Alpina Italiana Spa, with registered office in Via Fondovilla, 86 36010 Carrè (VI), VAT no. 03555540248 (hereinafter, “Alpina Italiana”), as the data controller, informs you, in accordance with art. 13 of Legislative Decree no. 196 of 30.6.2003 (hereinafter, “Privacy Code”) and art. 13 of EU Regulation no. 2016/679 (hereinafter, “GDPR”), that your data will be processed in the following ways and for the following purposes:
1. Purpose of the processing
Alpina Italiana processes personal and identification data (e.g., first name, last name, company name, address, telephone number, e-mail address, bank and payment references – hereinafter referred to as “personal data” or “data”) provided by you in connection with the conclusion of contracts for Alpina Italiana services.
2. Purpose of the processing
Your personal data are processed without your express consent (art. 24 lett. a), b), c) of the Privacy Code and art. 6 lett. b), e) of the GDPR), for the following service purposes:
- to conclude contracts for the services of Alpina Italiana;
- to fulfill pre-contractual, contractual and fiscal obligations arising from the relationship with you
- fulfilling obligations required by law, regulation, EU legislation or an order from the Authority (such as anti-money laundering);
- to exercise the rights of Alpina Italiana, such as the right to legal defense.
3. Modalities of processing
The processing of your personal data is carried out by means of the operations indicated in art. 4 of the Privacy Code and art. 4 n. 2 of the RGPD, namely: collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, erasure and destruction of data. Your personal data will be processed on paper and electronically and/or automatically. Alpina Italiana will process personal data for the time necessary to achieve the above-mentioned purposes and, in any case, for a maximum period of 10 years from the end of the relationship for the purposes of the service.
4. Access to data
Your data may be made accessible for the purposes of Article 2:
- to the employees and collaborators of Alpina Italiana, in their capacity as managers and/or internal data processors and/or system administrators;
- to third party companies or other entities (e.g. credit institutions, professional firms, consultants, insurance companies for the provision of insurance services, etc.) that perform outsourcing activities on behalf of Alpina Italiana, in their capacity as external data processors.
5. Disclosure of data
Without needing your express consent (e.g. art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR), Alpina Italiana may communicate your data for the purposes referred to in art. 2 to supervisory bodies (such as IVASS), judicial authorities, insurance companies for the provision of insurance services, as well as to entities to which communication is required by law for the fulfillment of the above-mentioned purposes. These persons will process the data in their capacity as independent data processors. Your data will not be disseminated.
The data is stored and controlled by adopting appropriate preventive security measures, aimed at minimizing the risks of loss and destruction, unauthorized access, unauthorized processing and processing not in accordance with the purposes for which the processing is performed.
7. Transfer of data
The processing and storage of personal data takes place on the territory of the European Union.
8. Rights of the data subject
In your capacity as a data subject, you have the right under Article 15 of the GDPR, and in particular the right to:
i. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet recorded, and their communication in intelligible form;
ii. to obtain information on: a) the origin of the personal data; b) the purposes and methods of the processing; c) the logic applied in case of processing carried out with the help of electronic instruments; d) the identity of the holder, of the persons in charge and of the representative appointed under art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1 of the GDPR; e) the subjects or categories of subjects to whom the personal data may be communicated or who may become acquainted with it in the capacity of designated representative in the territory of the State, of the persons in charge or of the persons in charge of the processing; f) the identity of the data controller and of the representative designated pursuant to art. 5, paragraph 2 of the Privacy Code and art. 3, paragraph 1 of the GDPR; g) the identity of the data controller and of the persons in charge of the processing
iii. obtain: (a) the updating, rectification or integration of data ; b) the erasure, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is unnecessary for the purposes for which the data were collected or subsequently processed c) certification that the operations referred to in letters a) and b) have been notified, including with regard to their content, to the entities to which the data were communicated or disseminated, unless this requirement proves to be impossible or involves a manifestly disproportionate effort in relation to the right to be protected;
iv. to object, in whole or in part, on legitimate grounds, to the processing of your personal data, even if relevant to the purpose of collection. Where applicable, you also have the rights set forth in Articles 16 to 21 of the GDPR (right to rectification, right to be forgotten, right to limit processing, right to data portability, right to object), as well as the right to lodge a complaint with the data protection authority.
9. How to exercise your rights
You can exercise your rights at any time by sending a communication:
- by e-mail, to the address: firstname.lastname@example.org
- or by post to the following address: Alpina Italiana Spa, Via Fondovilla 86 – 36010 Carrè (VI).
10. Owner, manager and designated persons
The person in charge of data processing is Alpina Italiana Spa. The updated list of the persons in charge of the processing is kept and can be consulted at the headquarters of the data controller.