AKERON S.r.l., with registered office in Lucca, Via Farnesi 141, REA number LU130470 and VAT number 01286330467, in the person of the legal representative pro tempore (hereinafter “the Data controller and owner“), informs you, with reference to the pursuant of the art. 13 D.Lgs. 30.6.2003 n. 196 (hereinafter, “Privacy Code”) and art. 13 EU Regulation n. 2016/679 (hereinafter, “GDPR”) that your data will be processed in the following manner and with the following purposes:
1. Data subject to processing
The Data controller and owner processes personal data, such as name, surname, company name, address, telephone number, e-mail address, bank and payment details – (hereinafter, “personal data” or even “data”) that you have communicated to us or that was collected by us as follows:
2. Data processing methods and treatment
The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2) GDPR, more precisely: the collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, cancellation and destruction of data. Your personal data is subject to both paper and electronic and / or automated processing.
The Data controller and Owner will process the personal data for the time necessary to fulfil the aforementioned purposes and in any case for no more than 10 years from the termination of the relationship for the purposes of service or until the request to cancel data for Marketing Purposes.
Your personal data shall be processed as follows:
A) without your express consent (Article 24 letter a), b), c) Privacy Code and art. 6 letter b), e) GDPR), for the following Service Purposes:
B) Only subject to your specific and distinct consent (articles 23 and 130 of the Privacy Code and article 7 of the GDPR), for the following Marketing Purposes:
3. Data Access
Your data may be accessible for the purposes referred to in art. 2.A) and 2.B):
4. Data comunication
Without express consent (pursuant to Article 24 letter a), b), d) Privacy Code and art. 6 letter b) and c) GDPR), the Data Controller may communicate your data for the purposes referred to in art. 2.A) to Supervisory Bodies (such as IVASS), Judicial Authorities, to insurance companies for the provision of insurance services, as well as to those subjects to whom the communication is mandatory by law for the accomplishment of said purposes.
These subjects will process the data in their capacity as independent data controllers.
Your information will not be disclosed.
5. Data transfer
Personal data is stored on servers located within the European Union or on servers located outside the EU. In this last case, the The Data controller and owner ensures that the transfer of non-EU data will take place in accordance with the applicable legal provisions, subject to stipulation of the standard contractual clauses provided by the European Commission.
6. Nature of providing data and consequences of refusal
The provision of data for the purposes referred to in art. 2.A) is mandatory. In their absence, we cannot guarantee the services of the art. 2.A).
The provision of data for the purposes referred to in art. 2.B) is optional. You can therefore decide not to give any data or to subsequently deny the possibility of processing data already provided: in this case, you will not be able to receive newsletters, commercial communications and advertising material concerning the Services offered by the Data Controller.
However, you will continue to be entitled to the Services referred to in art. 2.A).
7. Rights of the interested party
In your capacity as an interested party, you have the rights set forth in art. 7 of the Privacy Code and art. 15 GDPR and precisely the right to:
i. obtain confirmation of the existence of personal data concerning you, even if not yet registered, in an intelligible form;
ii. obtain the indication: a) of the origin of personal data; b) of the purposes and methods of the processing; c) of the logic applied in case of treatment carried out with the aid of electronic instruments; d) of the identification details of the the Data controller and owner, the managers and the designated representatives pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1, GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of it in their capacity as designated representative in the territory of the State, managers or representatives;
iii. obtain: a) updates, rectification or, when interested, the integration of data; b) the cancellation, transformation into an anonymous form or the blocking of unlawfully processed data, including data which does not need to be kept in relation to the purpose for which it was collected or subsequently processed;
c) declare that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data was communicated or disseminated, except in the case in which this fulfillment proves impossible o involves a use of means revealingly excessive for the protected right;
iv. object, in whole or in part: a) for legitimate reasons, to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for sending advertising or direct sales material or for carrying out market research or commercial information, through the use of automated call systems without the intervention of an operator by e-mail and / or through traditional marketing methods by telephone and / or via the post. It should be noted that the right of opposition of the interested party, set out in point b) above, for direct marketing purposes through automated methods extends to the traditional ones.
Where applicable, one also has the right to refer the Articles 16-21 GDPR (the Right of rectification, the right to be forgotten, the right of restriction of processing, the right to data portability, the right of opposition), as well as the right of complaint to the Antitrust authority.
8. Procedure for the exercise of any right:
One may exercise one’s rights by:
9. The the Data controller and owner, the director and the representatives
The the Data controller and owner of the data treated is Akeron Consulting S.r.l., with registered office in Lucca, Via Farnesi 141, tax code and VAT number 02457770465.
Data Protection Officer (DPO):
Dott.ssa Michela Turri
Address: Via Fontana, 22 – 20122 Milano
Contacts and contact details
Phone: +39 0583.578787
The updated list of the directors and representatives of the treatment is kept at the registered office of the The Data controller and owner of treatment.