INFORMATION ON THE PROCESSING OF PERSONAL DATA IN ACCORDANCE WITH ARTICLES 13-14 OF THE GDPR (GENERAL DATA PROTECTION REGULATION) 2016/679

The undersigned Company informs you that for the management of commercial relationships, it is the Controller of your so-called “personal” data pursuant to and for the purposes of the privacy protection code (Legislative Decree no. 196/2003) and subsequent amendments and EU Regulation 2016/679 (“GDPR”).

and therefore informs you that:

1. CONTROLLER CONTACTS

The Data Controller is SC FIRENZE S.R.L. represented by the legal representative pro tempore, with registered offices in  VIA DI S. NICCOLO’ 72R FIRENZE ITALIA   who can be contacted by mail at these addresses or: via e-mail at  privacy@silenocheloni.it, or via certified e-mail at  scfirenze@legalmail.it  or by phone at  +39 055 094 4476.

2. PURPOSE OF DATA PROCESSING

Your personal data is processed:

without your express consent (article 24, letters a), b), and c) of the Privacy Code and article 6, letters b) and e) of the GDPR) for the following service purposes:

– conclude any requests or contracts for the services / products of the Controller;

– fulfilment of pre-contractual, contractual, and tax obligations deriving from existing relationships with you;

– fulfilment of the obligations established by Italian law, by a regulation, by European Community legislation, or by order of an Authority (for example relating to anti-money laundering);

– exercise the rights of the Data Controller, for example the right to legal defence;

3. PROCESSING METHODS

Your personal data is processed using the methods indicated in Article 4 of the Privacy Code and Article 4 (2) of the GDPR, and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation, erasure and destruction. Your personal data is processed both on paper and electronically.

4. COMMUNICATION

Your data may be made accessible for the purposes referred to in art. 2:

• to previously authorised employees, collaborators and agents of the Controller


• system administrators;


• to third-party companies or other subjects (for example, credit institutes, professional firms, consultants, insurance companies, etc.) who carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processing managers for the sole purposes indicated in point 2.


• companies operating in the transport sector;

Data communication Without the need for express consent (ex Article 24 letter a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2 to Supervisory Bodies (such as IVASS), Judicial Authorities, to insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of said purposes. These subjects will process the data in their roles as independent data controllers.

Your personal information will not be disclosed.

5. NATURE OF DATA PROVISION AND CONSEQUENCES OF REFUSAL TO RESPOND

The provision of data for the purposes referred to in Article 2 is mandatory. In their absence, we will not be able to guarantee the requested Services

The provision of data for ancillary purposes, while browsing the site, will have to be accepted in an optional way.

You can therefore decide to not provide any data or to refuse the processing of data that had been provided at an earlier date. In this case, you will not be able to receive newsletters, commercial communications, and advertising material regarding the services offered by the Controller.

6. RETENTION TIME

The Data Controller will process your personal data for the time necessary to fulfil the aforementioned purposes and for a period not exceeding 10 years from the termination of the relationship for Service Purposes and no exceeding 2 years from the date on which the data was collected for Marketing Purposes.

7. PROCESSING SITE

The data are currently processed and stored at the registered office,  VIA DI S. NICCOLO’ 72R FIRENZE ITALIA. They are also processed, on behalf of the Undersigned, by professionals and/or companies appointed to carry out accounting-administrative and work consultancy activities, as indicated above.

8. RIGHTS OF THE DATA SUBJECT

As a data subject, you have the possibility to exercise all the rights recognised and guaranteed by art. 7 and subsequent of the Privacy Code and the new provisions of the European General Regulation 679/16 (so-called GDPR) with the company and, in particular, you will have the right to obtain at any time:

a) confirmation of the existence or otherwise of the processing of personal data concerning you and, if so, to gain access to personal data as well as information on the categories of personal data processed, the recipients or categories of recipients to whom personal data are or will be communicated, on the expected retention period, on the existence of the right to request rectification, cancellation or limitation of processing, on the right to lodge a claim with a supervisory authority, on the existence of an automated decision-making process, including profiling;

b) the immediate correction of inaccurate personal data and the integration of incomplete personal data;

c) the immediate cancellation of personal data concerning you when consent is revoked, they are no longer necessary for the purposes for which they were collected or otherwise processed or the legal basis for processing, has ceased, if they have been unlawfully processed or this obligation is imposed by law or judicial authorities;

d) the limitation of the processing of personal data concerning you if you contest the accuracy of the same or the processing is illegal or even if the Company no longer needs it for processing, personal data are still necessary for the verification, exercise or defence of a right in court;

e) the personal data concerning you provided to the Company in a structured format, commonly used and readable by automatic device and to transmit this data to another data controller without impediments by the Company, if the processing is done by automated means. If technically feasible, you also have the right to obtain direct transmission (so-called “Data portability”) of your personal data from the Company to another data controller;

f) the withdrawal of consent provided for the processing of sensitive data.

In addition to the rights mentioned above, it is always up to the Data Subject to submit a claim for any matter concerning the processing of their personal data before the Personal Data Protection Authority.

The above rights may be exercised by sending a written request or by e-mail to the Company using the contacts provided in paragraph 1 of this statement.

The company will inform you if it intends to further process the data you have provided for a purpose other than that for which it was collected.