to in art. 1.1 ..
5. Rights of the interested party
In your capacity as an interested party, you can exercise the rights referred to in art. 15 GDPR and precisely the rights to:
I. obtain confirmation of the existence or not of personal data concerning you and, in this case, obtain access to the data;
II. obtain access to the following information: a) purpose of the processing; b) categories of personal data in question; c) recipients or categories of recipients to whom the personal data has been or will be communicated; d) when possible, the retention period of the personal data envisaged or, if not possible, the criteria used to determine this period; e) the existence of the right of the interested party to ask the data controller to rectify or delete personal data or limit the processing of personal data concerning him or to oppose its treatment; f) the right to lodge a complaint with a supervisory authority; g) if the data is not collected from the data subject, all available information on their origin; h) the existence of an automated decision-making process, including profiling pursuant to art. 22, paragraphs 1 and 4, and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such processing for the data subject;
III. be informed of the existence of adequate guarantees pursuant to art. 46 relating to the transfer of personal data to a third country or to an international organization;
IV. where applicable, the interested party may exercise the rights referred to in Articles from 16 to 21 of the GDPR (right of rectification, right to cancellation, "right to be forgotten", right to limitation of treatment, right to data portability, right to object);
V. the interested party can also: a) revoke the consent at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation; b) receive timely communication of any violation of personal data within the limits of what is indicated in art. 34; c) lodge a complaint to the appropriate authority.
6. How to exercise rights.
The interested party may exercise their rights by contacting the Data Controller, Carnival Toys s.r.l., by sending a letter to the company's headquarters in Godo di Russi (RA), via Carlo Goldoni, 1, or by sending an e-mail to info@qa-carnivaltoys.hnrg.it
7. Cookies
By visiting the qa-carnivaltoys.hnrg.it site with the browser set to accept cookies, or using mobile devices, you indicate that you want to authorize the use of your user data, the CARNIVALTOYS services and consent to the use of cookies and other technologies necessary to view them as described in our Cookies Policy. Furthermore, you consent to the saving of your data in cookies even after closing the browser. You can revoke your future consent at any time by changing your browser settings and by blocking the cookies.