PERSONAL DATA
Pursuant to the aforementioned regulation, personal data means: any information relating to an identified or identifiable natural person (‘data subject’); an identifiable person is one who can be identified, directly or indirectly, by reference in particular to an identifier such as a name, an identification number, location data, an online identifier or to one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity;

DATA PROCESSING
We therefore inform you that the personal data that we already possess, or that you would like to communicate to us, are and will be processed by us in accordance with the principles of lawfulness, correctness and transparency, collected for specified, explicit and legitimate purposes, and subsequently processed in a way that is not incompatible with those purposes, adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, accurate and, if necessary, kept up to date, stored in a form which permits identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed; personal data may be kept for longer periods provided they are processed solely for archiving purposes in the public interest, processed in a way that ensures appropriate security of personal data, including protection, by appropriate technical and organisational measures, against unauthorised or unlawful processing and accidental loss, destruction or damage.

The data controller of the undersigned company informs you that the data will be processed for the following reasons

• the data subject has consented to the processing of his/her personal data for one or more specific purposes, including for commercial proposals;
• the processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the data subject’s request;
• processing is necessary for compliance with a legal obligation to which the data controller is subject;

Processing’ shall mean any operation or set of operations which is performed upon personal data or sets of personal data, whether or not by automatic means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction;

DATA SUBJECT RIGHTS
The data subject has the following rights under EU Regulation 2016/679:
Art. 12 Information, communication and transparent modalities for the exercise of the data subject’s rights
Art. 13 Information to be provided if personal data is collected from the data subject
Art. 14 Information to be provided where personal data have not been obtained from the data subject
Art. 15 Right of access of the data subject
Article 16 Right of rectification
Article 17 Right to erasure (‘right to be forgotten’)
Article 18 Right to restriction of processing
Art. 19 Duty of notification in case of rectification or erasure of personal data or restriction of
processing
Article 20 Right to data portability
Article 21 Right of objection and automated decision-making with regard to natural persons