Who is the interested party? You? Find out your rights.
The data subject is the natural person to whom the data refers.
Data Protection Notice
exercise of the rights of data subjects
Version 24.06.2024 – MOD.INF.ESE.24-02
Introduction
Archiva S.r.l. a socio unico hereby informs you about the processing of your personal data carried out to process requests for the exercise of rights made through the website www.archivagroup.com. (hereinafter, “site”).
Archiva S.r.l. a socio unico with registered office in via Spagna 24, 37069, Villafranca di Verona (VR) assumes the role of Data Controller. This information is provided pursuant to art. 13 of Regulation (EU) 2016/679.
Purpose of processing legal bases
The personal data of the interested party will be processed:
- for purposes related to the processing of the request to exercise the rights made by the interested party;
Legal basis of the processing: fulfillment of a legal obligation (ART.6.1.C GDPR). - to assert and/or defend the rights of the Data Controller in extrajudicial and judicial proceedings, dispute management, transactions, arbitrations;
Legal basis of the processing: pursuit of the legitimate interest of the Data Controller (ART. 6.1.F GDPR).
Nature and manner of processing
The personal data transmitted by the interested party for the purpose of processing the report may be brought to the attention of employees or collaborators of the Data Controller and of any Data Processors appointed pursuant to art. 28 Regulation (EU) 2016/679 which, operating under the direct authority of the Data Controller, will process data and receive adequate instructions in this regard. The same will be done by any Data Controllers towards their employees or collaborators.
We inform you that personal data may be communicated, within the limits strictly pertinent to the aforementioned purposes, to the subjects essentially included in the following categories and whose complete list may be requested from the Data Controller at the following certified email address, which can also be reached by e- ordinary email:
- Law firms, consulting firms, notaries, accountants: for consultancy activities in their respective areas of professional competence.
- IT infrastructure maintenance companies, software suppliers: for normal HW/SW maintenance activities, software production and delivery or for any data restoration.
- Companies for the elimination of paper documentation: for the destruction of paper documentation.
- Certification Authority and accreditation Authority: for verification activities in order to obtain and/or maintain the certifications acquired by Archiva S.r.l. a socio unico
- Control bodies or authorities: for checks and controls in compliance with legal obligations, as well as in the event of complaints being submitted.
Duration of data processing and data retention
The personal data processed will be kept for the time necessary to fulfill the purposes indicated in points 1 and 2 of the "Purpose of processing and legal bases" section, safeguarding the Data Controller's right to defense. At the end of the investigation, the personal data of the interested party will be stored in a register specifically dedicated to requests to exercise rights. After 10 years from the conclusion of the investigation, the personal data will be destroyed or made anonymous, in compliance with the technical cancellation and backup procedures.
Data Protection Officer (DPO)
Archiva S.r.l. a socio unico, on a voluntary basis, has appointed a Data Protection Officer who can be contacted by e-mail
Below, by way of non-exhaustive example, are cases in which the DPO may be contacted and/or should be contacted:
- in the event that you want to exercise a right recognized by the European Regulation;
- in the event that you wish to contest the rejection of a request to exercise a right or you believe that the response was not satisfactory or did not arrive within the indicated timeframe;
- in the event that you believe you have suffered a violation of your personal data during the processing carried out by the Data Controller or Data Processor;
- in the event that it is believed that the information submitted to the interested party is not sufficiently clear and transparent;
- in the event that it is deemed necessary to receive clarifications or further information regarding the processing carried out on your personal data (purpose, legal basis of reference, storage times, methods of carrying out the processing, etc.);
- in the event that it is necessary to receive information in order to submit a complaint to the Supervisory Authority.
Rights of data subject
At any time data subject may exercise his rights towards the Data Controller pursuant to articles 15 to 21 of the GDPR whose regulatory provisions are referred to in full. The interested party will have the right to ask the Data Controller for access to his/her personal data, rectification, cancellation of the same or to oppose their processing, he/she will also have the right to request the limitation of the processing, as well as to obtain, in a format structured, commonly used and readable by automatic device, the data concerning you. Furthermore, the interested party may, at any time, revoke consent for processing based on this legal basis without prejudice to the lawfulness of the processing, based on consent, carried out before the revocation. Finally, the interested party may lodge a complaint with the competent Supervisory Authority if he believes that his rights have been violated, in violation of the principles of the GDPR according to the methods indicated for example on the Guarantor's website, accessible on the website www .garanteprivacy.it The exercise of the aforementioned rights can be activated by completing the appropriate form found on the website www.archivagroup.com or sent communication to the PEC address
Changes to the notice
This information notice may be subject to updates in compliance with national and European regulatory provisions as well as by virtue of operational choices made by the Data Controller. Unless otherwise specified, it will continue to apply to personal data processed up to that point.