Information pursuant to art. 13 of EU Regulation 2016/679 for the protection of personal data (GDPR)
According to the art. 13 of EU Regulation 2016/679 (henceforth GDPR), Istituto Poligrafico e Zecca dello Stato S.p.A. (also Poligrafico) - with registered office in Via Salaria 691, 00138 Rome - in the capacity of the owner of the treatment of personal data, in the person of its legal representative pro-tempore, informs that your personal data will be treateded by Poligrafico himself through manual or electronic or whatever automated, computerized or telematic treatment, with logic strictly related to the purposes listed below and, in any case, so as to guarantee the security and confidentiality of the data.
1. Sources of personal data
The treated personal data are collected directly from the person concerned and are treated in compliance with the law and the confidentiality obligations that inspire Poligrafico's activity.
2. Purpose of the treatment
Your personal data will be treated:
A) without your express consent for the following purposes:
B) Only with your specific consent for the following marketing purposes:
We inform you that if you are already a customer, we will be able to send you commercial communications relating to services and products of the Poligrafico similar to those that you have already received, unless you disagree.
3. Legal basis and lawfulness of the treatment
For the purposes indicated in letter A), n. 1 of paragraph 2 of this Statement the legal basis of the treatment, which certifies its lawfulness, is that provided by the art. 6, par. 1, letter b) of the GDPR, or "the treatment itself is necessary for the execution of a contract of which the interested party is a party or the execution of pre-contractual measures adopted at the request of the same".
The treatment carried out for the purposes mentioned in letter A), nos. 2 and 3 of the same paragraph is based on legal obligations to which the Poligrafico is subject (art. 6, par. 1, letter c) of the GDPR).Furthermore, for the purposes indicated in number 4 of letter A), paragraph 2, the treatment is necessary for the pursuit of the legitimate interest of Poligrafico to protect its rights arising from the contract (art. 6, par. 1, letter f) of the GDPR ).
The treatment of your personal data for the marketing purposes referred to in letter B) of the previous paragraph may take place only on the basis of a specific and distinct consent (art. 6, par. 1, letter a) and art. 7 of the GDPR) expressed in the registration on the Portal www.shop.ipzs.it
4. Nature of the transfer and consequences of the refusal
The provision of the aforementioned data is mandatory for the fulfillment of legal and / or contractual obligations.Therefore, any refusal to provide the mandatory data will result in the objective impossibility of pursuing the treatment purposes referred to in this Notice, letter A), paragraph n. 2.
The provision of data subject to your specific consent is, however, optional for receiving information of a commercial nature, without this impeding the performance of the contractual relationship.
5. Categories of recipients of personal data
The personal data provided and those relating to the execution of the contractual relationship may be disclosed to third parties, belonging to the following categories:
a) external companies of their choice, of which Poligrafico uses, for technical and organizational reasons, in the establishment and management of relations with customers. In particular, these are subjects that perform printing, enveloping and transport services;
b) law firms;
c) professional firms / companies / consultants providing accounting, tax, and tax services, as well as being in charge of performing audits;
d) Poligrafico IT equipment maintenance company;
e) professionals and consultants for the purpose of protecting Poligrafico's rights arising from the contract;
f) companies that perform auditing and financial statement certification;
g) supervisory bodies.
All subjects belonging to the categories to which the data may be communicated will use them as "Data Processors" specifically appointed and instructed by Poligrafico as Data Controller or as autonomous "Data Controllers" authorized to access them pursuant to law provisions, regulations and regulations.
The data will also be treated by appointed internal Managers - whose constantly updated list is available on the website www.privacy.ipzs.it - as well as by persons specifically authorized for treatment by the Data Controller, pursuant to the GDPR.
Your personal data are not subject to disclosure.
6. Extra EU transfers
Your personal data will not be transferred to third countries outside the European Union.
7. Period of storage of personal data
Your personal data is stored at Poligrafico's registered office for the time necessary to fulfill the purposes referred to in paragraph n. 2, letter A) as well as that prescribed by civil, fiscal and regulatory norms and in any case for no more than 10 years from the termination of the contractual relationship.
As regards the marketing purpose, your data will be treateded for a period of 24 months from the collection of your consent, without prejudice to your right of revocation.
Subsequently, the data will be stored up to the statutory limitation period with reference to the individual rights that can be exercised by the parties.
Once these terms have passed, your data will be anonymized or deleted, unless it is necessary to preserve it for other and different purposes provided for by express provision of law.
Furthermore, we inform you that Poligrafico is subject to the regulations on the subject of registration and filing pursuant to the D.P.R. 445/2000 s.m.i. as well as the provisions regarding the consultation of archival documents for historical purposes and the protection of confidentiality governed by Legislative Decree 42/2004 s.m.i.
8. Automated decision making
For the pursuit of the treatment purposes described above, no decision is made based solely on the automated treatment that produces legal effects that concern you or that significantly affects your person.
9. Rights of the interested party
Pursuant to and for the purposes of the GDPR, you are entitled to the following rights as an Interested Party that you can exercise against Poligrafico:
a) the right to obtain from the Data Controller the confirmation that the treatment of personal data concerning you is underway and, in this case, to obtain access to the personal data and information provided by the art. 15 of the GDPR and in particular those relating to the purposes of the treatment, to the categories of personal data in question, to the recipients or categories of recipients to whom the personal data have been or will be communicated, to the storage period, etc .;
b) the right to obtain, where inaccurate, the correction of personal data concerning you, as well as the integration of the same where deemed incomplete always in relation to the purposes of the treatment (Article 16);
c) right to erase data ("right to oblivion"), where one of the cases referred to in art. 17;
d) right to limit the treatment, in the cases provided for by art. 18;
e) data portability right pursuant to art. 20;
f) right to object to the treatment pursuant to art. 21;
g) the right to revoke the consent at any time without jeopardizing the lawfulness of the treatment based on the consent given before the revocation, only for the purposes whose legal basis is the consent (art. 7).
These rights may be exercised by means of a request sent by registered letter a.r. to the Data Protection Officer (DPO) or Data Protection Officer (DPO) at the following address: Via Salaria, 691 - 00138 Rome, or by e-mail to the following e-mail addresses: email@example.com or rpd@pec. ipzs.it using the appropriate form that will be made available on the website of the Guarantor Authority for the protection of personal data www.garanteprivacy.it
Lastly, please note that you have the right to lodge a complaint with the Guarantor for the Protection of Personal Data or another Control Authority pursuant to art. 13, par. 2, letter d) of the GDPR.10. Changes to this Statement
This information may be subject to change. Therefore, it is advisable to regularly check the www.privacy.ipzs.it section.
Last updated: 22 February 2019
I have read