Policy
The current policy is made under the art. 13 of UE Regulation 679/2016 from Alma Fashion srl located in Forlì, via Barsanti 39, as controller to whom access to the web site and complete the form “contacts” by authorising the company to process his/her Personal Data.
The transmission of the Personal Data is optional. Refusing to provide the data leads to the result that we cannot elaborate and follow up on the requests received.
Purposes of the processing
The Personal Data provided by the users are processed for the purpose to elaborate and follow up on user’s requests.
Legal basis
The Personal Data provided by the users are lawfully processed in order to follow up on the execution of the pre-contractuals mesures or contractual obligations (art.6 par. 1 lett. b) of the Regulation 679/2016, required by the users themselves (request sent by completing the form)
Recipients of the data
The Personal Data provided by the users will not be communicated to third party. They could be communicated to controller’s employees and contractors who will process the data in compliance with the instructions given by the controller.
The processor
If necessary, the Personal Data provided can be processed by a person charged by the company for activities linked to the maintenance of the web site. This person is designated as the processor under art. 28 of the UE Regulation 679/2016
Data storage
The user’s Personal Data will be processed for the time necessary to complete the above purposes.
Rights of the data subject
Under articles 13, paragraph 2, and from 15 to 21 of the EU regulation 2016/679, we inform you that, as regards the processing of your Personal Data, you may exercise the following rights:
a) Right to obtain access to the Personal Data and to the following informations:
- the confirmation that the data procesing is taking place;
- the purposes of the processing;
- the categories of the Personal Data;
- the recipients or categories of recipients to whom the data have been disclosed or will be disclosed;
- all the informations concerning the source of the data in the event that the data are not collected by the data subject;
- the existence of an automated decision-making process, including profiling;
- a copy of the Personal data which are being processed.
b) Right of rectification and integration of the Personal Data;
c) Right to the erasure of data (“right to be forgotten”)where one of the following grounds applies:
- the Personal Data are no longer needed for the purposes for which they were collected or processed.
- The data subject withdraws consent to the data processing and there is no other legal ground for the processing;
- The data subject objects to the processing and there are no overriding legitimate grounds for the processing;
- The Personal Data have been unlawfully processed;
-
The Personal Data must be deleted in order to comply with a legal obligation under Union law or the Member State to which the controller is subject;
The data subject, if he/she has disclosed the Personal Data and is required to erase such Personal Data, must inform the controller who process the data of the request for erase any link, copy or reproduction of the Personal Data.
d) Right of restriction of the data processing when:
- The data subject contests the accuracy of Personal Data, for the period necessary for the data subject to verify the accuracy of the Personal Data;
- the processing is unlawful and the data subject opposes the erasure of the Personal Data and requests the restriction of their use instead;
- Although the data subject no longer needs for the processing purposes, the Personal Data are necessary for the data subjects for the establishment, exercise or defence of legal claims;
- The data subject has objected to processing, pending the verification whether the legitimate grounds of the controller override those of the data subject.
e) Right to lodge a complaint with Guarantor for the protection of Personal Data, according to the procedures and the indications published on the official website of the competent authority www.garanteprivacy.it
f) Right to data portability which is the right to receive, in a structured format, machine-readable form, the Personal Data provided to a controller and forwarded to another controller, if the processing is based on consent or on contract and carried out by automated means. Where possible, the data subject has the right to obtain a direct data feed from one controller to another.
g) Right to object at any time to the processing data, including profiling, in particular when:
- The data processing is made on the basis of legitimate interest of the controller, prior specifying the grounds of the opposition;
- The Personal Data are processed for direct marketing purposes.
h) Right not to be subject to a decision based solely on automated processing, including profiling, unless the decision is necessary for the conclusion or performance of a contract between the data subject and the controller, the decision is authorised by Union or Member State law to which the controller is subject or is based on the data subject’s explicit consent.
i) Right to withdraw his/her consent at any time.
The exercise of the rights shall not be subject to any constraint and it’s free of charge.
Procedure for the exercise of any right
The data subject may exercise his or her rights at any time by sending:
- a registered letter to ALMA FASHION SRL – 47122 Forlì – Via Barsanti 39
- an e-mail to alessandra.capacci@alma-fashion.it
Controller
The controller is ALMA FASHION SRL
Contacts: 0543721494