In accordance with Article 13 - EU Regulation 2016/679
Relevant Legislation:
- Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (General Data Protection Regulation, hereinafter “EU Regulation”)
- Italian Legislative Decree No. 196 of June 30, 2003 and subsequent amendments (hereinafter as “Privacy Code”);
- Guidelines on Marketing and against Spam of 4 July 2013 (heirenafter as “Italian Data Protection Authority Guidelines”)
Yarix S.r.l. (hereinafter “the Company”), a controlled company of Var Group S.p.A. pursuant to art. 2359 c.c., with registered office in Vicolo Boccacavalla n. 12 - 31044 Montebelluna (TV), VAT number 03614930265, wishes to inform users about the methods and conditions applied by the Company to the processing operations performed on personal data.
In particular, this Information Notice is provided in relation to personal data provided by users by filling in the “Contact Form” on the Company’s website, which responds to the following domain: https://www.yarix.com/
The Company acts as “Data Controller,” by which is meant “the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data”.
Specifically, the processing of personal data may be carried out by individuals specifically authorized to carry out processing operations on users’ personal data and, for this purpose, duly instructed by the Company.
In application of the regulations on personal data processing, users who consult and use the Company's website assume the quality of “data subjects,” by which is meant the natural persons to whom the personal data being processed refer.
- Purpose and legal basis of the personal data processing
The personal data processed by the Company are directly provided by users, by filling in the appropriate contact form, in order to request information or receive assistance. In this case, the processing is based on the execution of specific requests and the fulfillment of pre-contractual measures; therefore, the express consent of users is not necessary. On the basis of the specific and optional consent provided by users, personal data may be processed by the Company in order to send commercial and promotional communications related to the Company's own services and products, as well as informational messages related to the Company's institutional activities. Moreover, on the basis of the specific and optional consent provided by users, personal data may be communicated to Var Group S.p.A., the controlling company pursuant to Article 2359 of the Italian Civil Code, as well as to the companies belonging to the Var Group S.p.A. business group, in order to allow such companies to transmit commercial and promotional communications relating to the services and products owned by the aforementioned companies and information messages relating to the institutional activities of the aforementioned companies. Finally, on the basis of the specific and optional consent provided by users, personal data may be disclosed to third-party companies belonging to ATECO J62, J63 and M70 product categories concerning IT products and services and business consulting. Please note that users may revoke, at any time, the consent already provided to the processing of personal data; revocation of consent does not affect the lawfulness of the processing carried out prior to such revocation. It is possible to revoke the consent already provided to the Company by writing to the following e-mail address: digitallaw&dataprotection@vargroup.it
- Methods and duration of the processing of personal data
The processing of personal data is carried out by the persons authorized to process personal data, specifically identified and instructed for this purpose by the Company. The processing may be carried out through the use of information technology, telematic or even paper means, in compliance with provisions aimed at ensuring the security and confidentiality of personal data, as well as the accuracy, updating and relevance of personal data to the stated purposes. Personal data collected will be stored in electronic and/or paper files located at the Company's registered office or operational offices. The storage of personal data provided by users will be in a form which allows their identification for a period of time not exceeding that necessary for the pursuit of the purposes, as identified in point 1 of this Information Notice, for which such data are collected and processed. In any case, the determination of the retention period takes place in accordance with the terms allowed by applicable laws. In relation to the purposes of marketing and commercial promotion, in case of manifestation of the required optional consents, the personal data collected will be kept for the time strictly necessary for the management of the above-mentioned purposes according to criteria marked by compliance with the regulations in force and fairness as well as balancing the legitimate interest of the Company and users' rights and freedoms. Consequently, in the absence of specific regulations providing for different retention times, the Company will take care to use personal data for the aforementioned marketing and sales promotion purposes for a congruous time. In any case, the Company will take every care to avoid indefinite use of personal data, proceeding on a periodic basis to verify in a suitable manner the actual continuation of the users' interest in having the processing for marketing and commercial promotion purposes carried out.
- Nature of personal data provision
The provision of personal data is optional but necessary in order to provide feedback to requests for information or assistance made by users. In particular, failure to fill in the fields in the contact form prevents sending requests for information or assistance to the Company. In such case, consent to the processing of personal data is “obliged” as it is instrumental to the purpose of of obtaining response to requests for information or assistance made to the Company. In all other cases referred to in point 1 of this notice, processing is based on the provision of specific and optional consent; as already stated, consent is always revocable.
- Recipients of personal data
Users' personal data may be communicated, in Italy or abroad, within the territory of the European Union (EU) or the European Economic Area (EEA), in fulfillment of an obligation by law, regulation or EU legislation; in particular, personal data may be communicated to public authorities and public administrations for the performance of institutional functions. Also, without the need for users' consent, personal data may be communicated to companies belonging to Var Group S.p.A. business group for the sole purpose of responding to requests for information or assistance addressed to the Company. Subject to the specific and optional consent provided by users, personal data may be communicated to Var Group S.p.A., the controlling company pursuant to Article 2359 of the Italian Civil Code, as well as to the companies belonging to the Var Group S.p.A. business group, in order to allow such companies to transmit commercial and promotional communications relating to the services and products of the aforementioned companies and information messages relating to the institutional activities of the aforementioned companies. Finally, on the basis of the specific and optional consent provided by users, personal data may be disclosed to third-party companies belonging to ATECO J62, J63 and M70 product categories concerning IT products and services and business consulting. Personal data will not be transferred outside the territory of the European Union (EU) or the European Economic Area (EEA). Personal data will not be subject to dissemination and therefore will not be disclosed to the public or to an indefinite number of individuals.
- Rights under Articles 15, 16, 17, 18, 20 and 21 of EU Regulation 2016/679
Users, as data subjects, may exercise the rights of access to personal data provided by Article 15 of the EU Regulation and the rights provided by Articles 16, 17, 18, 20 and 21 of the EU Regulation regarding rectification, erasure, restriction of processing of personal data, data portability, where applicable and opposition to the processing of personal data.
The above mentioned rights can be exercised by writing to the following e-mail address:
digitallaw&dataprotection@vargroup.it
If the Company fails to provide feedback within the timeframe prescribed by the regulations or the response to the exercise of rights is inadequate, users may lodge a complaint to the Italian Data Protection Authority.
Below you can find the contact details:
Garante per la Protezione dei Dati Personali
Piazza Venezia n. 11 - 00187 Roma
Fax: (+39) 06.69677.3785
Telephone swithboard: (+39) 06.69677.1
E-mail: protocollo@gpdp.it
- Data Protection Officer
The Data Protection Officer can be contacted at the Company’s headquarters and at the following e-mail address: dpo@sesa.it