holder of the data processing:
POSTHAUS SCHMUCK GIOIELLI SOC.COOP
Konrad Laimer
via Leonardo da Vinci 17 – 39012 Merano – BZ – Italy
reference website: www.posthaus-merano.it
owner’s email address: info@posthaus-merano.it
VAT number IT 03094630211
hereinafter referred to as “holder”
Last updated: 25 May 2018
Privacy policy in accordance with Articles 13-14 of the European Privacy Regulation (GDPR)
The personal data you enter, are processed by the title of the Data indicated at the top of the page, for purposes related to the provision of services requested by you (for example: request information, get quotes, register on the site to receive benefits and offers, make purchases and receive them at a domicile indicated by you). In addition, the data you provide, may be processed, only with your explicit consent, in order to send you communications of a commercial nature. In the first case, the legal basis for the processing is the execution of an agreement; in the second case, it is the consent. The processing will be carried out electronically and will be made available to third parties (External Data Processors) within the European Union, regularly contracted by the Owner and offering adequate security guarantees, necessary for the provision of essential services to meet your needs. These External Managers, the list of which is available upon request, may belong to categories of persons who support the Owner in providing the services offered through this site (such as, for example: software developers and website operators, shippers). If, for technical and/or operational reasons, it is necessary to use entities located outside the European Union, or if it is necessary to transfer some of the data collected to technical systems and services managed in the cloud and located outside the European Union, the processing will be regulated in accordance with the provisions of Chapter V of the Regulation and authorized on the basis of specific decisions of the European Union. All necessary precautions will therefore be taken in order to guarantee the most complete protection of personal data by basing this transfer: a) on decisions of adequacy of the third country recipients expressed by the European Commission; b) on adequate guarantees expressed by the third party recipient pursuant to art. 46 of the Regulation; c) on the adoption of binding business rules, so-called corporate binding rules. In addition, they will be processed anonymously for statistical analysis and direct marketing purposes, as better specified by the cookie policy. These are therefore legitimate and necessary treatments to ensure you a service that meets your expectations. The data will be kept for the duration of the services you requested or for longer periods only if required by current regulations. Your personal data will not be disclosed, but may be disclosed where necessary for the provision of the service to third parties (such as third party technical service providers, postal carriers, hosting providers, IT companies) appointed, if necessary, Data Processors by the owner for tasks of a technical or organizational nature instrumental to the provision of services. Access to data is also allowed to categories of persons appointed by the owner involved in the organization for data processing (administrative staff, sales, marketing, customer service, system administrators). The updated list of persons in charge can always be requested from the Data Controller. The right of communication to third parties remains unaffected if you have given your specific and optional consent. You may exercise your rights under Articles 15-22 of the GDPR at any time by contacting the data controller. The data controller guarantees that you can exercise your rights under Art. 12 of the GDPR at any time. In particular, you have the right:- to know whether the Holder holds and/or processes personal data relating to you and to have full access to it, including obtaining a copy (Art. 15 Right to Access),
- the rectification of inaccurate personal data or the integration of incomplete personal data (Art. 16 Right of rectification);
- the deletion of personal data held by the Data Controller if one of the reasons provided for in the GDPR exists (Right to Deletion, 17);
- to ask the Data Controller to limit the processing to certain personal data only, if there is one of the reasons provided for in the Regulation (Art. 18 Right to limit the processing);
- to request and receive all your personal data processed by the owner, in structured format, commonly used and readable by automatic device or request transmission to another owner without hindrance (Art. 20, Right to Portability);
- to oppose, in whole or in part, the processing of data for the purpose of sending advertising material and market research (so-called consent) (art. 21 Right of opposition)
- to oppose, in whole or in part, the processing of data in automatic or semi-automatic mode for profiling purposes (so-called Consent)