The Ecas4 Company srl wishes to inform the interested parties subject to the processing, that the personal data referred or referable to the interested party, are processed by the Undersigned in full compliance with the current legislation on data processing and the confidentiality obligations that have always inspired us.

“Processing of personal data” means any operation or set of operations, carried out even without the aid of electronic instruments, concerning the collection, recording, organization, storage, consultation, processing, modification, selection, extraction, comparison, use, interconnection, blocking, communication, dissemination, cancellation and destruction of data, even if not recorded in a database.

Pursuant to art. 13 of the GDPR (EU Regulation 679/2016), in relation to the personal data that we process following the establishment of mutual contractual and working relationships, we disclose the information reported below.

Data Controller

The “Data Controller” for all legal purposes is Ecas4 srl with registered office in via Pietro Miliani, 7, 40132 Bologna (BO), contactable at the email address info@ecasan.shop.

Purpose of the processing

The personal data that the interested party provides through the “contacts” page on the site

www.ecasan.shop

The following are mainly acquired and processed:

- to send training or informational material to the email address indicated;

- for processing analyses for statistical purposes.

In relation to any subsequent commercial commitments, the interested party's data provided in the manner described above or provided subsequently, may be processed for contractual needs and the consequent fulfillment of legal and fiscal obligations, as well as for automated profiling activities; such processing will take place for the entire duration of the commercial/contractual relationship and also subsequently, for the fulfillment of legal obligations and for administrative and fiscal purposes.

Within the scope of the purpose for which personal data are collected, the Company Ecas4 srl processes said data according to the principles of correctness, lawfulness, transparency and protection of the confidentiality of the rights of the interested party.

Nature of the transfer

Personal data is always collected from the data subject.

The provision of said data, necessary for the purposes described, is essential for the complete execution of the communication, marketing, commercial and contractual activity; any refusal to provide such data could result in the failure or partial realization of the Company's services.

Treatment methods

The data processing is carried out according to the principles of correctness, lawfulness and transparency, through the use of tools and procedures suitable for guaranteeing their security and confidentiality and may be carried out both through paper supports and through the use of electronic instruments.

The processing is carried out using appropriate security measures to minimize the risk of unauthorized access to data by third parties, their destruction and/or deterioration, and to guarantee confidentiality, pursuant to art. 32 of the GDPR.

Retention of personal data

Personal Data will be retained only for the time necessary for the purposes for which they are collected, respecting the principle of minimization pursuant to Article 5, paragraph 1, letter c) of the GDPR as well as the legal obligations to which the Data Controller is subject. Further information on the retention and processing times is available from the Data Controller.

Data communication

Personal data will not be disclosed in any way, while they may be communicated by us:

- to the persons in charge, duly appointed, of their processing within the Company;

- to entities and associations connected to the Company;

- to subjects who need to access such data for purposes ancillary to the relationship between our Company and the interested party, within the limits strictly necessary to carry out the ancillary tasks entrusted to them, such as : credit institutions, administrative consultancy firms (accountants).

Special categories of personal data

When sending a CV, pursuant to articles 26 and 27 of the Privacy Code and articles 9 and 10 of GDPR 2016/679, the interested party may voluntarily provide the undersigned Company with data that can be classified as “special categories of personal data” (i.e. data that reveal “racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership…genetic data, biometric data intended to uniquely identify a natural person, data relating to health or sexual life or sexual orientation of the person”). This category of data may be processed by the Company only with the prior consent of the interested party, expressed in written form.

Rights of the interested party

The data subject may exercise at any time the rights set forth in articles 15-22 of the GDPR:

1. obtain confirmation as to whether or not personal data concerning you are being processed and, where that is the case, obtain access to the personal data and to all the information provided for in art. 15 of the GDPR;

2. obtain the rectification of inaccurate personal data concerning you without undue delay. Taking into account the purposes of the processing, you have the right to obtain the integration of incomplete personal data, including by providing a supplementary statement;

3. obtain the erasure of personal data concerning you without undue delay;

4. obtain the limitation of processing when one of the hypotheses provided for by art. 18 of the GDPR occurs;

5. receive in a structured, commonly used and machine-readable format, the personal data concerning the interested party provided to the undersigned Company;

6. object at any time, for reasons relating to his or her particular situation, to the processing of personal data concerning him or her pursuant to Article 6, paragraph 1, letters e) or f) of the GDPR. In this case, the company will refrain from further processing the personal data unless there are compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims;

7. not to be subject to a decision based solely on automated processing, which produces legal effects concerning him or her or similarly significantly affects him or her. This right does not apply in the cases governed by art. 22, paragraph 2 of the GDPR;

8. contact the Supervisory Authority to complain if you believe that your data has been processed unlawfully.