Information on the processing of personal data pursuant to articles 13 and 14 of Regulation (EU) 2016/679
Pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 containing the European regulation for the protection of natural persons with regard to the processing of personal data, as well as the free movement of such data (General Data Protection Regulation hereinafter “GDPR”), and in compliance with the legislative decree 30 June 2003, n. 196 and subsequent amendments (hereinafter “Privacy Code”), we inform you that the personal data provided will be treated in compliance with the confidentiality obligations established by the aforementioned legislation to which Weevo S.r.l. Società Benefit as owner of this website.
- Subjects of the treatment
The data controller is Weevo S.r.l. Benefit company based in Pesaro (PU) Italy, in via Togliatti 21/2 (information @ weevo . it).
The Data Protection Officer can be contacted at the following email address: information @ weevo . it and to the certified e-mail address: weevo @ pec . it
The personal data provided may also be processed by personnel specifically or occasionally authorized and trained on the basis of specific instructions regarding the purposes and methods of processing (employees, collaborators, consultants or service providers).
The updated list of Data Processors and those authorized to process it is kept at the headquarters of the Data Controller and can be requested from the Data Protection Officer at the addresses indicated above.
Personal data may be shared, for institutional purposes, with subjects to whom the communication is required by law provisions, regulations or with public subjects for the performance of their institutional functions (for example, supervisory and control authorities for the carrying out of inspections, public security authorities, judicial authorities and judicial police bodies specialized in financial activity investigations).
- Legal basis of the treatment
The personal data provided in the context of the requests are processed by the Data Controller pursuant to the GDPR and article 2 ter of the Privacy Code) as well as to fulfill a legal obligation (pursuant to article 6, paragraph 1, letter c) of the GDPR ).
- Purpose of the treatment
The personal data transmitted by filling in the forms are processed to respond to the requests of the interested party.
The email addresses will also be entered by the Data Controller in its Newsletter and Marketing Automation platform, also for promotional purposes.
Navigation data, necessary for the use of web services, are processed for the purpose of obtaining anonymous statistical information on the use of the services (most visited pages, number of visitors by time or day, geographical areas of origin, etc.) as well as and to check the correct functioning of the services offered.
The provision of data for the purposes indicated above is optional, explicit and voluntary, but failing that, it will not be possible for the Data Controller to proceed with the fulfillment of the institutional purposes, nor to perform their duties with consequent prejudice to the provision related services.
- Type of data processed
The data being processed are those strictly necessary for the requests received through this website.
Personal data
For the definition of personal data, please refer to article 4, paragraph 1 of the GDPR, referring to the interested party, the collection of which is necessary to fulfill the aforementioned purpose. Data relating to criminal convictions, crimes, or related security measures are also processed, as defined by art. 10 of the GDPR.
Navigation data
Navigation data relates to the user’s operating system and IT environment.
- Processing methods and storage period
Personal data is processed according to the principles of lawfulness, correctness, transparency with manual, IT and telematic tools, including automated ones, with logics and methods related to the completion of the administrative procedure and to the purposes referred to in the facilitation measure in question.
The treatment takes place in compliance with the rules of confidentiality and security provided for by current legislation also in order to prevent the loss of data, illicit or incorrect use and unauthorized access.
Personal data will be stored and processed for fifty years, unless unsubscribed by the user.
Without prejudice to further document retention obligations established by law.
Once the storage terms indicated above have elapsed, the data will be destroyed, deleted from the systems or made anonymous compatibly with the technical cancellation and backup procedures.
- Place of treatment
Personal data is processed on various cloud platforms with servers within the territory of the European Union.
If for technical and/or operational reasons, during the processing, it becomes necessary to make use of subjects located outside the European Union or the European Economic Area, or it is necessary to transfer some of the data collected to technical systems and services managed in the cloud and located outside the European Union or the European Economic Area, the treatment will be carried out in compliance with the provisions of the GDPR. All the necessary precautions and the conditions set out in Chapter V of the GDPR will be adopted in order to guarantee the protection of personal data basing this transfer: a) on adequacy decisions of the recipient third countries expressed by the European Commission; b) on adequate guarantees expressed by the recipient third party pursuant to art. 46 of the GDPR; c) on the guarantees pursuant to art. 49 of the GDPR. In any case, the reference to the appropriate or opportune guarantees will be made available to the interested party and the means to obtain a copy of these guarantees or the place where they have been made available.
- Rights of the interested party
The interested parties have the right to obtain, in the foreseen cases, access to personal data and the rectification or cancellation of the same or the limitation of the treatment that concerns them or to oppose the treatment (articles 15 and following of the GDPR). In particular, by way of example, the interested party may exercise the following rights:
Right of access: you may request confirmation as to whether or not your personal data is being processed and, in this case, to obtain access to the same data;
Right to rectification: you may request to rectify your personal data if it is incorrect, including the right to request completion of incomplete personal data;
Right to cancellation: you may request to cancel the data you have provided (for example because you have opposed the processing and there is no overriding reason for the processing);
Right to limitation: you may request to limit the processing of your personal data if the legal hypotheses are met;
Right to object: you may object to the processing of your personal data, for reasons related to your particular situation;
Revocation of consent: if the processing is based on consent, the interested party may revoke it at any time, without prejudice to the lawfulness of the processing carried out before said revocation;
Right to lodge a complaint with the Supervisory Authority: without prejudice to any other administrative or judicial appeal, the interested party has the right to lodge a complaint with the Guarantor Authority for the protection of personal data in the event that he believes that the data processing carried out by the Owner violate the current legislation on the protection of personal data.
Interested parties may exercise the rights granted to them by the GDPR by forwarding a request to the following addresses: information @ weevo . it and to the certified e-mail address: weevo @ pec . it
- Updates to this Privacy Policy
This information on the processing of personal data may be updated in order to comply with national and European legislation on the processing of personal data and/or to adapt to the adoption of new systems, internal procedures or in any case for any other reason that if it becomes appropriate and/or necessary. This information may therefore undergo changes over time at any time, without notice.
Therefore, the interested party is invited to consult this page of the site periodically.
Last update date: 07/31/2023