DATA PROTECTION NOTICE

EU REGULATION 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data

Namirial S.p.A. processes data in compliance with the provisions of EU Regulation 2016/679 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as “Reg. EU 2016/679”).
Pursuant to Articles 13 and 14 of the aforementioned regulation, the following information is provided regarding the identification data of the data controller and data protection officer in relation to the processing of personal data relating to contracts and services provision.

Data Controller is NAMIRIAL S.p.A. with registered office in Senigallia (AN), ZIP code 60019, Via Caduti sul Lavoro n. 4.

Type of processed data
The data provided and processed by Namirial S.p.A. are common, personal and sensitive data.

Purpose of processing
We inform you that the personal data, provided directly by the interested party and/or collected by fill-in forms on paper and/or available on Namirial S.p.A. websites, are processed for the purpose of concluding the contract to which the interested subject is a party, and also to perform the contractual benefits and to provide the services requested by the Customer or available on the portals managed by Namirial S.p.A. or by intermediaries appointed by the same, as well as for administrative and accounting purposes related to service contracts.

Data provision
The provision of data in the first field indicated above is mandatory for the conclusion of the contract or for the provision of the requested services.

Conditions for data processing and access
Namirial S.p.A. process personal data in accordance with Article 6 co. 1 lett. A), b), f) of EU Reg. 2016/679 by virtue of its legitimate interests related to the type of activity carried out and the need to implement the existing contracts or pre-contractual measures requested by the data subject.
The data collected by signing standard contracts in paper form are processed both in the aforementioned format and with IT and telematic tools and may be processed in aggregate form for statistical purposes and to verify the quality standards of assistance and maintenance services, in this case excluding the processing of identification data.
The data collected by filling in online forms are processed electronically and through information and management systems.
The data shall be accessible only by duly trained officers and informed about their duties and the activities permitted to them on the data collected, acting on behalf of Namirial and receiving instructions and tasks given by the data controller by means of a letter of appointment.
The data controller will process the data for the purposes indicated above, pursuing his legitimate interests that do not prevail over the interests or rights and freedoms of the data subject.

Scope of communication and possible dissemination of data
We inform you that the data relating to the contract and service activities can be communicated to commercial consultants for administrative and accounting purposes and to lawyers for possible management of litigation.
We also inform you that the data may also be communicated to police or judicial authorities for the purpose of ascertaining or prosecuting crimes committed by users of telematic services, where necessary.

Personal data retention and erasure
Namirial S.p.A. will retain the data of data subjects in a form that allows them to be identified for a period of time not exceeding the achievement of the purposes for which the data have been collected; they will therefore be retained until the existence of the contractual relationship. Upon expiry of this period, Namirial S.p.A. will delete the data of data subjects.
The data strictly necessary for fiscal and accounting compliance, which no longer serves the purpose for which they have been collected, will be retained for a period of 10 years as required by the relevant regulations.

The interested party has the right to request, at any time, the modification of the structures regulated by this paragraph through the exercise of the rights referred to in the following paragraph.

Rights of data subject
The data subject may exercise the rights referred to in art. 15 (Right of access by the data subject), 16 (Right to rectification), 17 (Right to erasure), 18 (Right to restriction of processing), 19 (Notification obligation regarding rectification or erasure of personal data or restriction of processing), 20 (Right to data portability), 21 (Right to object) e 22 (Automated individual decision-making, including profiling) of EU Regulation 2016/679.
We inform you that the exercise of the data subject’s rights referred to in these articles, such as the right of erasure or object, meets the limits imposed by the tax legislation.

In order to exercise the rights provided for in articles 15 to 22 of EU Reg. 2016/679, the interested party must address a specific written request addressed to:

Namirial S.p.A., Via Caduti sul Lavoro n. 4 – 60019 Senigallia (AN)
dpo@namirial.com – dpo.namirial@sicurezzapostale.it