INFORMATION ON THE PROCESSING OF CUSTOMER PERSONAL DATA PURSUANT TO REG. EU no. 2016/679 (“GDPR” )
HOLDER OF THE TREATMENT
Corporate name: Digitransformer Ltd
Address: 9 De Montfort Street, Leicester, LE1 7GE
Telephone: +44 7375 557274
TYPES OF DATA, PURPOSE OF THE PROCESSING
The collection and treatment will be carried out on the following types of data:
Identification data: name, surname, tax identification number, etc.
Contact details: telephone number, e-mail, address, etc.
For the following objectives:
Establishment and execution of the contractual relationship
Fulfill obligations under applicable regulations and legislation
If necessary, to ascertain, exercise or defend the rights of the owner in court or out of court
Marketing: e.g. sms and e-mails, telephone calls with operator and traditional mail for promotional and commercial proposals relating to services / products offered by the Company or reporting of corporate events, as well as carrying out market studies and statistical analyzes
Profiling: analysis of the preferences, habits, behaviors or interests of the customer to send personalized commercial communications
LEGAL BASIS OF THE PROCESSING
The legal bases of the applicable processing identified by the GDPR are:
Execution of a contract in which you are a party
Need to fulfill legal obligations
Legitimate interest of the owner: improvement of the service provided
Optional and revocable consent at any time without prejudice to you also in relation to the treatments based on the consent given before the revocation
DATA RETENTION OR CRITERIA FOLLOWED TO ESTABLISH SUCH PERIOD
The data retention period is determined in the following periods:
10 years after the termination of the contract
In the event of a dispute for the duration of the dispute and for the terms of appeal F
or marketing purposes: 24 months from their registration
For profiling purposes: 12 months from their registration
Once the aforementioned storage terms have elapsed, the data will be destroyed, deleted or made anonymous, compatibly with the state of the art of the technique.
OBLIGATION TO PROVIDE DATA
The provision of data for the purposes referred to in letters a), b) and c) above are mandatory. In case of failure to provide data, it will not be possible to proceed with the contractual relationship.
THIRD PARTIES ADDRESSED TO THE DATA
The data can be transmitted to subjects other than the owner.
The data may also be transmitted to subjects who process them on behalf of the Company as Data Processors on the basis of a legally binding agreement to protect data protection.
Individual Categories e.g.:
IT suppliers (e.g. data back-up services, e-mail, WEB / cloud computing, hosting, network monitoring, e-mail sending, website maintenance, etc.)
Consultants (e.g. pay slips, competent doctor, workplace safety, professionals, etc.)
Authorities and supervisory and control bodies, public or private subjects who have the right to request data
The list of Managers is constantly updated and available at the headquarters of the Data Controller
SUBJECTS AUTHORIZED TO TREATMENT
The data may be processed by workers in relation to their job, expressly authorized and adequately instructed in the treatment.
NO TRANSFER OF DATA IN THIRD COUNTRIES (EXTRA EU / EEA)
RIGHTS OF THE INTERESTED PARTY COMPLAINT TO THE SUPERVISORY AUTHORITY
Data subjects have the following rights:
knowing if a data processing is in progress, for what purposes, on what data, recipients or categories of recipients to whom the personal data have been or will be communicated, when possible, the retention period of the personal data provided or, if not it is possible, the criteria used to determine this period, what the rights of the interested party are, information on their origin, if an automated decision-making process is in progress, including profiling (at least in such cases with significant information on the logic used, importance and consequences of this process), what are the adequate guarantees if the data is transferred to a third country.
Obtain a copy of the personal data being processed without infringing the rights and freedoms of others correction of incorrect data and integration taking into account the purposes of the processing, cancellation in the following cases: personal data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; the interested party revokes consent if there is no other legal basis for the processing; the interested party opposes the processing in the absence of prevailing contrary rights or obligations; personal data have been unlawfully processed; there is a legal obligation in this sense for the Owner; personal data have been collected in relation to the offer of services on the internet limitation to the processing for contestation on the accuracy of the data, for illegal treatment because excessive, for the assessment, exercise or defence of a right in court (even if the owner no longer needs the data), in case of opposition (pending verification of the existence of this right in practice) opposition (in case of processing necessary for the execution of a public interest task or for the legitimate interest of the Data Controller, including profiling) for reasons connected to the particular situation of the interested party, except for the prevalence of other public interest rights or obligations of law opposition to the receipt of commercial communications with automated methods (e-mail, etc.) for treatment for direct marketing purposes, including profiling portability of data in common and interoperable electronic format, also directly to another Operator if technically possible, in case of treatment with automated tools In the cases referred to in letters b), c) and d) the data controller informs each of the recipients to whom the personal data have been transmitted of any corrections or cancellations or limitations of the processing carried out unless this proves impossible or involves a disproportionate effort .
For further information, please refer to the company policy relating to the processing of personal data in the workplace, available from the Data Controller.
For the exercise of his rights, the interested party can contact:
Data subjects have the right to lodge a complaint with the competent supervisory authority in the Member State in which they habitually reside or work or in the State in which the alleged violation occurred.