PRIVACY NOTICE art. 13 – ART. 14 |General Data Protection Regulation (GDPR) UE 2016/679
Altea Federation, is a brand under which some business consulting companies collaborate in a FEDERATIVE MODEL by providing their clients with a wide range of consultancy services, MANAGEMENT AND INNOVATIVE INFORMATION SOLUTIONS.
Altea Federation is committed to protecting and respecting the personal data of Clients and of anyone who relates to it, ensuring the compliance with current legislation such as the Regulation (EU) 2016/679 – General Data Protection Regulation (“GDPR”).
“Personal data”, are “any information relating to an identified or identifiable natural person (‘data subject’); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person”; as per GDPR art. 4.1
The GDPR provides that before proceeding with the processing of Personal data (where “Processing” means “any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction”, as per GDPR art. 4.2) the natural person to whom the Personal data refers, is duly informed about reasons for which such data are requested and how they are used.
With this Privacy Notice we want to tell you the purposes of the processing for which your personal data are intended, how we may use your personal data and how we protect them, according to GDPR.
Where necessary, this notice may be supplemented by a form for the release of your consent pursuant to and for the purposes of art. 7 of GDPR.
The Data controller is Altea S.p.A., Registered Office: Feriolo di Baveno (VB), Strada Cavalli, 42, registered at Italian Business Register of IT-Verbania (VB), tax and VAT number: 01440580031.
The Data controller is “the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for its nomination may be provided for by Union or Member State law”, as per GDPR art. 4.7:
Some data processing, as identified in the following Article 4, will be done in collaboration with the following subjects (“Joint controllers” with Altea S.p.A. according to GDPR, art. 26.1: “Where two or more controllers jointly determine the purposes and means of processing, they shall be joint controllers”):
In accordance with GDPR art. 26 the aforementioned Joint controllers have concluded an agreement with which they have committed themselves to:
The Controller / Joint controller will process your Personal data that are necessary for the performance of one or more contracts to which you are party, or in order to take steps at your requests even before entering into a contract (e.g. downloading of informative material, participation in events and webinars, etc.) (GDPR, art. 6.1.b) and for compliance with legal obligations to which the Controller and the Jont Controllers are subject (e.g. admonistrative, accounting and tax obligations) (GDPR, art. 6.1.c).
The following additional Processing will be performed by the Controller / Joint controller without your consent, as it is necessary for the purposes of the legitimate interests pursued by the Controller / Joint controller, as per GDPR, art. 6.1.f:
Each email sent to you will contain the link to click to refuse further submissions.
The following data processing by the Controller / Joint controllers, will be performed only with your consent, as per GDPR, art. 6.1.a and 7:
Direct and Indirect marketing can be carried out both with traditional methods (e.g. paper mail, call from an operator, etc.) and with automated methods and/or assimilated (es. e-mail).
Your Personale data will be processed:
The data processed by the Contoller / Joint controllers will be personal data such as: name, surname, your company, your professional email and phone numbers.
The Controller / Joint Controller may communicate your data to the following Recipients.
A “Recipient” is “a natural or legal person, public authority, agency or another body, to which the personal data are disclosed, whether a third party or not”, as per GDPR, art. 4.9:
Personal data will be processed by the Controller / Joint controllers within the EU.
In the event that any technical and/or operational reasons makes it necessary, it may be necessary to make use of subjects which are outside the EU. In this case, the Controller / Joint controllers will designate these subjects as “Personal data Processor” as per GDPR, art. 28. Any transfer of Personal data outside EU will be done in compliance with the applicable laws. To protect your Personal data, appropriate guarantees will be adopted, including the “Adequacy Decisions” and the “Standard Contract Terms” approved by the European Commission.
Your data will be retained by the Controller to the extent necessary and sufficient for the accomplishment of the purposes described in Art. 3 above, or until the termination of the relationship with the Controller except for a further retention period which may be imposed by law.
With reference to the purposes described in Art. 4 above, the Joint controllers will process your Personal data until you communicate your will to revoke your consent to one or all of the purposes for which it was requested.
Under GDPR, you have rights we need to make you aware of. They are described in GDPR, art. 15-22 (click here to view them). Here is a summary:
Your object to processing your Personal data for marketing purposes by automated means (e.g. email), will also be extended to the traditional means (e.g. paper mail), unless specific requests.
To execute any of these rights, please contact the Controller / Joint controllers
Finally, you have the right to lodge a complaint with a supervisory authority and the right to brigde if you think that the processing of your personal data is not compliant with the relevant laws.
It is always possible to withdraw your consent to receive commercial information from us, using the dedicated link in the e-mails we send you, or by sending a written communication to the Controller / Joint controllers.
Data Controller: Altea S.p.A., Registered Office: Feriolo di Baveno (VB), Strada Cavalli, 42, registered at Italian Business Register of IT-Verbania (VB), tax and VAT number: 01440580031.
The list of data processors and of authorised persons is kept at the Controller’s offices
This Privacy Notice may be changed. For update, we invite you to consult our websites and other channels made available by Altea Federation.