Information on the Processing of Personal Data Pursuant to art. 13 of EU Regulation 2016/679, QMS Italia S.r.l. (hereinafter “Owner”) informs you that all personal data collected will be processed in compliance with the aforementioned legislation; in relation to the aforementioned treatments QMS Italia S.r.l. provides the following information:
Personal Data Collected:
Personal data, such as data communicated by you when concluding contracts for the owner’s services, or when registering / participating in events, registration via the QMS Italia Srl website, will be collected with your free and express consent and are relating exclusively to: – identification data (for example: name, surname, address, telephone, fax, e-mail, bank details, payment details, etc …) – tax data (if required by law – for example tax code VAT number, etc …).
Data Controller of Personal Data The Data Controller of personal data is QMS Italia S.r.l., with registered office in Naples, at Via Luigi Pirandello n ° 21.
Purposes and methods of processing
The purposes of the processing of personal data are as follows: 1) fulfillment of legal obligations related to the contractual relationship; 2) organizational management of the contractual relationship; 3) statistical analysis relating to the service provided; The processing of your personal data is carried out by means of the operations indicated in art. 4 n.2) 7 EU Reg. 2016/679 and more precisely: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Personal data will be processed in paper, computerized and telematic form, and entered in the relevant databases which can only be accessed by the owner and his agents. As regards the data processed electronically, it is emphasized that all appropriate security measures have been taken to protect the rights, freedoms and legitimate interests of the data subject as per art. 22 par. 3 of EU Reg. 2016/679.
Possible Recipients of the Data
Without the need for express consent (Article 6 letter b) and c) EU Reg. 2016/679, the owner may communicate your data for the purposes referred to in art. 2 EU Reg. 2016/679 to: Supervisory Bodies (such as QMSCERT Ltd – Certification Body; ESYD – Hellenic National Accreditation Body), judicial authorities, as well as to those subjects to whom communication is mandatory by law for the fulfillment of purposes expressed. These subjects will process the data in their capacity as independent data controllers. Your data may be made accessible for the aforementioned purposes to employees and collaborators of the Data Controller or of the companies related to QMS Italia S.r.l. in Italy and abroad, in their capacity as persons in charge and / or internal managers of the processing and / or system administrators; to third-party companies or other subjects who carry out outsourcing activities on behalf of the Data Controller, in their capacity as external data processors. Furthermore, in relation to the purposes indicated in points 1, 2 and 3 of the previous paragraph, the data may be communicated to the following subjects or to the categories of subjects indicated below: – Studies of recognized accountants relating to the profession of assistance to companies when the communication is due by law, or it is in the interest of the subject (natural or legal person); – Studies of recognized lawyers relating to the profession of assistance to companies when the communication is due by law, regularly appointed to this form of treatment in full compliance with the minimum measures in force, or when the communication is in the interest of the subject (natural or legal person ). The owner also communicates that he does not intend to transfer the data to a third country outside the EU or to an international organization outside the EU.
Data transfer
The management and storage of personal data will take place on servers located within the European Union of the Data Controller and / or third-party companies appointed and duly appointed as Data Processors. In any case, it is understood that the Data Controller, if necessary, will have the right to move the location of the servers to Italy and / or the European Union and / or non-EU countries. In this case, the Data Controller ensures from now on that the transfer of data outside the EU will take place in compliance with the applicable legal provisions by stipulating, if necessary, agreements that guarantee an adequate level of protection and / or adopting the standard contractual clauses provided for by European Commission.
Data Retention Period
At the end of the service or provision of the service and in any case for the time necessary to fulfill the aforementioned purposes, personal data will be stored exclusively for historical or statistical purposes, in accordance with the law, regulations, community legislation and codes of ethics and good conduct signed pursuant to article 40 of EU Reg. 2016/679. In light of this principle, your personal data will be processed by the Data Controller limited to what is necessary for the pursuit of the purpose referred to in this statement. In particular, your personal data will be processed for a period of time equal to the minimum necessary, as indicated in Recital 39 of the Regulation, that is until the termination of the contractual relationships existing between you and the Data Controller, without prejudice to a further period of conservation that may be imposed by law, as also provided for by Recital 65 of the Regulation. Beyond this period, personal data will be stored anonymously, or will be destroyed.
Rights of the interested parties
In relation to the aforementioned treatments, the interested party has the right to request access to his personal data and the correction or cancellation of the same or the limitation of the treatment concerning him or to oppose their treatment, as well as having the right to data portability. Right of Access Pursuant to art. 15, paragraph 1 of the Regulation, you will have the right to obtain from the Data Controller confirmation that your personal data is being processed or not and, in this case, to obtain access to such personal data and the following information: ) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom your personal data have been or will be disclosed, in particular if they are recipients of third countries or international organizations; d) when possible, the retention period of personal data provided or, if not possible, the criteria used to determine this period; e) the existence of the data subject’s right to ask the Data Controller to correct or delete personal data or limit the processing of personal data concerning him or to oppose their processing; f) the right to lodge a complaint with a supervisory authority; g) if personal data are not collected from the interested party, all available information on their origin; h) the existence of an automated decision-making process, including profiling pursuant to Article 22, paragraphs 1 and 4, of the regulation and, at least in such cases, significant information on the logic used, as well as the importance and consequences provided for this treatment for the interested party.
Right of Rectification
You can obtain pursuant to art. 16 of the Regulation, the correction of your personal data that are inaccurate. Furthermore, taking into account the purposes of the processing, you will be able to obtain the integration of your personal data which are incomplete, also by providing an additional declaration.
Right to Cancellation
You will be able to obtain, pursuant to Article 17, paragraph 1 of the Regulation, the cancellation of your Personal Data without undue delay and the Data Controller will be obliged to cancel your Personal Data, even if only one of the following reasons exists: a ) the Personal Data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) has revoked the consent on which the processing of your personal data is based and there is no other legal basis for their processing; c) has opposed the processing pursuant to Article 21, paragraph 1 or 2 of the Regulation and there is no longer any legitimate overriding reason to proceed with the processing of your personal data; d) your Personal Data have been unlawfully processed; e) it is necessary to delete your Personal Data to comply with a legal obligation provided for by a community standard or internal law. In some cases, as provided for by article 17, paragraph 3 of the Regulation, the Data Controller is entitled not to delete your Personal Data if their processing is necessary, for example, to exercise the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, for archiving purposes in the public interest, for scientific or historical research or for statistical purposes, for the assessment, exercise or defense of a right in court.
Right to limit the processing
You may obtain the limitation of the processing, pursuant to article 18 of the Regulation, in the event that one of the following hypotheses occurs: a) you have contested the accuracy of your Personal Data (the limitation will last for the period necessary for the Data Controller to verify the accuracy of such Personal Data); b) the processing is unlawful but you have opposed the cancellation of your personal data, requesting, instead, that its use be limited; c) although the Data Controller no longer needs it for processing purposes, your Personal Data are used to ascertain, exercise or defend a right in court; d) You opposed the processing pursuant to Article 21, paragraph 1, of the Regulation and is awaiting verification of the possible prevalence of the Data Controller’s legitimate reasons with respect to yours. In case of limitation of processing, your Personal Data will be processed, except for storage, only with your consent or for the ascertainment, exercise or defense of a right in court or to protect the rights of a ‘other natural or legal person or for reasons of significant public interest. We will inform you, in any case, before this limitation is lifted. Right to data portability You may, at any time, request and receive, pursuant to Article 20, paragraph 1 of the Regulations, all your Personal Data processed by the Data Controller and / or by the Joint Data Controllers in a structured format, of common and legible use or request its transmission to another data controller without hindrance. In this case, it will be your responsibility to provide us with all the exact details of the new data controller to whom you intend to transfer your Personal Data by providing us with written authorization.
Right to object
Pursuant to Article 21, paragraph 2 of the Regulation and as also reaffirmed by Recital 70, you can object, at any time, to the Processing of your Personal Data if these are processed for direct marketing purposes, including profiling to the extent that it is connected to such direct marketing.
Right of Withdrawal of Consent
If the processing is based on consent, the Data Controller informs the data subject that he has the right to withdraw it at any time without prejudice to the lawfulness of the processing based on the consent given before the revocation.
Right to lodge a complaint
The owner informs the interested party that he has the right to lodge a complaint with a supervisory authority.
Mandatory or Optional Nature of Data Provision The provision of data and the related processing are mandatory in relation to the purposes n. 1 and 2 relating to tax obligations; it follows that any refusal to provide data for such purposes may make it impossible for the Data Controller to carry out the same professional relationships and legal obligations. The provision of data and its processing is to be considered optional in other cases, without any consequence.
Cookies
Our site uses only technical cookies. At any time, therefore, the interested party can disable the use of cookies in his browser without any consequence regarding navigation on the pages of the site. Cookies are small text files created by a server and are stored on the device used by the User to browse the site. They allow the site to guarantee the User all the features, a better and complete browsing experience, and to be aware of the user’s preferences and behavior.
QMS Italia S.r.l. uses two types of cookies, session and persistent. Session cookies allow the User to browse the website safely and efficiently; these cookies are not stored permanently on the user’s device and are deleted when the browser is closed. Persistent cookies are transmitted to the User’s device the first time they connect to the QMS Italia S.r.l. site, and are stored on the device itself. QMS Italia S.r.l. uses persistent cookies to store user and third-party preferences in order to produce site usage statistics, to obtain useful information for the constant improvement of the site. QMS Italia S.r.l., complies with the provisions contained in the Code regarding the protection of personal data (“Privacy Code”), as amended by Legislative Decree 28 May 2012, n. 69, in implementation of the European Directive 2009/136 / EC and in compliance with the provisions of Regulation (EU) 2016/679. The User can oppose the registration of cookies on his device by configuring the browser used for navigation: if he uses the QMS Italia S.r.l. without changing your browser settings, we assume that you will want to receive all the cookies used by the site and use all the features.
How to exercise your rights You can exercise your rights at any time by sending: – a communication to the address: QMS Italia S.r.l., Via Luigi Pirandello, 21 – 80125 Naples – an e-mail to the address: tecnico@qmsitalia.it