Privacy Policy according to art. 13 of European regulation 2016/679

In accordance with Art. 13 of the European Regulation no. 2016/679 of the 27th April 2016, “General Data Protection Regulation” (hereinafter, “GDPR”) and every subsequent applicable legislation, Provvisionato & Co. S.R.L., whose operating office is based in Bologna, Piazza di Porta Mascarella no. 7, VAT registration number 04345640371 and Company Register registration no. BO – 389489, (hereinafter, “Provvisionato”), wishes to inform you about the processing of your personal data within your browsing activity on this website, in compliance with data protection law.

1. DATA

1.1. Personal Data, Purposes and Legal Basis for Processing

Provvisionato processes your personal data in order to reply to requests, comments, queries you might address with the form “Contact us” of this website.

In this case, you do not need to provide specific consent for the processing of the above mentioned data, since the legal basis for such processing is the performance of the contract to which you are party pursuant to art. 6, paragraph 1, lett. b) of the Regulation.

If you refuse to provide your personal data, or ask for them to be deleted, the data controller will not be able to satisfy your request nor to provide (or to continue providing) the service required.

Please note that the access to our website is recorded for security analysis purposes in order to hinder any cyber attacks. Therefore Provvisionato collects users’ IP address exclusively for its legitimate interest to protect itself against any security incidents in relation to the use of this website, pursuant to art. 6, paragraph 1, lett. f) of the Regulation.

1.2. Storage of Personal Data

The data you provided for the performance of the contract or the service will be processed for the purposes described in paragraph 1 only for the time necessary needed to provide the service required and, in any case, for no longer than one year from the receipt of the comment, the request or the query, following which your personal data will be erased.

The IP addresses are erased after 2 years from their collection.

2. Data Controller

The data controller is Provvisionato & Co. S.R.L., as identified above.

The subject delegated to reply to data subjects in the event of exercise of their rights pursuant to Articles from 15 to 21 of GDPR is Provvisionato & Co. S.R.L. whose contacts details are available at the following link: contacts in the privacy section.

3. Data Treatment

3.1 Data Recipients 

Provvisionato might communicate your personal data to its employees and partners, within or outside its organization, who are expressly authorized to process personal data, in order to allow the reply to your comments, requests or queries.

3.1 Data Processor 

Please, be aware that Provvisionato has designated data processors according to Art. 28 of the GDPR and thus they might process and find out about personal data you provided, for the following purposes:

a) for the management of your contractual relationship with Provvisionato, also for accounting and administrative purposes (e.g. labour consultants, accountants, auditing firms, consultants, providers of electronic invoicing services, etc.);
b) for the management of communication services related to the current contractual relationship or to information and promotional activities of Provvisionato;
c) for the management and the storage, which may also be electronic, of Provvisionato’s contractual, administrative, accounting documents and archives;
d) for the management of Provvisionato’s website relating to the supply of hosting and IT maintenance services, also engaging cloud services providers whose server are within European Union.

If other categories of data processor are designated, they may be indicated on the Privacy Policy, in the specific privacy section, which is continuously updated.

4. Data Protection Officer

Provvisionato has not designated a Data Protection Officer, since in this specific case the designation is not mandatory according to Art. 37 of the GDPR.

5. Location of the Processing

Provvisionato processes your personal data in Italy.

6. Data Subjects’ Rights

You may exercise all rights recognized by the GDPR from art. 15 to art. 21, including the right to access your personal data, the right to rectify or erase them, the right to restrict the processing of your personal data and the right to object to the processing, without prejudice to paragraph 1.

Additionally, you have the right to lodge a complaint with a supervisory authority in accordance with Art. 77, paragraph 1 of the GDPR. In Italy, the competent authority is the Garante per la protezione dei dati personali.

6.1. Right to Object

You have the right to object, partially or entirely, to the processing of your personal data pursuant to Art. 21 of the GDPR. The right to object shall not be exercised with reference to those data for which Provvisionato demonstrates compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject (e.g. grounds related to the employment contract, administrative or accounting grounds, for the establishment, exercise or defence of legal claims, etc.).

6.2. Right to Data Portability

If the conditions provided for by Art. 20 of the GDPR are met, you also have the right to data portability. The right to data portability is the right to receive your personal data, which the data controller processes by electronic means and on the basis of your consent or of a contract with you, in a structured, commonly used and machine-readable format.

6.3. Exercises of Data Subjects’ Rights

You can exercise the above mentioned rights by mailing a written communication to the data controller’s address indicated in paragraph 1 or by sending an electronic certified mail to the following address: privacy@provvisionato.com.