privacy

Scatolificio al Capriccio dei F. LLI MAGRO
Via Pola, 4 – 35010 Vigonza (Pd)
C.C.I.A.A. PD REA n 77888

Italian Personal Data Protection Code -  Legislative Decree no. 196 of 30 June 2003

Dear customer,

We hereby declare that Italian Legislative Decree no. 196 from June30th 2003 – Personal Data Protection Code – provides for the protection of natural or legal persons with regard to the processing of personal data.

Pursuant to this decree, the processing of data supplied shall be governed by principles of correctness, lawfulness and transparency, protecting your rights, particularly with regard to confidentiality.

In accordance with Article 13 of Italian Legislative Decree no. 196/2003 – Personal Data Protection Code – you are informed that:

1. The personal data you provide may be processed for the purpose of proceeding with booking, availability, accountability and taxation purposes

2. Data will be processed by manuale and electronic means.

3. The provision of data is obligatory. Failure or refusal to provide accurate information will result in the cancellation of the booking contract and the inability of any booking, availability, accountabilty and information request to proceed.

4. Data will only be disclosed to third parties involved in the booking contract and the processing of requests. We will not disclose data except in accordance with this.

5. The data controller is Scatolificio al Capriccio dei F. LLI MAGRO nella persona di Concetta Spataro, amministratore delegato.

6. The data subjects may, at any moment, exercise all the rights set forth in Section 7 of Legislative Decree no. 196/2003, available here for easy reference:

Section 7

(Right to Access Personal Data and Other Rights)

1. A data subject shall have the right to obtain confirmation as to whether or not personal data concerning him exist, regardless of their being already recorded, and communication of such data in intelligible form.

2. A data subject shall have the right to be informed

a) of the source of the personal data;

b) of the purposes and methods of the processing;

c) of the logic applied to the processing, if the latter is carried out with the help of electronic means;

d) of the identification data concerning data controller, data processors and the representative designated as per Section 5(2);

e) of the entities or categories of entity to whom or which the personal data may be communicated and who or which may get to know said data in their capacity as designated representative(s) in the State’s territory, data processor(s) or person(s) in charge of the processing.

3. A data subject shall have the right to obtain

a) updating, rectification or, where interested therein, integration of the data;

b) erasure, anonymization or blocking of data that have been processed unlawfully, including data whose retention is unnecessary for the purposes for which they have been collected or subsequently processed;

c) certification to the effect that the operations as per letters a) and b) have been notified, as also related to their contents, to the entities to whom or which the data were communicated or disseminated, unless this requirement proves impossible or involves a manifestly disproportionate effort compared with the right that is to be protected.

4. A data subject shall have the right to object, in whole or in part,

a) on legitimate grounds, to the processing of personal data concerning him/her, even though they are relevant to the purpose of the collection;

b) to the processing of personal data concerning him/her, where it is carried out for the purpose of sending advertising materials or direct selling or else for the performance of market or commercial communication surveys.

Section 24

(Cases in Which No Consent Is Required for Processing Data)

1. Consent shall not be required in the cases referred to in Part II as well as if the processing

a) is necessary to comply with an obligation imposed by a law, regulations or Community legislation;

b) is necessary for the performance of obligations resulting from a contract to which the data subject is a party, or else in order to comply with specific requests made by the data subject prior to entering into a contract;

c) concerns data taken from public registers, lists, documents or records that are publicly available, without prejudice to the limitations and modalities laid down by laws, regulations and Community legislation with regard to their disclosure and publicity;

d) concerns data relating to economic activities that are processed in compliance with the legislation in force as applying to business and industrial secrecy;

e) is necessary to safeguard life or bodily integrity of a third party. If this purpose concerns the data subject and the latter cannot give his/her consent because (s)he is physically unable to do so, legally incapable or unable to distinguish right and wrong, the consent shall be given by the entity legally representing the data subject, or else by a next of kin, a family member, a person cohabiting with the data subject or, failing these, the manager of the institution where the data subject is hosted. Section 82(2) shall apply;

f) is necessary for carrying out the investigations by defence counsel referred to in Act no. 397 of 07.12.2000, or else to establish or defend a legal claim, provided that the data are processed exclusively for said purposes and for no longer than is necessary therefor by complying with the legislation in force concerning business and industrial secrecy, dissemination of the data being ruled out;

g) is necessary to pursue a legitimate interest of either the data controller or a third party recipient in the cases specified by the Garante on the basis of the principles set out under the law, also with regard to the activities of banking groups and subsidiaries or related companies, unless said interest is overridden by the data subject’s rights and fundamental freedoms, dignity or legitimate interests, dissemination of the data being ruled out;

h) except for external communication and dissemination, is carried out by no-profit associations, bodies or organisations, recognised or not, with regard either to entities having regular contacts with them or to members in order to achieve specific, lawful purposes as set out in the relevant memorandums, articles of association or collective agreements, whereby the mechanisms of utilisation are laid down expressly in a resolution that is notified to data subjects with the information notice provided for by Section 13,

i) is necessary exclusively for scientific and statistical purposes in compliance with the respective codes of professional practice referred to in Annex A), or else exclusively for historical purposes in connection either with private archives that have been declared to be of considerable historical interest pursuant to Section 6(2) of legislative decree no. 499 of 29 October 1999, adopting the consolidated statute on cultural and environmental heritage, or with other private archives pursuant to the provisions made in the relevant codes.