LEGAL NOTICE AND PRIVACY POLICY
Privacy policy of www.distalcaribe.com and www.distalcaribe.it
INFORMATION PROCESSING DATA
EU REGULATION 679/2016 on the protection of individuals with regard to the processing of personal data, as well as the free circulation of such data.
Distal srl, with registered office in Rome, Via L. Bissolati, 54 - (PI 01933881003) proceeds to process data in accordance with the provisions of Regulation (EU) 2016/679 ("GDPR"), relating to the protection of persons with regard to the processing of personal data, as well as the free circulation of such data.
In accordance with articles 13 and 14 of the aforementioned regulation, information regarding the identification data of the data controller and the data controller with regard to the processing of personal data in connection with contracts and the provision of services is below below.
The data controller is Distal s.r.l. with registered office in Rome, Via L. Bissolati, 54. The data processor is Mr. Massimo de Donato, who can be contacted at the following email address: privacy@distal.it
Type of processed data
The data provided and processed by Distal s.r.l. They are: company name, first name, last name, date of birth, residence address, email address, telephone number, profession.
Purposes and methods of data processing.
Personal data is collected only by the user, during the stipulation of the contract, and will be processed exclusively for purposes strictly connected and instrumental for the fulfillment of the obligations inherent in relations with the Company, in particular:
The processing of personal data will be carried out through paper and computer support by the owner, the manager / managers and the persons in charge of the observance of each precautionary measure, which guarantees its security and confidentiality.
Nature of data collection and consequences of not providing data
The legal basis of the processing indicated in letters (a) to (d) of the previous paragraph is the execution of the stipulated contract, while the legal basis of the treatment indicated in letter (e) of the previous paragraph is the fulfillment of the obligations of legal entities to which the Company is subject as a data controller. However, in the client's personal data, it may not be possible to establish the contractual or cumulative relationship with the obligations
Communication and dissemination of data.
Personal data, for the purposes of the execution of the contract and for the purposes indicated above, may be disclosed to:
- natural and legal persons used by the owner in order to fulfill commercial, administrative, accounting and management obligations;
- banking institutions for the management of receipts and payments;
- our collaborators and employees specifically designated and within the scope of their functions.
Personal data may also be communicated to the subject (e.g. hotel, car rental company, tour operators, event organizer) providing the purchased service, who will act as the independent owner of your data and, in turn, you will provide the appropriate information.
Any communication will refer only to the data that are necessary for the purposes described above.
Personal data will be stored on servers located within the European Union.
Conservation period
- Personal data will be stored for the entire duration of the contractual relationship with the Company. After the termination of the contractual relationship, the Company will keep the personal data related to the execution of the contract for the fulfillment of contractual and legal obligations, also of a fiscal nature. Subsequently, the personal data related to the performance of the contract will be kept for a period that does not exceed the statute of limitations provided by law to possibly enforce or defend a right in court.
- If the data provided is not subject to any law, it will be kept for a period not exceeding five years. Beyond this period, personal data will be stored anonymously or destroyed.
- The data collected through online shopping carts will be stored in the databases of "www.distalcaribe.com" and www.distalcaribe.it for a maximum period of 12 months, after this period they will be deleted from this database and will be kept only for the duration listed above.
Possible existence of an automated decision-making process.
The data controller informs the data subject that this site does not have an automated decision-making process, therefore, in particular, there is no profiling system.
Minors
This website and the data controller services are not intended for persons under the age of 16 and the data controller does not intentionally collect personal information concerning minors. In the event that information about minors is involuntarily recorded, the Owner will delete them in a timely manner, at the request of users.
The rights of the interested party.
The interested party may exercise the rights referred to in articles 15 to 22 of European regulation 679/16:
Art. 15 - Right of access of the interested party 1. The interested party has the right to obtain from the controller confirmation that the processing of personal data concerning him / her is being carried out and, in this case, obtain access to data personal data and the following information: a) the purposes of the processing; b) the categories of personal data in question; c) the recipients or categories of recipients to whom the personal data have been or will be communicated, in particular if they are recipients from third countries or international organizations; d) where possible, the period of storage of the personal data provided or, if this is not possible, the criteria used to determine this period; e) the existence of the data subject's right to request the data controller to rectify or delete personal data or limit the processing of personal data concerning him or her or to oppose its processing; f) the right to lodge a complaint with a supervisory authority , g) if the data is not collected from the interested party, all available information on its origin; h) the existence of an automated decision-making process, including the elaboration of profiles referred to in paragraphs 1 and 4 of article 22, and, at least in such cases, important information on the logic used, as well as the importance and the expected consequences of such processing for the interested party 2. If the personal data is transferred to a third country or an international organization, the interested party has the right to be informed of the existence of adequate guarantees in accordance with article 46 in relation to the transference. 3. The data controller provides a copy of the personal data that is processed. In case the interested party requests more copies, the data controller may charge a reasonable fee based on administrative costs. If the interested party submits the request electronically, and unless the interested party indicates otherwise, the information is provided in a commonly used electronic format. 4. The right to obtain a copy mentioned in paragraph 3 must not affect the rights and freedoms of others.
Art. 16 - Right of rectification: the interested party has the right to obtain from the data controller the rectification of inaccurate personal data concerning him without undue delay. Taking into account the purposes of the processing, the interested party has the right to obtain the integration of incomplete personal data, also by means of a supplementary declaration.
Art. 17 - Right of cancellation: the interested party has the right to obtain from the data controller the deletion of the personal data concerning him without undue delay and the data controller has the obligation to delete the personal data without undue delay, if there is a of the following reasons: a) the personal data are no longer necessary with respect to the purposes for which they were collected or processed; 4.5.2016 EN Official Journal of the European Union L 119/43 (b) the data subject withdraws the consent on which the processing is based in accordance with Article 6 (1) (a) or Article 9 (2) letter a ), and if there is no other legal basis for the processing; c) the data subject opposes the processing in accordance with Article 21, paragraph 1, and there is no legitimate reason to proceed with the processing, or opposes the processing in accordance with Article 21, paragraph 2; d) the personal data has been unlawfully processed; e) personal data must be deleted in order to comply with a legal obligation established by the legislation of the Union or the Member State to which the data controller is subject; f) personal data have been collected in connection with the offer of information society services referred to in Article 8, paragraph 1. 2. If the data controller has disclosed personal data and is obliged, in accordance with the paragraph 1, to cancel them, taking into account available technology and implementation costs, takes reasonable measures, including technical ones, to inform data controllers who process personal data of the interested party's request to cancel any link, copy or reproduction of your personal data 3. Paragraphs 1 and 2 do not apply insofar as the processing is necessary: a) for the exercise of the right to freedom of expression and information; b) for the fulfillment of a legal obligation that requires the treatment provided by the law of the Union or of the Member State to which the data controller is subject or for the execution of a task carried out in the public interest or in the exercise of authority public of which the data controller is invested; c) for reasons of public interest in the field of public health in accordance with Article 9, paragraph 2, letters h) and i), and Article 9, paragraph 3; d) for archival purposes in the public interest, for scientific or historical research or for statistical purposes in accordance with Article 89, paragraph 1, to the extent that the right mentioned in paragraph 1 runs the risk of making it impossible or seriously affecting the achievement of the objectives of such treatment; or e) for the establishment, exercise or defense of a right in court.
Art. 18 - Right to limitation of treatment - 1. The interested party has the right to obtain the limitation of the treatment of the data controller when one of the following hypotheses occurs: a) the interested party questions the accuracy of the personal data during the period necessary for the data controller to verify the accuracy of such personal data; b) the processing is illegal and the data subject opposes the erasure of personal data and requests instead that its use be limited; c) although the data controller no longer needs it for processing, the personal data is necessary for the data subject to be able to determine, exercise or defend a right in court; d) the data subject has objected to the processing in accordance with Article 21, paragraph 1, pending verification regarding the possible prevalence of the legitimate reasons of the data controller over those of the data subject. 2. If the processing is limited in accordance with paragraph 1, such personal data will be processed, except for storage, only with the consent of the data subject or for the establishment, exercise or defense of a right in court or to protect rights of another natural or legal person or for reasons of significant public interest of the Union or of a Member State. L 119/44 EN Official Journal of the European Union 4.5.2016 3. The controller shall inform the data subject that he has obtained the limitation of processing in accordance with paragraph 1 before the limitation is lifted.
Art. 19 - Right to obtain a notification from the data controller in the event of rectification or deletion of personal data or deletion thereof: the data controller notifies each of the recipients to whom the personal data has been sent of any correction , deletion or limitation of the processing carried out in accordance with Article 16, Article 17 (1) and Article 18, unless this proves impossible or involves a disproportionate effort. The data controller informs the interested party of these recipients if the interested party requests it.
Art. 20 - Right to portability: 1. The interested party has the right to receive in a structured format, commonly used and readable by an automatic device, the personal data that concerns him provided to a data controller and has the right to transmit said data to another data controller without impediment by the controller who provided it if: a) the processing is based on consent in accordance with Article 6, paragraph 1, letter a) or Article 9, paragraph 2, letter a) , or a contract in accordance with Article 6, paragraph 1, letter b); and b) the processing is carried out by automated means. 2. By exercising their rights regarding data portability in accordance with paragraph 1, the data subject has the right to obtain the direct transmission of personal data from one data controller to another, if technically possible. 3. The exercise of the right mentioned in paragraph 1 of this article is understood to be without prejudice to article 17. This right does not apply to the processing necessary for the performance of a task of public interest or related to the exercise of the public powers mentioned in The data controller is inverted. 4. The right mentioned in paragraph 1 must not affect the rights and freedoms of others.
Art. 21 - Right of opposition - The interested party has the right to object at any time, for reasons related to their particular situation, to the processing of personal data concerning them in accordance with article 6, paragraph 1, letters e) of), including profiling based on these provisions. The data controller refrains from processing further personal data unless it demonstrates the existence of compelling legitimate reasons for the processing that outweigh the interests, rights and freedoms of the data subject or for the evaluation, exercise or defense of a right in court. . 2. If personal data are processed for direct marketing purposes, the data subject has the right to object at any time to the processing of personal data concerning him for these purposes, including profiling insofar as he is connected to such marketing direct. 3. If the data subject objects to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes. 4.5.2016 EN Official Journal of the European Union L 119/45 4. The right referred to in paragraphs 1 and 2 shall be made explicitly known to the interested party and presented clearly and separately from any other information no later than the moment of First communication with the interested party. 5. In the context of the use of information society services and without prejudice to Directive 2002/58 / EC, the interested party may exercise their right of opposition by automated means using specific techniques. 6. If personal data are processed for scientific or historical research purposes or for statistical purposes in accordance with Article 89, paragraph 1, the interested party, for reasons related to their particular situation, has the right to object to the processing of personal data concerned. to him, except if the processing is necessary for the performance of a public interest task.
Article 22 - Right to reject the automated process: the interested party has the right not to be subjected to a decision based solely on automated processing, including profiling, that produces legal effects that concern him or that significantly affect him. 2. Paragraph 1 does not apply if the decision: a) is necessary for the conclusion or performance of a contract between the data subject and a data controller; b) is authorized by the legislation of the Union or of the Member State to which the data controller is subject, which also specifies appropriate measures to protect the rights, freedoms and legitimate interests of the data subject; c) is based on the explicit consent of the interested party. 3. In the cases mentioned in paragraph 2, letters a) and c), the data controller will implement appropriate measures to protect the rights, freedoms and legitimate interests of the interested party, at least the right to obtain the human intervention of the owner processing, express your opinion and question the decision. 4. The decisions referred to in paragraph 2 shall not be based on the special categories of personal data referred to in article 9, paragraph 1, unless article 9, paragraph 2, letters a) or g) applies, and there are no adequate measures to protect the rights, freedoms and legitimate interests of the interested party.
In this sense, the interested party can access their data to
- Check its veracity
- Change them if they become inaccurate
- Integrate them also with a complementary declaration
- Cancellation request
- Limit treatment
- Oppose the treatment
The data controller is obliged to respond without an unjustified reason.
Erasing data
DISTAL S.R.L. In accordance with the right of access corresponding to the interested party, it has established procedures so that the interested parties can request the cancellation without undue delay of the personal data or the limitation of the processing of the personal data concerning them for the following reasons:
- Because the data is no longer necessary for the purposes for which it was collected
- Because the person concerned has withdrawn consent
- Because the interested party opposes the treatment.
- Because the data is processed illegally.
Exercise the rights provided in the articles. From 15 to 22 of EU Regulation 679/16, the interested party must send a specific request in writing to: privacy@distal.it
DISTAL S.R.L.