Policy for the treatment of personal data in accordance with the art. 13 D.lgs 3Oth june 2OO3 n.196 and art. 13 EU rule n. 2O16/679
What are cookies?
Rainbow Playschool, legal residence in Via Europa, 3d 80040 Cercola NA, Italy, as owner of this treatment, it informs You, in accordance with the law 13 D.Lgs. 30.6.2003 n. 196 (by now “Privacy Code”) and the law 13 UE rules n. 2016/679 (by now “GDPR”) that Your data will be treated as follows:
1. Object of the treatment
The owner will treat personal, identifying data (for example, name, surname, business name, address, phone number, e-mail, payment and banking references) by now “personal data” or simply “data” that You communicated to contract with the owner.
2. Treatment goals
Your personal data will be treated:
3.Without Your expressed consent (art. 24 lett. a), b), c) Privacy Code and art. 6 lett. b), e) GDPR), for the following goals:
Contract with the owner;
Fulfill the pre-contract, contract and financial obligates deriving from Your relationship with the owner;
Fulfill obligates provided by law, by a rule, by community law or by Authorities (for example in the field of anti-money laundering);
For the owner’s rights, for example the right of defence;
Only with Your expressed consent (artt. 23 and 130 Privacy Code and art. 7 GDPR), for the following marketing goals:
Send You e-mails, post and/or sms and/or phone contacts, commercial communications and/or promotional material about products or services offered by the owner and notice the satisfaction about the service quality;
Send You e-mails, post and/or sms and/or phone contacts, commercial and promotional communications by other subjects (for example, business partners, insurance companies and other societies).
We inform You that if You are our customer, we may send You commercial communications about services and products offered by the owner that are related to the ones You already enjoyed, only with Your consent (art. 130 c. 4 Privacy Code).
3. Treatment modality
The treatment of Your personal data is fulfilled through the guidelines of the art. 4 Privacy Code and art. 4 n.2 GDPR, more precisely: collection, registration, organisation, preservation, consultation, processing, alteration, selection, extraction, comparison, use, interconnection, block, communication, cancellation, and destruction of data. Your personal data are submitted to both a paper and an electonic and/or automatic treatment.
The owner will keep personal data as long as the services already mentioned are fulfilled, and anyway not more than 10 years after the relationship is over and not more that 2 years after the collection of data for marketing goals.
4. Access to data
Your data will be accessible for the following goals related to art. 2.A) e 2.B):
To the owner’s employees and coworkers in Italy and abroad, as representative and/or internal responsible for the treatment and/or administrators of the system.
To other societies and subjects (as financial institutes, professional agencies, consultants, insurance societies for insurance services, etc.) that lead outsourcing activities for the owner, as external responsible for the treatment.
5. Communication of data
Without an expressed consent (ex art. 24 lett. a), b), d) Privacy Code and art. 6 lett. b) and c) GDPR) the owner might communicate Your data for the goals related to art. 2.a. to security services (as IVASS), legal authorities, insurance societies for insurance services, and to all subjects whose communication is mandatory to fulfill the services already mentioned. These subjects will treat Your data as autonomous owners of the treatment.
Your data will not be transmitted.
Personal data are saved in servers in Italy (IT), in the European Union. It is important to underline that the owner, if necessary, has the possibility to transfer these servers out of the EU. In this case, the owner assures that the transfer of data out of the EU will be fulfilled in accordance with the law, upon standard contract clause established by the European Committee.
7. Provision of data and consequences of the refusal to reply
The provision of data for the goals related to art. 2.a. is mandatory. Without data, we can not guarantee the services related to art. 2.a. 3. The provision of data for the goals related to art. 2.c is not mandatory. You can decide to not to communicate data or deny, later, the possibility to treat already communicated data: in this case, You will not receive newsletters, commercial communications and promotional material related to the services offered by the owner. You will always have right to the services related to art. 2.a.
8. Rights of the involved person
As involved person, You have rights related to art. 7 Privacy Code and art. 15 GDPR, and more precisely the right to:
Obtain a confirmation that Your personal data exist or not, even if they are not registered yet, and the communication of these data in intelligibile form;
Obtain the following information: a) the origin of personal data; b) the modality and the goals of the treatment; c) the logic which is applied in case of treatment through electronic devices; d) the identifying data of the owner, the supervisor and the person in charge in accordance with the art. 5, comma 2 Privacy Code and art. 3, comma 1, GDPR; e) the subjects or group of subjects to which the personal data might be communicated or who could learn about them as supervisors nominated by the State, other supervisors or people in charge;
Obtain: a) the deferment, the rectification or, if interested, the integration of data; b) the cancellation, the transformation of data anonymously or the block of these ones if treated violating the law, even the ones whose preservation is not necessary for the goals related to the collection of data or the following treatments; c) to communicate that the procedures related to letters a) and b) were presented to the ones to which the data were communicated or transmitted, except when the fulfillment is impossibile or implicates the use of means that don’t undergo to the expressed rights;
Stand opposite: a) for reasons related to the treatment of Your personal data and to collection goals; b) to the treatment of Your personal data for promotional or commercial goals or to fulfill market analysis or commercial communications, through the use of automatic systems, without the action of an employee, per e-mail and/or through marketing procedures per phone and/or post. It is important to delcare that the right of the involved person to go against, as expressed in letter b), goals related to marketing through automatic means is extended also to traditional marketing means and there is always the possibility for the involved person to go against it only in part. Moreover, the involved person can decide to receive communications only through traditional means, or only automatic communications, or none of these modalities. Where possible, the involved person has the rights related to artt. 16-21 GDPR (right of adjustment, right of oblivion, right of treatment limitation, right of portability, right of opposition), and the right to claim to the Authority acting as a guarantor.
9. Way of using rights
You can exercise Your rights sending:
A registered mail a.r. to: Rainbow Playschool – Via Europa, 3d 80040 Cercola NA, Italy;
A certified e-mail to: firstname.lastname@example.org
10. Owner, supervisor and people in charge
The owner of this treatment is Rainbow Playschool, whose legal residence is in Via Europa, 3d 80040 Cercola NA, Italy.
The list of supervisors and people in charge for the treatment is in the legal residence of the owner of the treatment.
Read the whole text of the EU rules n. 2016/679