PERSONAL DATA.
According to the above-mentioned regulation, personal data means: any information relating to an identified or identifiable natural person (“data subject”); an identifiable person is one who can be identified, directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more characteristic elements of his or her physical, physiological, genetic, mental, economic, cultural or social identity;

DATA PROCESSING
Therefore, we inform you that the personal data, already in our possession, or that you would like to communicate to us, are and will be processed by us in accordance with principles of lawfulness, fairness and transparency, collected for specified, explicit and legitimate purposes, and thereafter processed in a manner that is not incompatible with those purposes, adequate, relevant and limited to what is necessary in relation to the purposes for which they are processed, accurate and, if necessary, updated, kept in a form that allows the identification of the data subjects for a period of time not exceeding the achievement of the purposes for which they are processed; personal data may be kept for longer periods provided that they are processed solely for archiving purposes in the public interest, processed in a manner that ensures adequate security of personal data, including protection, by appropriate technical and organizational measures, against unauthorized or unlawful processing and accidental loss, destruction or damage.

The Data Controller of the undersigned company informs you that the data will be processed for the following reasons:

• the data subject has consented to the processing of his/her personal data for one or more specific purposes, including for commercial proposals;
• the processing is necessary for the performance of a contract to which the data subject is a party or the performance of pre-contractual measures taken at the request of the data subject;
• processing is necessary to comply with a legal obligation to which the data controller is subject;

“Processing” means any operation or set of operations, whether or not by automated means, applied to personal data or sets of personal data, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, comparison or interconnection, restriction, erasure or destruction;

DATA SUBJECT RIGHTS
The data subject has the following rights under EU Regulation 2016/679:
Art. 12 Information, notices and transparent ways to exercise the data subject’s rights
Art. 13 Information to be provided if personal data is collected from the data subject
art. 14 Information to be provided if personal data has not been obtained from the data subject
Article 15 Right of access of the data subject
Article 16 Right of rectification
art. 17 Right to erasure (“right to be forgotten”)
Art. 18 Right to limitation of processing
art. 19 Obligation to notify in case of rectification or erasure of personal data or limitation of
processing
Art. 20 Right to data portability
art. 21 Right to object and automated decision making regarding natural persons