This English translation is provided for convenience only. In case of discrepancy, the Italian version prevails.
Introduction
AGE web solutions S.r.l. (hereinafter “AGEws”), with registered office at via Cairoli 32, Ferrara, as Data Controller pursuant to Articles 4(7) and 24 of Regulation (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data (hereinafter also the “EU Regulation”), hereby informs you, pursuant to Article 13 of the EU Regulation, that it holds personal data relating to you and that it will process them for the purposes and in the manner set out below. Processing of personal data means any operation (or set of operations) performed with (or without) the aid of automated processes on personal data (or sets of such data), such as: collection, recording, organisation, structuring, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission (including electronic transmission), dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction. We therefore inform you that such data will be processed manually and/or with the aid of IT or telematic tools for the purposes set out below.
Scope
This document applies to the following mobile applications developed by AGEws for “AGE Suite” and regularly published on the Android and iOS stores:
-
AGE Suite Preposto
-
AGE Suite Audit
-
AGE Suite Checklist
-
AGE Suite Cruscotto Grafici
-
AGE Suite ESG Monitoring
-
AGE Suite Lavoratore
-
AGE Suite Manutenzioni
-
AGE Suite Mobile
-
AGE Suite NFC Manager
-
AGE Suite Portale Fornitori
-
AGE Suite Safety Walking
-
AGE Suite Safety Walking PRO
-
AGE Suite Segnalazioni
-
AGE Suite Segnalazioni PRO
Data you are asked to provide
The personal data provided by the customer and processed in accordance with Regulation (EU) 2016/679 on privacy include, purely by way of example:
-
Name and surname
-
Address of residence
-
Telephone numbers
-
Email addresses
-
Passwords
-
Unique identification codes
-
etc.
and any other data that AGEws deems useful to process throughout the relationship (both commercial and technical) between the parties.
Purposes of processing
The purpose pursued is both the management of the commercial relationship between the parties and any other information directly connected with the products/services supplied by the company to the customer. Therefore, purely by way of example, the data controller may be required to manage, on behalf of the customer, data such as:
-
personal details
-
addresses
-
telephone numbers
-
email addresses
-
etc.
Recipients or categories of recipients to whom the data may be disclosed
The data may be disclosed to any other third party where disclosure is required by law or is necessary to correctly perform services in any case provided for by Regulation (EU) 2016/679 on privacy or by the terms governing any promotional/advertising initiatives addressed to the customer. With reference to Article 13(1)(e) of the EU Regulation, the parties (or categories of parties) who may become aware of the user’s personal data as data processors (or persons in charge of processing) are listed below. Specifically:
-
employees of the Data Controller appointed and authorised to carry out the processing
-
third parties engaged by the Data Controller for the organisation and management of any products and/or services from time to time, appointed as persons in charge of the processing.
In any case, the customer’s personal data will never be disseminated.
Methods of processing
The personal data collected are processed using the following tools (so as to ensure the security and confidentiality of the data collected, as well as full compliance with Regulation (EU) 2016/679 on privacy):
-
paper-based
-
electronic
-
telematic.
The personal data collected may be:
-
collected directly from the customer/supplier
-
collected from third parties
-
collected from public registers, lists, deeds or documents that anyone can access.
Nature of the provision of data
Authorisation to provide personal data is mandatory for all processing connected with legal obligations.
Provision is optional if the data are collected for:
-
carrying out market research
-
sending advertising material
-
carrying out promotional activities.
It is understood that providing such data is a binding condition for the effective performance of the contractual obligations undertaken, whereas any refusal to provide the optional data will make it impossible for AGEws to:
-
carry out market research
-
send advertising material to the customer
-
carry out promotional activities aimed at the customer.
Personal data retention period
The data will be retained for the periods laid down by the applicable legislation, specified below pursuant to Article 13(2)(a) of the EU Regulation. Personal data will be retained for the duration of the processing carried out. This is without prejudice to the five- or ten-year retention periods applying solely to documents and related data of a civil-law, accounting and tax nature, as required by the laws in force. Finally, with specific reference to personal data processed for the purpose of any customer profiling, such data will be retained for 12 months, or for a shorter period if the data subject withdraws their specific consent. Pursuant to Article 13(1)(f) of the EU Regulation, please note that none of the data collected will be transferred to a third country or to an international organisation, either within or outside the European Union.
Exercise of the data subject’s rights
Pursuant to Articles 13(2)(b) and (d), 15, 18, 19 and 21 of Regulation (EU) 2016/679, the data subject is informed that:
-
they have the right to request from the Data Controller access to, rectification or erasure of their personal data or restriction of processing concerning them, or to object to such processing, as well as the right to data portability
-
they have the right to lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali), following the procedures and instructions published on the Authority’s official website at www.garanteprivacy.it, if such data are processed by the Controller in a manner that does not comply with Regulation (EU) 2016/679 on privacy
-
any rectification or erasure of personal data or restriction of processing carried out at the request of the data subject will be communicated by the Data Controller to each recipient to whom the personal data have been disclosed, unless this proves impossible or involves disproportionate effort. The Data Controller will inform the data subject about those recipients if the data subject so requests
-
the exercise of the above rights is not subject to any formal requirement and is completely free of charge
-
Articles 15, 16, 17, 18, 19, 20, 21, 22 and 23 of the EU Regulation can be consulted at the following link: http://eur-lex.europa.eu/legal-content/IT
Right to lodge a complaint with the supervisory authority
The data subject whose personal data are processed may, at any time, in the event of use of their data that does not comply with this notice, lodge a complaint with the competent authority in order to stop the processing.
Data controller and data processor
The data controller for AGEws is its legal representative pro tempore, who can be contacted at dpo@agews.com or at the postal addresses given in the “Locations” section of the company’s institutional website, available online at: https://agews.com/it/azienda/dove_siamo/.