Privacy Policy
SARA SRL
Registered Office in Via Gorizia, 13 - 64011 Alba Adriatica (TE) and
Head Office in Via Kennedy, 9 - 64013 Corropoli (TE)
VAT NUMBER
01460200676
collects, processes and communicates to third parties the personal data of persons with whom it has relations (hereafter defined as Interested Parties).
Pursuant to art. 13 of the EU Regulation 2016/679, SARA SRL, as Data Controller, is required to provide the Data Subject with certain information regarding the use of personal data and, in some cases, to obtain consent to the processing of the same. SARA SRL guarantees that the processing of personal data is carried out in respect of the above mentioned regulations, of the fundamental rights and freedoms, as well as of the dignity of the interested party, with particular reference to confidentiality, personal identity and the right to the protection of personal data, as well as of the other laws in force and the obligations of confidentiality that inspire the activity of the Company.
1. Purpose of processing
SARA SRL collects and processes personal data of the interested parties for the following purposes
a) to fulfil obligations arising from contractual relations established with SARA SRL;
b) to fulfil or demand the fulfilment of obligations envisaged by EU regulations, laws and regulations or to fulfil or demand the fulfilment of obligations envisaged by supervisory and control bodies or established by administrative practices;
c) for purposes functional to the activity carried out by SARA SRL such as the sending of requested material.
The legal basis of the processing is the contract as well as the explicit consent given.
Your data will be processed by our employees and collaborators, internal and external, formally entrusted with this task pursuant to Article 4 of EU Regulation 2016/679 as well as external data processors or structures that perform technical, support tasks (in particular legal services, IT) and corporate control.
2. Nature of the collection and consequences of failure to provide data
For the stipulation and execution of the relationship with SARA SRL, the collection of certain personal data is also mandatory as it is necessary to fulfil legal and fiscal obligations; refusal to provide such data will make it impossible to establish relations with the company.
3. Communication to third parties and dissemination of data
The personal data of the Data Subjects, should it be necessary for the purposes set out in this information notice, may be communicated to
- all subjects whose right of access to such documents is recognised by virtue of a regulatory provision
- appointees, employees and/or collaborators, also external, each within the sphere of their respective duties, of whose work SARA SRL avails itself for the performance of its activities and for the purposes referred to in this informative report;
- other companies connected to SARA SRL for the purposes referred to in this statement;
- suppliers of technological services whose support is used by SARA SRL
- all subjects formally appointed as data processors.
The data will not be disseminated.
4. Particular data ( ex "sensitive" data)
The collection, processing and communication of special data may be carried out by SARA SRL as part of the execution of the activities referred to in item 1, provided that the interested party has given their consent.
5. Processing methods
SARA SRL processes the personal data of the interested parties in a lawful and correct manner and in such a way as to ensure confidentiality and security. The processing is carried out, by means of manual, computerised and telematic instruments, with organisational methods and logics strictly related to the indicated purposes.
Personal data will be processed in paper, computerised and telematic form and entered into the relevant databases that can be accessed by those responsible for data processing.
Processing may also be carried out by third parties who provide specific processing, administrative or instrumental services necessary for the achievement of the aforementioned purposes.
The data provided will be kept for the entire duration of the contractual relationship and up to 10 years in all those cases in which there are fulfilments related to the services provided that require it.
6. Rights of the Data Subject under Articles 15, 16, 17 18, 20, 21 and 22 of EU REG. 2016/679
In relation to the processing of personal data, the data subject is entitled to the rights set out in Article 7 of the Privacy Code.
Article 15-Right of access
The data subject shall have the right to obtain from the data controller confirmation as to whether or not personal data concerning him or her are being processed and, if so, to obtain access to the personal data and information concerning the processing.
Article 16 - Right of rectification
The data subject has the right to obtain from the controller the rectification of inaccurate personal data concerning him without undue delay. Bearing in mind the purposes of the processing, the data subject has the right to obtain the integration of incomplete personal data, including by providing a supplementary declaration.
Article 17 - Right to erasure (right to be forgotten)
The data subject shall have the right to obtain from the controller the erasure of personal data concerning him/her without undue delay, and the controller shall be obliged to erase the personal data without undue delay.
Art. 18 - Right to restriction of processing
The data subject has the right to obtain from the controller the restriction of processing when one of the following cases occurs
(a) the data subject contests the accuracy of the personal data, for the period necessary for the controller to verify the accuracy of such personal data;
(b) the processing is unlawful and the data subject objects to the erasure of the personal data and requests instead that their use be restricted
(c) although the controller no longer needs the personal data for processing purposes, the personal data are necessary for the establishment, exercise or defence of legal claims by the data subject
(d) the data subject has objected to the processing pursuant to Article 21(1), pending verification as to whether the legitimate reasons of the controller prevail over those of the data subject.
Article 20 - Right to data portability
The data subject has the right to receive in a structured, commonly used and machine-readable format the personal data concerning him/her that he/she has provided to a data controller and has the right to transmit those data to another data controller without hindrance from the data controller to whom he/she has provided them.
When exercising his or her data portability rights under paragraph 1, the data subject has the right to obtain the direct transmission of personal data from one controller to another, if technically feasible.
Article 21 - Right to object
The data subject shall have the right to object at any time, on grounds relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Art.
Article 22 - Right not to be subject to automated decision-making, including profiling
The data subject has the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning him or her or significantly affects him or her in a similar way.
In order to obtain any information regarding the processing of their personal data, Data Subjects may contact the persons indicated in the following point.
7. Identification details of the data controller and data processor
The data controller is SARA SRL , with registered office in Via Gorizia, 13 - 64011 Alba Adriatica (TE) and operating headquarters in Via Kennedy, 9 - 64013 Corropoli (TE) VAT NO. 01460200676
Anyone interested in more information, in contributing their own suggestions or in filing complaints or disputes concerning the company's privacy policies or the way in which the Data Controller processes personal data may do so by writing to the following e-mail addresses info@sarabags.it
8. Intention to transfer data abroad
We inform you that it is the intention, where applicable, of the controller to transfer personal data to a third country or international organisation.
Such a transfer, to countries outside the EU, may only take place if there is an adequacy decision from the European Commission or, in the case of transfers pursuant to Article 46 or 47, or Article 49, second paragraph, if there is a reference to appropriate or adequate safeguards and the means to obtain a copy of such data or the place where such data was made available.
9. Revocation of consent to processing
You may revoke your consent to the processing of your personal data by writing to info@sarabags.it or by calling 0861.758076.
At the end of this operation your personal data will be removed from the archives as soon as possible.
If you would like more information on the processing of your personal data, or if you would like to exercise your rights as set out in point 7 above, you can write to info@sarabags.it or call 0861.758076