© 2023 Cereal Docks Spa Società a Socio Unico - P.Iva: 02218040240 - Reg. Imp. di Vicenza 215209 - Cap. Soc. 10.000.000 € i.v.

INFORMATION NOTICE

PROCESSING CONTACT DATA AND REQUEST FOR INFORMATION WEBSITE

pursuant to art. 13 of (EU) Regulation 2016/679 of the European Parliament and Council dated 27 April 2016
Pursuant to article 13 of the General Regulation on the Protection of Data – (EU) Regulation 2016/679 of the European Parliament and Council dated 27 April 2016 related to the protection of the personal data of natural persons and the free circulation of that data (hereinafter “GDPR”), we would like to provide you with some information on the processing of your personal data provided in the relationship with Cereal Docks S.p.A.

DATA CONTROLLER

The Data Controller is Cereal Docks S.p.A., with registered office in Camisano Vicentino (VI) Via dell’Innovazione no. 1, tax code and Vicenza Register of Companies registration number: 02218040240 (hereinafter “Controller” or “Company”).

PERSON RESPONSIBLE FOR THE PROTECTION OF DATA OR DATA PROTECTION OFFICER (HEREINAFTER “RPD” OR “DPO”)

The Controller avails itself of the group DPO appointed pursuant to art. 37, paragraph 2 of the GDPR. The DPO contact data can be found on the website of the Controller or at the registered office. To exercise your rights and for any communication, problem and/or request for clarification concerning the protection of your personal data, you may contact the DPO freely.

Obligatory purposes for which processing your data does not require your consent

PURPOSES
To manage the archiving and storage of data, sending information and communications, even electronically, requested by you through the Company website, sending documents related to relations with the Company.
LAWFULNESS OF PROCESSING

(Art. 6, paragraph 1, letter c), GDPR)
Processing is necessary for compliance with a legal obligation to which the Controller is subject
(Art. 6, paragraph 1, letter f), GDPR)
Processing is necessary for the purposes of the legitimate interests pursued by the Controller connected to the organisational and administrative management of its organisation.

Optional purposes for which processing your data requires your consent

PURPOSES

Promotional and marketing activities with the supply of material and information on new products, special offers, discounts, facilitations and other services of interest connected to its activity, even by sending the specific material in a paper and/or digital format, through a newsletter (e-mail, sms, mms, instant messaging);
sending information and news on the Company and its activities by newsletter (e-mail, sms, mms, instant messaging); invitations to events organised or sponsored by the Company;
conducting market and/or customer satisfaction surveys.

LAWFULNESS OF PROCESSING

(Art. 6, paragraph 1, letter a), GDPR)
Data subject consent

THE CEREAL DOCKS GROUP COMPANIES AND THE THIRD PARTIES THAT YOUR PERSONAL DATA MAY BE COMMUNICATED TO ACT AS:
  • data controllers, that is parties deciding the purposes and means of processing personal data;
  • processors, that is parties processing personal data on behalf of the Controller;
  • data co-controllers who jointly decide purposes and methods with the Company.
The list and updated information on the parties identified as controllers, processors or co-controllers is available c/o the Company.

Personal data storage period

Here below please find information on the personal data storage period or, if not possible, the criteria used to establish that period.

PERSONAL DATA AND DOCUMENTS

Personal details and documents related to the relationship with the Company

STORAGE PERIOD OR CRITERIA APPLIED TO ESTABLISH IT

For the duration needed to pursue the processing purposes and subsequently, within limits granted by law, for administrative and accounting purposes, and also to enforce or protect the rights of the Controller, when needed

Rights of the data subject

We would like to inform you of the presence of some rights established by the GDPR related to personal data and processing that you may request from the Controller.
RIGHTDESCRIPTIONHOW TO MAKE IT EFFECTIVE
Right to withdraw consent (art. 13, paragraph 2, letter c)
You have the right to withdraw consent to processing, without affecting the lawfulness of processing based on consent before its withdrawal
Forms on website or available from the Controller
Right of access by the data subject (art. 15)
You may request: a) the purposes of the processing; b) the categories of personal data concerned; c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations; d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing; f) the right to lodge a complaint with a supervisory authority; g) where the personal data are not collected from the data subject, any available information as to their source; h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject. You have the right to obtain a copy of the personal data being processed
Forms on website or available from the Controller
Right to rectification (art. 16)
You have the right to obtain rectification of inaccurate personal data concerning you and to have incomplete personal data complete
Forms on website or available from the Controller
Right to be forgotten (art. 17)
You have the right to have the personal data concerning you erased by the Controller if the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed
Forms on website or available from the Controller
Right to restriction of processing (art. 18)
You have the right to ask the controller to limit processing when the accuracy of the personal data is contested (for a period enabling the controller to verify the accuracy of the personal data) or if processing is unlawful, but you oppose the erasure of the personal data and request the restriction of their use instead, or if they are needed by you to for the establishment, exercise or defence of legal claims, whereas they are no longer needed by the Controller.
Forms on website or available from the Controller
Right to data portability (art. 20)
You have the right to receive the personal data concerning you, which you provided to a controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller where: (i) the processing is carried out by automated means, unless processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller and does not adversely affect the rights and freedoms of others.
Forms on website or available from the Controller
Right to object (art. 21)
You have the right, at any time, to fully or partially object to the processing of your personal data if that processing is performed to pursue a legitimate interest of the Controller or for direct marketing purposes.
Forms on website or available from the Controller
Right to lodge a complaint with a Supervisory Authority (art. 77)
You have the right to lodge a complaint with a Supervisory Authority if you consider that the processing of personal data relating to you infringes the GDPR.
Exercising those rights is subordinate to the limits, rules and procedures envisaged by the GDPR and that the data subject must know and implement. Moreover, in compliance with article 12, paragraph 3, the Controller will provide the data subject with information on the action taken without undue delay; in any case, at the latest within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests The controller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay.

Amendments and updates

La presente informativa può essere soggetta a modifiche e/o integrazioni, anche quale conseguenza dell’applicabilità del GDPR e di eventuali future modifiche e/o aggiornamenti normativi.
L’informativa aggiornata è costantemente disponibile sul sito web del Titolare.

This information notice could be amended and/or integrated, also as a result of GDPR applicability and any future regulatory amendments and/or updates. The updated information is constantly available on the Controller’s website. The personal data provided may be processed by the Controller with and without digital instruments.
We would also like to inform you that communication of your personal data for the obligatory purposes indicated is a legal or contractual obligation or needed to perform the contractual obligations. You are therefore obliged to provide the personal data as it will otherwise not be possible to manage relations with the Company.