Privacy Policy
Personal data processing Informative according to and for the effect of Section 13 of EU Reg.2016/679
According to Regulation (EU) 2016/679 (General Data Protection Regulation) we provide you with the due information concerning the processing of collected personal data. This privacy policy is given pursuant to art. 13 Regulation UE 2016/679 (General Data Protection Regulation).
Data Controller
Roundue with legal headquarter in Via Lecco, 8 – 20124 Milano (MI)
| Purpose of the processing | Legal Basis of the processing | Data retention period |
| Website browsing | Legitimate Interest| Rights of the interested party Activities strictly related to site operations and to platform browsing service provision |
Until the end of the browsing session |
| Contact request – Information request | Legitimate interest | Subjects request | 1 year |
| On-line shop and related administrative-accounting activities (including registration) | Legitimate interest | Subjects request Contract Art. 6 letter b) GDPR: the processing of personal data is necessary for the execution of the contract to which the interested party is a party (E-Commerce) |
Until opposition 10 years or different legal term set forth under article 2220 of the Italian Civile Code |
| Direct marketing through newsletter to promote products or services of the Controller similar to those already purchased by data subject (“soft spam”) | Legitimate interests pursued by the controller to carry out direct marketing activities to its customers | Until opposition |
Data Conferral
Apart from what specified on navigation data, the subject is free to furnish personal data.
The provision of personal data is mandatory or optional depending on the purpose for which the data is processed. Whether data are not provided, the data controller won’t be able to provide his service.
Recipients of the data
Personal data provided by you may be communicated to recipients who will act as Processors (art. 28 of the Reg. EU 2016/679) and/or persons acting under the authority of the Controller and the Processor (art.29 of the Reg. UE 2016/679) for the purposes pointed ahead. Precisely, your data may be communicated to recipients part of the following categories:
– subjects providing services for the management of the information system used by Roundue, and telecommunications networks:
– studies or companies in the context of assistance and consultancy relationships;
– subjects providing services related to the management of the above mentioned purposes (communication, brochure printing, fliers, websites, videos);
– platform operators for the abovementioned services (websites hosting, etc);
– Commercial partners, upon consent;
– Competent authorities for compliance with legal obligations and / or provisions of public bodies, upon request;
Transfer of the data to a third country and/or international organization
The Personal Data provided will not be transferred to countries outside the European Union.
Rights of the interested party – complaint before the data protection authority
You may freely exercise your rights at any time under Reg. EU 2016/679 –GDPR, Sections15, 16, 17, 18, 19, 20, 21 by contacting the Data Controller – Roundue in person of its legal representative sending an email to info@roundue.com.
You have the right, at any time, to obtain confirmation from the Data Controller as to whether or not personal data concerning you are being processed, request their rectification or erasure. Moreover You have the right, at any time, to oppose to personal data processing (also to profiling) without prejudice to lawfulness of processing. Without prejudice to any other administrative or judicial remedy, in case you consider your data processing in contrast with Reg. UE 2016/679, pursuant to article 15 lett. f) of Reg. UE 2016/679, you have the right to lodge a complaint with a supervisory authority and, pursuant to article 6 paragraph no. 1, lett. a) and article 9, paragraph no. 2, lett. a), you have the right to revoke your expressed consent at any time. Exercising your right to data portability, the Data Controller may provide your personal data in a structured, commonly used and machine-readable format subject to the provisions set forth in paragraphs 3 and 4 of art. 20 of Regulation EU 2016/679.
Informative amendments: Data processor retains the right to modify, update, add or remove some parts of this informative at any time.
