The purpose of this document is to inform the natural person (hereinafter
“Data Subject”) about the processing of his/her personal
data (hereinafter “Personal Data”) collected by the data
controller, MUTTI SPA CONSERVE ALIMENTARI, with
registered office in VIA TRAVERSETOLO, 28 43022 MONTECHIARUGOLO (PR), Tax
Code/VAT No. 02758310342, e-mail address supporto@muttistorecheck.it,
(hereinafter “Data Controller”).
The Data Controller may modify or simply update all or part of this
information by notifying the Data Subjects where necessary.
-
Categories of Personal Data processed
The Data Controller processes the following types of Personal Data
voluntarily provided by the Data Subject:
-
Contact Data: name, surname, address, e-mail,
telephone, authentication credentials, any further information sent
by the Data Subject, etc.
-
Data relating to the location of the Data Subject:
i.e. data identifying approximately the geolocation of the Data
Subject, collected in an automated manner and without any subsequent
tracking of continuous the user.
-
Legal basis and purpose of processing
The legal bases and purposes of the processing are:
-
a) the performance of the contract with the Data Subject and,
specifically, the fulfillment of any obligation arising from the
pre-contractual or contractual relationship with the Data Subject;
-
b) the fulfilment of in compliance with legal obligations and,
precisely, any obligation provided for by the current regulations ,
laws and regulations, in particular, on tax and fiscal matters;
-
c) the legitimate interest of the Data Controller in organising
register of an up-to-date and georeferenced points of sale,
informing the Data Subject of the proximity of the same to his/her
own position and/or allowing the Data Subject to create a new
register relating to a point of sale, which is also associated with
a georeferenced position;
-
d) the legitimate interest of the Controller to ascertain, exercise
or defend a right in court.
The provision of Personal Data for the purposes referred to in points
a) and b) above is to be considered compulsory and, in the event of
failure to do so, processing may not take place. The processing of
Personal Data for the purposes referred to in points c) and d) above
shall be deemed to be carried out on the basis of the legitimate
interest indicated therein, which, however, shall not prevail over the
rights and freedoms of the Data Subjects.
-
Processing methods and recipients of Personal Data
The processing of Personal Data is carried out by means of paper and
computer tools with organisational methods and logics strictly related
to the purposes indicated and through the adoption of adequate
security measures.
Personal Data are processed exclusively by:
-
persons authorised by the Data Controller to process Personal Data
who have committed themselves to confidentiality or have signed an
appropriate legal obligation of confidentiality;
-
subjects that operate independently autonomous asdata controllers or
subjects designated as data processors by the Data Controller in
order to carry out all the processing activities necessary to pursue
the purposes set out in this policy (e.g. business partners,
consultants, IT companies, service providers, hosting providers);
-
parties or entities to whom Personal Data must be disclosed by law
or by order of the authorities.
The aforementioned parties are required to use appropriate safeguards
to protect Personal Data and may only access Personal Data that is
strictly necessary to perform the tasks assigned to them.
The Personal Data collected and processed will not be disclosed to
third parties.
-
Place
Personal Data is usually processed in the EU and may be transferred
outside the territory of the European Economic Area (EEA), namely to
the United States of America, subject to the most appropriate security
measures and tools provided by law, such as adequacy decisions and SCC
- Standard Contractual Clauses.
-
Personal Data Retention Period
Personal Data will be kept for the period of time necessary to fulfil
the purposes for which it was collected, in particular:
-
for purposes relating to the performance of the contract between the
Data Controller and the Data Subject, it will be retained for the
entire duration of the contractual relationship and, after
termination, for the ordinary limitation period of 10 years. In the
event of legal disputes, for the entire duration of the same, until
the time limit for appeals is exhausted
-
for purposes relating to the legitimate interest of the Controller,
they will be kept until such interest is fulfilled;
-
for the fulfilment of a legal obligation, by order of an authority
and for legal protection, they will be kept in compliance with the
timeframes provided for by said obligations, regulations and, in any
case, until the fulfilment of the prescriptive term provided for by
the regulations in force.
At the end of the retention period, all Personal Data will be deleted
or stored in an anonymised form that does not allow the identification
of the Data Subject.
-
Rights of the Data Subject
Data Subjects may exercise the rights set out in Articles 15 to 22 of
the GDPR with respect to Personal Data processed by the Data
Controller.
In particular, the Data Subject has the right to:
- be informed about the processing of their Personal Data;
- revoke at any time any consent previously given;
- limit the processing of his/her Personal Data;
- object to the processing of their Personal Data;
- access your Personal Data;
- verify and request rectification of your Personal Data;
-
obtain the restriction of the processing of your Personal Data;
- obtain the erasure of your Personal Data;
-
transfer your Personal Data to another controller, if the conditions
provided for by the law are met;
-
to lodge a complaint with the supervisory authority responsible for
the protection of their Personal Data and/or to take legal action to
protect their rights.
To exercise their rights, Data Subjects may send a request to the
following e-mail address supporto@muttistorecheck.it . or address a
petition to the Data Controller's registered office.