Information request: Privacy Policy

Information note pursuant to article 13 of EU 2016/679 Regulation 

Dear Customer,
to subscribe to the newsletter you need to provide some data. In the absence of this data, it is not possible to process your request. The required data are highlighted below.

Article 8 of the 2016/679 European Regulation, in cases where the services offered require explicit consent, provides that the processing of data of users under the age of 16 can only take place if provided or authorized by the holder of parental responsibility. It follows that by filling out the form you certify that you are at least 16 years old.

In application of the European Regulation number 679 of 2016 of Legislative Decree number 196 of 2003 concerning the protection of personal data, we inform you that the Data Controller is Pirovano Stelvio SpA, via delle prese 8, 23100 Sondrio – VAT Number 00526710140 – mail info@pirovano.it pec pirovano@pec.popso.it (hereinafter referred to as “the Owner”).

Personal data are processed in full compliance with EU Regulation 679/2016 and Legislative Decree 196/2003.

The processing of your personal data is carried out by means of the operations indicated in article  4 number 2 GDPR and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison use, interconnection, blocking, communication, cancellation and destruction of data including the combination of two or more of the aforementioned activities. Your personal data are subjected to both paper and electronic and/or automated processing and will not be disclosed.

The data will be processed by personnel appointed by “the Owner” with procedures, technical and IT tools suitable for protecting the confidentiality and security of data. In particular, your data may be made accessible to:

• employees and collaborators of “the Owner” in their capacity as agents and/or internal managers of the processing and/or system administrators;
• to third party companies or other entities that carry out outsourcing activities on behalf of “the Owner” in their capacity as external processors. These are cloud service providers, technical and IT consultants and other similar subjects that collaborate with our organization and provide a service that is strictly and necessarily linked to the activity of “the Owner”.

You can request a complete and updated list of the persons nominated responsible for the treatment by contacting “the Owner”.

The processing of your personal data is necessary for the execution of a contract of which the interested party is a party or for the execution of pre-contractual measures adopted at the request of the same (Article 6, paragraph 1, letter b) of the GDPR). Your data will be processed in order to respond to your requests entered in the “Information Request” form.

Personal data will be kept for the time strictly necessary to provide the requested services and will in any case be deleted as a result of the request of the interested party, without prejudice to further conservation obligations provided by law.

The data may be transferred within the European Union, where the Data Controller or its suppliers and collaborators are based or have their own servers. Data will not be transferred outside the European Union. Outside the contexts described above, the data will not be disclosed or given to third parties, or even made public.

Rights of the interested parties

Pursuant to article 7 of Legislative Decree 196/2003 and articles from 15 to 22 of EU Regulation number 2016/679, interested parties have the right to:

a) request confirmation of the existence or otherwise of personal data;
b) obtain information on the purposes of the processing, the categories of personal data, recipients or categories of recipients to whom the personal data have been or will be communicated and, where possible, the retention period;
c) obtain the correction and deletion of data;
d) obtain the treatment limitation;
e) obtain data portability, ie receive them from a data controller, in a structured format, commonly used and readable by automatic device, and transmit them to another data controller without hindrance;
f) oppose the processing at any time and also in the case of treatment for direct marketing purposes;
g) to oppose an automated decision-making process concerning individuals, including profiling.
h) ask the data controller to access personal data and to rectify or cancel them or limit their processing or to oppose their processing, in addition to the right to data portability;
i) withdraw the consent at any time without prejudice to the lawfulness of the treatment based on the consent given prior to the revocation;
j) to propose a complaint to a supervisory authority.

Duties of the Owner

• Ensure the rights of the interested parties.
• Guaranteed the provisions of Legislative Decree 30 June 2003, number 196 of the article 13, (Code regarding the protection of personal data).
• Ensure the provisions of EU Regulation 2016/679 on data protection (GDPR, General Data Protection Regulation UE 2016/679).
• Promptly inform the interested party in case of violation of their personal data.
• Ensure the correct management and processing of data in line with what is defined by current regulations.
• Ensure the security and confidentiality of data in line with what is defined by current regulations.

To exercise the rights provided by the law, contact “the Owner”:
Pirovano Stelvio S.p.A. – via Delle Prese 8 – 23100 Sondrio, VAT number 00526710140, tel +39 0342 210040, e-mail info@pirovano.it – pec pirovano@pec.popso.it

The privacy policy is subject to periodic changes, made necessary by new regulatory provisions or by the introduction of new methods and purposes of treatment by Pirovano Stelvio Spa.
In consideration of this, we ask you to periodically visit our site and to read this information.
If you still have doubts, please contact “the Owner”.

Information updated at 27 May 2022