NOTICE FOR THE PROCESSING OF PERSONAL DATA PURSUANT TO ART. 13 OF EU REGULATION 679/2016
Planetek Italia Srl – Via Massaua, 12, 70132 Bari, Italy – VAT no. 04555490723, as data controller (hereinafter “Controller”), informs you, pursuant to art. 13 of EU Regulation 679/2016 (hereinafter “GDPR”), that your data will be processed in the manner and for the purposes described below:
1. Subject of the processing
The Controller processes identifying personal data, such as IP address, name, email, phone number, postal address, geographic location (hereinafter “Data”) provided by you when browsing our website, purchasing or subscribing to services or, in general, in connection with a pre-contractual or contractual relationship in place with the Controller.
2. Cookies and site tracking
In compliance with EU Directive 2009/136/EC of 25/11/2009, the Controller informs you that this website uses cookies or similar tools to allow us to improve our service and offer users some useful features. This may include cookies from commercial partners that are stored by the computer or device when visiting our website (https://interactive.planetek.it/). Please visit our commercial partners’ websites for information on their cookie and privacy policies.
Cookies are small text files that are transferred to the computer or device via the web browser to allow us to recognize the user’s browser and help us monitor visitors to our site, thus allowing us to better understand the products and services that will be best suited to users. A cookie contains contact information and useful information to allow the identification of the computer or device when visiting our website, with the aim of helping the user obtain a better user experience. Most web browsers automatically accept cookies, but, if desired, it is possible to change these browser settings by accepting, refusing and deleting cookies. If you choose to change these settings, certain functions and features may not operate as intended. The cookies used do not detect information stored on the computer or device.
For further information on cookies and how to prevent the browser from accepting them, visit the following website: http://www.allaboutcookies.org.
3. Purpose of the processing
Your personal Data is processed, without your prior consent (art. 6 letters b), c) GDPR), solely for the purposes of managing and executing pre-contractual and contractual relationships; fulfilling obligations connected with administrative and accounting management; complying with obligations set out by laws, regulations or EU legislation or imposed by Authorities; protecting the Controller’s rights in judicial proceedings and managing any disputes; and preventing and prosecuting unlawful acts.
3.1. Further purposes of the processing
The data collected, with your prior free and explicit consent (art. 6 letter a) GDPR), may also be used for the further purposes indicated below, according to the terms and conditions specified therein:
- Marketing: to send you newsletters, promotional material and commercial communications, through both automated contact methods (e.g. e-mail, SMS, MMS, App) and traditional methods (paper mail and non-pre-recorded calls), including on behalf of our commercial partners.
- Profiling: for profiling purposes, that is, to analyze or predict, through algorithms and other automated systems, your potential habits, personal preferences, interests, behavior, and location, in order to offer you products and services increasingly suited to your real interests and needs and to develop personalized commercial offers and communications.
- Communication of data to Third Parties (e.g. commercial partner companies) that produce or market goods or services related to the services requested, parties involved in the promotion of goods or services, or parties involved in processing such data in anonymous form for statistical purposes, in accordance with applicable laws and regulations.
It is understood that, should you not wish to give your consent to the processing of your data for the purposes referred to above, this will not prevent you from accessing the website and using the available features.
4. Processing methods and Retention
Processing will be carried out by means of the operations indicated in art. 4 GDPR and may take place both through IT systems (cloud, internet, intranet, computers and mobile devices) and automated processes, as well as in paper form (archives).
Your data will be stored in the Controller’s databases only for the time strictly necessary to achieve the purposes for which they were collected and processed, in accordance with the law and as specified above, except in cases where applicable regulations do not require your data to be retained for longer periods. In particular, for the purposes referred to in points 3.1.a) and 3.1.b), the data will be retained for twenty-four (24) months and subsequently deleted or made anonymous.
Should you decide to close your account, the Controller will retain the personal data provided only for administrative purposes for 10 years from the termination of the contractual relationship, save for any further needs for which their further retention is permitted and/or required by specific legal provisions.
5. Nature of the provision of Data and consequences of refusal
The provision of identifying personal data is necessary for the execution of the contractual relationship and the obligations arising from legal, regulatory or EU requirements, and optional for the provision of certain online services. Any refusal will result in the impossibility of providing, in whole or in part, the requested services or performances.
6. Access to Data
Your Data will be processed for the above purposes by employees and/or collaborators of the Controller in their capacity as data processing personnel and/or internal data processing contacts and/or system administrators; by third parties (for example, suppliers, professionals, banks, affiliates) where they carry out outsourced activities on behalf of the Controller, in their capacity as external data processors.
7. Communication of Data
Without your express consent (pursuant to art. 6 letters b), c) GDPR), the Controller may communicate your Data to public bodies in order to comply with obligations set out by laws, regulations or EU legislation or imposed by Authorities, which will process it in their capacity as independent data controllers.
Data may also be communicated to Third Parties (for example, partners and client companies), which will process the data to carry out activities instrumental to the requested services and to the purposes referred to above.
Generally, the selected service providers operate through data centers located within the European Union.
Should your data be transferred to Non-EU Countries, including for purposes related to the technical management of the data collected, this will occur exclusively in full compliance with European GDPR regulations, towards companies adhering to the Privacy Shield (USA) or Third Countries for which adequate safeguards for the protection of the transfer exist or for which specific contractual clauses for the protection of personal data have been signed.
8. Rights of the data subject
At any time you may exercise your rights with respect to the data controller, pursuant to articles 15-22 of EU Regulation 2016/679, and in particular the rights of access, rectification, integration and, in permitted cases, portability of the data provided, as well as obtaining erasure, restriction or objection to the processing of Data for legitimate reasons, and objecting to automated decision-making processes, including profiling. As well as the right to lodge a complaint with the Supervisory Authority, by contacting the Controller or the DPO, where appointed, in the manner indicated below:
- by sending a registered letter with return receipt to the Controller’s address indicated above;
- by sending an email to info@planetek.it;
In order to ensure the protection of the data subject’s personal information, we may need to request further specific information, confirming the identity of the requesting data subject, thereby ensuring the right of access to information (or to exercise any other right) only to persons entitled to receive such communications. This is another security measure suitable for the protection of personal data.
The request for access to your personal information (or to exercise any of the rights indicated above) is free of charge. However, if the request is clearly unfounded or excessive, we may charge a reasonable fee taking into account the administrative costs incurred in providing the information, or refuse to comply with the request in such circumstances.
9. Data Controller and Data Protection Officer (DPO)
The Data Controller is: Planetek Italia Srl – Via Massaua, 12, 70132 Bari, Italy