What is this document? Pursuant to art. 13 European Reg. n. 679/2016 (“General Data Protection Regulation” or “GDPR”) and in compliance with the principles contained therein, Weart S.r.l. intends to inform each user (the “User”) about the processing of personal data happening on its website www.weart.it
Controller and Contact details
Weart S.r.l. (hereinafter “Controller”, pursuant to art. 4(7) GDPR)
with registered offices in Via San Martino, 12, 20122 Milano
Purpose of processing, Legal Basis, Personal Data and Retention Period
The Controller processes Personal Data for the following purposes, as specified here in below. The table also shows the legal basis which justifies the processing and the period of data retention:
In case the User prefers not to communicate mandatory and/or necessary data for the fulfilment of certain purposes, Weart S.r.l. reserves the right to not provide the service through its Website.
Users can ask for explanation of the legal basis of each treatment at any time
The processing of Personal Data will take place through automated and/or manual tools in order to ensure proper security measures to prevent access, disclosure, loss, incorrect, illegal or unauthorized use of data.
All of the relations with the subjects listed above are – and will be – formalized with a contract pursuant to Art. 28 GDPR (Data Protection Agreement or “DPA”).
Personal data will be processed by internal staff specifically authorized under Article 29 of the GDPR. The names of all authorized personnel are available under request to the Data Controller, at firstname.lastname@example.org.
Data Processing location
Personal data are processed at the headquarters of the Controller, as well as in the servers that host the website www.weart.it. Personal data is stored on servers located in the EU. The Data Controller ensures that when using cloud providers established outside the EEA, the processing of personal data by these recipients is carried out in accordance with applicable law. Transfers shall be carried out by means of appropriate safeguards, such as adequacy decisions, standard contractual clauses approved by the European Commission or other safeguards provided for in the GDPR
Data subject’s rights
The User may exercise all the rights provided for by Articles 15-21 of EU Reg. no. 679/2016, at any time and without unjustified limitations, by contacting the Data Controller at email@example.com. Requests shall be filed free of charge and processed by the Controller within 30 days.
Specifically, the User can:
- Obtain from the controller confirmation as to whether or not personal data are being processed (Art.15);
- Obtain from the controller the rectification of inaccurate personal data (Art. 16);
- Obtain from the controller the erasure of personal data (Art. 17);
- Obtain from the controller restriction of processing (Art. 18);
- Have the right to receive the personal data in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller (Art. 20);
- Have the right to object (Art. 21);
In any case, Users are always entitled to lodge a complaint with the competent supervisory authority (Garante per la Protezione dei Dati Personali), under Art. 77 of the Regulation, if they believe that the Data Controller’s processing of their Personal Data is in violation of the applicable law.