Dear CUSTOMER

SUBJECT: EU Regulation 2016/679 on the processing of personal data - New regulations on privacy

Personal data processing information

I hereby inform you pursuant to art. 13 and art. 14 of EU Regulation No. 2016/679 that your data will be processed in the following ways and for the following purposes:

1) OBJECT OF THE TREATMENT The owner processes personal, identifying data (for example, name, surname, company name, address, telephone, e-mail, bank and payment details) subsequently "personal data" or also "data", communicated by you on the occasion of the conclusion of contracts for the Owner's services.

2) PURPOSE OF THE TREATMENT Your personal data is processed: a) Without your express consent, for service purposes: conclude contracts for the owner's services, fulfill pre-contractual, contractual and fiscal obligations deriving from existing relationships with you, to fulfill obligations established by law, by a regulation, by community legislation or by an order from the Authority; b) Only with your specific and distinct consent for marketing purposes: send them via e-mail, post and/or text message and/or telephone contacts, newsletters, commercial communications and/or advertising material on products or services offered by the Owner or by third parties. 3) TREATMENT METHODS The processing of your personal data will take place with the use of procedures, including computerized ones, in the ways and within the limits necessary to pursue the aforementioned purposes in compliance with security measures. Adequate technical and organizational measures have been put in place to guarantee a level of security appropriate to the risk with authentication systems, protection systems (antivirus and firewall), systems for copying and storing electronic archives as well as IT systems to promptly restore the availability and data access in the event of a physical or technical incident.
The owner will process personal data for the time necessary to fulfill the aforementioned purpose and in any case no later than 10 years from the termination of the relationship for service purposes and for no more than 2 years of data collection for marketing purposes.

4) ACCESS TO DATA Your data may be made accessible for the purposes referred to in the art. 2.A.) and 2.B), to employees and collaborators of the owner and abroad, in their capacity as internal data processors and/or managers and/or system administrators, to third-party companies and other subjects (for indicatively, credit institutions, professional firms, etc., which carry out outsourced activities on behalf of the Data Controller in their capacity as external data controllers.

5) DATA COMMUNICATION Without the need for express consent, the Data Controller may communicate his data to Supervisory Bodies, Judicial Authorities, etc., as well as to those subjects to whom communication is mandatory by law for the aforementioned purposes.

6) DATA TRANSFER Personal data is stored at the owner's headquarters within the European Union.

7) NATURE OF THE PROVISION OF DATA AND CONSEQUENCES OF THE REFUSAL TO RESPOND The provision of data for the purposes referred to in art. 2.A) is mandatory. In their absence, we will not be able to guarantee the services of the art. 2.A). The provision of data for the purposes referred to in art. 2.B) is instead optional. You can therefore decide not to provide any data or to subsequently deny the possibility of processing data already provided: in this case you will not be able to receive advertising material and commercial communications relating to the Services offered by the owner. You will however continue to be entitled to the Services referred to in the art. 2.A).

8) RIGHTS OF THE INTERESTED PARTY The rights provided for by EU Regulation 2016/679 listed below are recognised: - access to personal data - obtain rectification of personal data - obtain the deletion of personal data - communicate the limitation of the processing that concerns them - opposition to the processing of personal data - opposition to the portability of personal data - revocation of consent to processing - lodge a complaint with the supervisory authority

9) METHOD OF EXERCISE OF RIGHTS You can exercise your rights at any time by sending: A registered letter with return receipt. to: C.A.E.R. SRL, VIA DON ANGELO Questa 51, VOBARNO (BS). An email to the address: info@caersrl.it.

10) OWNER, MANAGER AND OFFICERS

The data controller is:
C.A.E.R. SRL,
VIA DON ANGELO Questa 51, VOBARNO (BS),
TEL. 0365.597038, MAIL info@caersrl.it.