INFORMATION ON THE PROCESSING OF PERSONAL DATA
Controller of the processing of personal data
The controller of the processing of personal data is Sea of Green SRL (hereinafter the "Controller"), with registered office at Lauben 122, I-39012 Merano (BZ). The Controller can be reached at the following contact: email: info [at] seaofgreen.it (info[at]seaofgreen[dot]it).
Pursuant to Art. 13 of Legislative Decree no. 196 of 30.06.2003 (hereinafter the "Data Protection Code") and Art. 13 of EU Regulation no. 679/2016 (hereinafter the "GDPR"), the Controller informs the data subject that the data subject's data will be processed for the following purposes and in the following manner.
Purposes for which the data is processed and manner of processing
a) The processing of the personal data communicated by the data subjects serves to fulfil legal and contractual obligations or obligations arising from the order placed or carried out by the data subject. In particular, the personal data is processed for the purpose of handling the tasks required under tax and accounting law.
b) The personal data may also be used to send information and/or advertising material or commercial communications about new products or news on existing products of the Controller. The processing takes place using automated means of contact (e.g. email).
The processed data does not belong to special categories of personal data. Processing may take place on paper and by electronic means.
Providing the data for the purposes mentioned under letter a) is mandatory. If the data subject refuses, in whole or in part, to provide this personal data, this may mean that the contract cannot be performed, or can only be performed in part, or that the order cannot be fulfilled. Providing the data for the purposes mentioned under letter b) and consenting to this data processing is optional; any refusal to provide this data has no effect on the performance of the service.
Transfer of data to a third country or an international organisation
The data subject's data is not transferred to a third country outside the EU or to an international organisation, nor is it stored on servers located outside the EU.
Retention period of the personal data
In fulfilment of the applicable civil, tax and fiscal obligations, the data subject's personal data is stored for 10 (ten) years.
Rights of the data subject
Under the Data Protection Code, the data subject has the right to obtain confirmation of the existence or non-existence of personal data concerning them, and to have it communicated in an intelligible form; to have the data updated, rectified and - where there is an interest - supplemented; to have data processed in breach of the law erased, anonymised or blocked; to object, in whole or in part, on legitimate grounds, to the processing of personal data concerning them, even if it is relevant to the purpose of collection; and to object to the processing of personal data concerning them where it is carried out for the purpose of sending advertising material or direct selling, or for carrying out market research or commercial communication.
Under the GDPR, the data subject has the right to obtain from the Controller access to the personal data concerning them as well as rectification or erasure thereof. They also have the right to restriction of processing and the right to object to processing. They may furthermore transfer their data to other controllers. The data subject has the right to withdraw any consent given at any time. If the data subject considers that the personal data concerning them has been processed unlawfully, they have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with the data protection authority (Garante Privacy - www.garanteprivacy.it).
The data subject can exercise their rights by notifying the contact details given under the subheading "Controller of the processing of personal data".
Communication and dissemination
The personal data provided by the data subject may be processed by the Controller's employees (in particular its administrative staff) in their capacity as persons instructed to do so by the Controller.
In addition, the data may be communicated to third parties who carry out activities on behalf of the Controller and who provide support to the Controller, such as accounting, IT support, and economic, legal and tax advice, in their capacity as processors. An updated list of the processors is available at the Controller's registered office.
The personal data provided by the data subject is not disseminated.
Automated decision-making
The Controller does not use automated decision-making with regard to the data subject's personal data.
