Mesa di Sala Giacomo & C snc as the owner of the processing of personal data in accordance with the amended Legislative Decree 196/2003 and EU Regulation 679/2016 (henceforth, collectively referred to as Applicable Legislation), recognizes the importance of confidentiality and protection to the protection of personal data as fundamental rights of the individual.
It is, therefore, its first objective to treat personal data according to strict principles of lawfulness̀, fairness, purpose limitatioǹ and storage, minimization, accuracy, integritỳ, while ensuring maximum transparency on procedures and security measures taken.
In light of the above, and in execution of legal obligations, it issues the following information on the processing of personal data.
The data controller is Mesa di Sala Giacomo & C snc with headquarters at Via Dell’Artigianato n. 35/37 25039 Travagliato email pec: mesaitalia@legal-mail.it Sala Giacomo & C snc is the data controller and issues this notice to indicate in a transparent and easily accessible way all information about the processing of personal data.
This information concerns the treatment of individuals who apply to Mesa di Sala Giacomo & C snc for the provision of products and services (the Clients), as well as individuals who interact with the website of the company Mesa di Sala Giacomo & C snc.
Mesa di Sala Giacomo & C snc issues specific disclosures for other purposes̀ of processing (e.g., disclosures to employees).
Mesa di Sala Giacomo & C snc processes Customer data as well aś third party personal data provided by Customers (jointly, Personal Data) to the extent that such processing is necessary for the performance of a contractual or pre-contractual relationship.
Navigation data
The computer systems and software procedures used to operate this website acquire, in the course of their normal operation, some personal data whose transmission is implicit in the use of Internet communication protocols.
This information is not collected in order to be associated with identified data subjects, but by its very nature could, through processing and association with other data held by third parties, allow users to be identified.
This category of data includes IP addresses or domain names of the computers used by users connecting to the site, the URI (Uniform Resource Identifier) notation addresses of the requested resources, the time of the request, the method used in submitting the request to the server, the size of the file obtained in response, the numerical code indicating the status of the response given by the server (successful, error, etc.) and other parameters related to the user’s operating system and computer environment.
These data, which are necessary for the use of web services, are also processed for the purpose of:
COOKIES
No personal data of users is acquired by the site in this regard.
No use is made of cookies for the transmission of information of a personal nature, nor are so-called persistent cookies of any kind, or systems for tracking users, used.
The use of so-called session cookies (which are not stored persistently on the user’s computer and disappear when the browser is closed) is strictly limited to the transmission of session identifiers (consisting of random numbers generated by the server) necessary to enable the safe and efficient exploration of the site.
The so-called session cookies used in this site avoid the use of other computer techniques potentially prejudicial to the privacy of users’ browsing and do not allow the acquisition of personal data identifying the user of any other personal data included in the missive.
The processing of Personal Data is for the purpose of:
Personal Data may be processed by means of both paper and computer files (including portable devices) and processed in a manner̀ strictly necessary to fulfill the purposes̀ stated above.
The optional, explicit and voluntary sending of messages to the contact addresses will result in the acquisition of the personal data necessary to respond to and fulfill the requests made and the processing of such personal data for these purposes.
Mesa di Sala Giacomo & C snc processes Customers’ personal data lawfully, where processing:
With respect to Personal Data related to the performance of the contract to which Clients are a party or related to the fulfillment of a regulatory obligation (e.g., fulfillments required in the tax and/or accounting and/or administrative sphere), failure to disclose Personal Data prevents the completion of the contractual relationship itself.
Customers’ Personal Data will be retained for the duration of the contractual relationship and, thereafter, for as long as Mesa di Sala Giacomo & C snc is subject to retention obligations for̀ tax or other purposes̀, provided for, by law or regulation.
The Personal Data collected are processed by the staff and/or collaborators of Mesa di Sala Giacomo & C snc, who act on the basis of specific instructions given regarding the purposes and methods of such processing.
Customers’ Personal Data may be disclosed to:
Personal Data are not subject to dissemination or any fully automated decision-making process, including profiling.
The Client has the following rights:
access, i.e., to obtain confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to such data, including a copy thereof;
of rectification, that is, to obtain without undue delay the rectification of inaccurate personal data concerning him/her and/or the supplementation of incomplete personal data;
to erasure (right to be forgotten), i.e., to obtain without undue delay the deletion of personal data concerning him or her, under the terms of Article 17 of the Regulations;
of restriction of processing, or obtain restriction of processing, in the cases referred to in Article 18 of the Regulations;
to data portability, i.e., to receive from the Data Controller, in a structured, commonly used and machine-readable format, personal data concerning him or her and the right to have them transmitted to another Data Controller without hindrance where the processing is based on consent and is carried out by automated means, as well as to have them transmitted directly to another Data Controller where this is technically feasible;
to object, i.e., the right to object at any time on grounds relating to his or her particular situation, to the processing of personal data concerning him or her based on the lawful condition of legitimate interest or the performance of a task carried out in the public interest or in the exercise of official authority, including profiling, unless there are legitimate grounds for the Data Controller to continue the processing that override the interests, rights and freedoms of the Data Subject or for the establishment, exercise or defense of a legal claim. In addition, the right to object at any time to the processing if personal data are processed for direct marketing purposes, including profiling, insofar as it is related to such direct marketing;
of revocation, that is, to withdraw one’s consent at any time. Revocation of consent does not affect the lawfulness of processing based on consent prior to revocation;
of complaint or to lodge a complaint with the Italian Data Protection Authority, Piazza di Montecitorio 121, 00186, Rome (RM).
