The legislative decree about personal data processing and protection imposes some duties to whoever processes information about other parties, such as informing the concerned party of the usage made of his/her data and then obtain the consent to perform the related operations.
The decree treats data processing as the following operations: collection, registration, organization, storage, consultation, processing, modification, selection, extraction, comparison, usage, interconnection, block, communication, diffusion, cancellation, destruction.
Types of data
Data required during the registration may be used to allow the User to access the Website and to use online services.
Navigation data (log files)
During their regular service, systems and software procedures used for this Website acquire some personal data which transmission is implicit in the usage of Internet communication protocols. This kind of information is not collected to be associated to identified users, but due to their nature could identify users through processing and linking with data held by third parties.
This kind of data include IP addresses or computer domain names used when users visit the Website, addresses in URI notation (Uniform Resource Identifier) of the resources required, time of request, method used to forward it to the server, the size of the file sent as response, the numeric code stating the server response (success, error, etc.) and other parameters about the operating system and the User’s computer environment.
These data are only used in order to collect anonymous statistical information about the usage of the Website and in order to check its correct operation. They are kept for the time stated in the reference legislation. Data may be used to check the responsibility in the event of computer crimes against the Website.
Data given by users
The entry of optional data using forms contained in this Website, optional, explicit and voluntary forwarding of data in web modules or e-mail data to the addresses stated in this Website, in order to receive specific services (e.g.: newsletter) and/or communication and information, implies the subsequent collection of the sender’s address – which is essential for replying to inquiries or providing services, communication and information required – and the other personal data entered.
Use of data
We will only use your data for the express purpose of processing your order unless you have given us permission to contact you by email with the purpose of sending you our newsletter for marketing purposes. This permission is accepted by you opting in to our email when you register with us either on the way to the checkout or by setting up an account with us.
This website uses Google Analytics, a web analytics service provided by Google, Inc. (Google).
Purpose and terms of data processing
Personal information that LID srls a socio unico already has, that you will be asked for, that will be passed on to LID srls a socio unico by you or by third parties, will be treated for the following purposes: commercial relations (offers, agreements, orders, promotional material); accounting, civil and tax relations; completion of possible legal, administration and technical requirements; legal obligations.
Personal data will be treated with electronic, computer and hardcopy tools, in compliance with the norm pursuant to and by effect of the Technical Disciplinary on the minimum security measures, Enclosure B of D.Lgs. no. 196 of 30th June 2003. Parties authorized to treat your personal data – administrative, commercial and technical parties for maintenance and assistance for computer devices and their processing procedures – will be constantly identified, informed and trained about the obligations imposed by D.Lgs. 196/03.
Area of diffusion
Data processing will be accomplished according to the purposes and manners above, and could include the communication of data to third parties, such as: financial institutions for banking operations, consultants and freelancers for the completion of accounting and tax completions and for possible legal and administrative requirements, financial inspection authorities.
Reason of data collection
Your personal information, as you may understand, is necessary for the purposes shown above, but its communication to us is not compulsory. However, not giving us personal information or not authorizing the processing could compromise the correct development of the relation with our Company.
Holder and responsible of data processing
The holder of the data processing, pursuant to and by effect of D. Lgs. 196/03, is LID srls a socio unico via XX Settembre 9 – 90141 Palermo – Italy, in the person of the legal representative Gianpaolo Rampolla, who is also person in charge, whom any inquiry can be sent according to the said decree.
Right to access to personal data and other rights
1. The User has the right to have free access to the register in order to ascertain the existence of the processing of data which may concern the party, even before their recording, and notification of the said data and their origins in an intelligible form.
2. The User has the right to know:
origins of personal data;
purpose and terms of data processing;
logic applied for data processing with electronic tools;
information about the holder, responsible parties and the representative designed pursuant to and by effect of clause 5, paragraph 2;
individuals or categories of individuals entitled to know the data that may concern the party or may be informed as designed representative in the State, responsible or person in charge.
3. The User has the right to obtain:
update, correction or, when necessary, integration of data;
the cancellation, transformation into anonymous form or halting of unlawfully processed data, including those which need not be kept in relation to the purpose for which the data were collected or subsequently processed;
the declaration that the operations mentioned in the first and second bullet of this paragraph together with their contents have been made known to those to whom the data were communicated or distributed, except in the case where this proves to be impossible or involves a omission of means which is manifestly disproportionate to the protected right
4. The User has the right to oppose, in whole or in part:
on legitimate grounds, in whole or in part, the processing of its own personal data, even though these are pertinent to the purpose of collecting;
the processing of his/her own personal data in relation to business information, advertising material mailing, direct sale, market research or interactive business communication.
* * * * *
Version: May 2018
ex Article 13 of EU Regulation 2016/679
A. Who are we and why are we providing this document?
LID srls with a single member
via XX Settembre 9 – 90141 Palermo (PA)
Tel: (+39) 091 7478460
For years, the protection of personal data of its own and / or potential customers and users is of fundamental importance, ensuring that the processing of personal data, carried out by any means, both automated and manual, takes place in full compliance with the protections and rights recognized by the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of individuals with regard to the processing of personal data, as well as on the free movement of such data (hereinafter the “Rules”) and further applicable rules regarding the protection of personal data.
With the term personal data, reference is made to the definition contained in article 4 in point 1) of the Regulation, ie “any information concerning an identified or identifiable natural person; an identifiable natural person can be identified, either directly or indirectly, with particular reference to an identifier such as a name, an identification number, location data, an online ID or one or more characteristic elements of his physical identity, physiological, genetic, psychological, economic, cultural or social “(hereinafter the” Personal Data “).
The Regulation provides that, before proceeding with the processing of Personal Data – with this term having to understand, according to the relative definition contained in Article 4 in point 2) of the Rules, “any operation or set of operations, performed with or without the support of automated processes applied to personal data or sets of personal data, such as collection, registration, organization, structuring, storage, adaptation or modification, extraction, consultation, use, the communication by transmission, diffusion or any other form of making available, the comparison or the interconnection, the limitation, the cancellation or the destruction “(hereinafter the” Treatment “) – it is necessary that the person to whom such Personal Data they are informed about the reasons for which such data are requested and how they will be used. In this regard, this document is intended to provide you with , in a simple and intuitive way, all the useful and necessary information so that you can give your Personal Data in a conscious and informed way and, at any time, request and obtain clarifications and / or corrections.
The present informative note, therefore, has been drawn up on the basis of the principle of transparency and all the elements required by Article 13 of the Rules and is divided into individual sections (hereinafter “Sections” and individually “Section”) each of which deals with one specific topic in order to make the reading faster, easier and easier to understand (hereinafter the “Information”).
If necessary, this Notice may be accompanied by a specific form for the issue of consent as provided for in Article 7 of the Rules, articulated on the basis of the additional type of use that we intend to make of your Personal Data.
B. Who will process your Personal Data?
The company that will process your Personal Data for the main purpose referred to in Section D of this Information Notice and who will therefore play the role of data controller according to the related definition contained in Article 4 in point 7) of the Rules, “the natural or legal person, public authority, service or other body which, individually or together with others, determines the purposes and means of processing personal data “is:
LID srls with a single member
via XX Settembre 9 – 90141 Palermo (PA)
Tel: (+39) 091 7478460
E-mail: firstname.lastname@example.org (hereinafter the “Data Controller”)
C. Who can you contact?
In order to facilitate relations between you, as an interested party, ie the “identified or identifiable natural person” referred to in the Personal Data pursuant to Article 4 in point 1) of the Rules (hereinafter the “Interested Party”) and the Data Controller, in some specific cases, has provided for the appointment of a control and support figure who, among the various tasks assigned, also acts as a point of contact with the Data Subject.
LID srls as single member has adopted this figure of “data protection officer”, c.d. “Data Protection Officer”, identifying and appointing, pursuant to Rule 37 of the Rules, Gianpaolo Rampolla (hereinafter the “DPO”).
The DPO, pursuant to and for the purposes of article 39 of the Regulations, is called to perform, inter alia, the following activities:
inform and provide advice to the Data Controller, the Joint Data Controllers, the Data Processor and the employees who perform the processing regarding the obligations arising from the Regulation as well as other provisions of the Union or the Member States relating to the protection of Personal Data;
monitor and monitor compliance with the Regulations, applicable regulations on the protection of Personal Data and the policies and procedures adopted by the Data Controller and the Data Controllers of the Processing;
provide support in feedback to the interested party;
cooperate with the competent Data Protection Authority.
As foreseen by article 38 of the Regulations, you can freely contact the DPO for all matters relating to the processing of your Personal Data and / or if you wish to exercise your rights as set out in Section I of this Information, by sending a written communication to the e-mail address email@example.com and / or by writing to the Data Protection Officer of Lid Srls a single member at via XX Settembre 9 – 90141 Palermo (PA) and / or by calling the number (+39) 091 7478460.
At any time you can consult the “Privacy” section of the website where you will find all the information concerning the use and processing of your Personal Data, updated information on the contacts and communication channels made available to all Interested by the Data Controller.
D. For what main purpose will your Personal Data be processed?
The Data Controller, in order to allow your registration to their websites, if provided the opportunity to register, and / or sending requests for information using the contact forms and / or subscription to the newsletter service, you need to collect some of your Personal Information as required in the registration form on the Internet Sites. The processing of your Personal Data will be conducted by the Data Controller to allow you, therefore, to access your profile, participate in initiatives promoted through the Internet sites, receive newsletters, send requests for information and take advantage of all other services, from time to time in turn, offered by each of the Internet Sites to which you have registered and / or within which you are browsing; The processing of your Personal Data will be legally based on the contractual relationship that will be created between you and the Data Controller as a result of your acceptance of the conditions for participation in the Internet Sites.
To allow the Data Controller to carry out the processing activities for the above purposes, it will be necessary to provide the Personal Data marked with the symbol *. In the absence of even one of the marked data, it will not be possible to process your Personal Data and, consequently, you will not be allowed to complete your registration to the Internet Sites and / or benefit from the services provided by the same for which requested a provision of Personal Data.
The Personal Data that will be required for the pursuit of the aforementioned purposes will be those indicated in the registration and / or contact form, that is, by way of example and not exhaustive: name, surname, username, date of birth, home address / residence, e-mail address, telephone numbers of fixed and / or mobile users, tax code, gender.
If you decide to access the Internet sites through the use of your social profile (eg Facebook profile), where provided, the collection of your Personal Data will be carried out by the Data Controller at third parties or at the manager of the social you used to access the Internet sites. In this case you will be able to read this information in the Privacy section of each of the Sites.
F. To which subjects will your Personal Data be communicated?
Your Personal Data may be disclosed to specific subjects considered recipients of such Personal Data. In fact, Article 4 in point 9) of the Rules defines as the recipient of a Personal Data “the natural or legal person, public authority, service or another body that receives communication of personal data, whether or not it is of third parties “(hereinafter the” Recipients “).
With this in mind, in order to correctly perform all the Processing activities necessary to pursue the purposes set out in this Notice, the following Recipients may be in a position to process your Personal Data:
third parties who perform part of the processing and / or activities connected and instrumental to them on behalf of the Data Controller or the Data Controllers of the Processing. These persons have been appointed as data processors, having to understand each other individually, in accordance with Article 4, paragraph 8, of the Regulation, “the natural or legal person, public authority, service or other body that processes Personal Data. on behalf of the Data Controller “(hereinafter the” Data Processor “);
individuals, employees and / or collaborators of the Data Controller or of the Joint Data Controllers, who have been entrusted with specific and / or more processing activities on your Personal Data. These individuals have been given specific instructions on the safety and correct use of Personal Data and are defined, in accordance with Article 4 paragraph 10) of the Regulation, “persons authorized to process Personal Data under the direct authority of the Data Controller or the Data Processor “(hereinafter the” Authorized Persons “).
If required by law or to prevent or suppress the commission of a crime, your Personal Data may be disclosed to public bodies or judicial authorities without being defined as Recipients. In fact, pursuant to article 4 of point 9) of the Regulation, “public authorities that may receive communication of Personal Data in the context of a specific investigation in accordance with Union or Member State law are not considered Recipients”.
G. How long will your Personal Data be processed?
One of the principles applicable to the processing of your Personal Data concerns the limitation of the retention period, governed by Article 5, paragraph 1, point e) of the Regulation that states “Personal Data are stored in a form that allows the identification of data subjects for a period of time not exceeding the achievement of the purposes for which they are processed; Personal Data may be stored for longer periods provided they are processed exclusively for archival purposes in the public interest, for scientific or historical research or for statistical purposes, in accordance with Article 89, paragraph 1, without prejudice to the implementation of technical measures and adequate organizational requirements required by this regulation to protect the rights and freedoms of the interested party “.
In light of this principle, your Personal Data will be processed by the Data Controller limited to what is necessary for the pursuit of the purposes referred to in Section D of this Information. In particular, your Personal Data will be processed for a period of time equal to the minimum necessary, as indicated in Recital 39 of the Rules, ie until the termination of the contractual relations between you and the Data Controller without prejudice to an additional retention period which may be imposed by law as also provided for by Recital 65 of the Rules.
With regard to the processing performed to achieve the purposes set out in Section E of this Information, the Data Controllers may treat your Personal Data to be lawfully until you communicate, in one of the methods provided for in this Notice, your intention to revoke the consent to one or all the purposes for which you have been asked. Any revocation of the consent will in fact require the Data Controllers to cease the processing of your Personal Data for these purposes.
H. Is it possible to revoke the consent given and how?
As required by the Regulations, if you have given your consent to the processing of your Personal Data for one or more purposes for which you have been requested, you can, at any time, withdraw it totally and / or partially without prejudice to the lawfulness of the treatment based on the consent given before the revocation.
The methods of revoking consent are very simple and intuitive, just contact the Data Controller and / or the Joint Data Controllers and / or the DPO using the contact channels reported in this Information and respectively in sections C and I.
In addition to the above and for simplicity, if you were in the position to receive advertising emails from the co-controllers of the treatment that are no longer of your interest, just click on the unsubscribe button at the bottom to no longer receive no communication even through other contact channels for which your consent was obtained (SMS, MMS, paper mail, fax, phone calls).
I. What are your rights?
As required by Article 15 of the Rules, you can access your Personal Data, request correction and updating, if incomplete or erroneous, request cancellation if the collection was made in violation of a law or regulation, as well as oppose to the treatment for legitimate and specific reasons.
In particular, we list below all your rights that you can exercise, at any time, towards the Data Controller and / or the Joint Data Controllers:
Right of access: you will have the right, pursuant to Article 15, paragraph 1 of the Rules, to obtain from the Data Controller the confirmation that a Personal Data Processing is in progress and in this case, to obtain access to such Personal Data and to the following information: a) the purposes of the processing; b) the categories of Personal Data in question; c) Recipients or categories of Recipients to whom your Personal Data have been or will be communicated, in particular if Recipients of third countries or international organizations; d) whenever possible, the retention period of the Personal Data provided or, if not possible, the criteria used to determine this period; e) the existence of the right of the interested party to request the Data Controller to rectify or delete Personal Data or limit the processing of personal data concerning him or to oppose their processing; f) the right to lodge a complaint with a supervisory authority; g) if the Personal Data are not collected from the Data Subject, all information available on their origin; h) the existence of an automated decision-making process, including the profiling referred to in Article 22, paragraphs 1 and 4 of the Rules and, at least in such cases, significant information on the logic used, as well as the importance and expected consequences of such treatment for the interested party. All this information can be found in this information that will always be available to you within the privacy section of each of the Internet sites.
Right of rectification: you can obtain, in accordance with Article 16 of the Regulation, the correction of your Personal Data that are incorrect. Taking into account the purposes of the processing, moreover, you can obtain the integration of your Personal Data that are incomplete, also by providing an additional declaration.
Right to cancel: you can obtain, in accordance with Article 17, paragraph 1 of the Regulation, the cancellation of your Personal Data without undue delay and the Data Controller will have the obligation to delete your Personal Data, if there is even one of the following reasons: a) Personal Data are no longer necessary with respect to the purposes for which they were collected or otherwise processed; b) you have withdrawn the consent on which the processing of your Personal Data is based and there is no other legal basis for their processing; c) you are opposed to the processing pursuant to Article 21, paragraph 1 or 2 of the Rules and there is no longer any legitimate overriding reason to proceed with the processing of your Personal Data; d) your Personal Data has been processed unlawfully; e) it is necessary to delete your Personal Data in order to comply with a legal obligation provided for by a community or national law. In some cases, as foreseen by article 17, paragraph 3 of the Regulation, the Data Controller is entitled not to provide for the cancellation of your Personal Data if their processing is necessary, for example, for the exercise of the right to freedom of expression and information, for the fulfillment of a legal obligation, for reasons of public interest, for purposes of archiving in the public interest, scientific or historical research or for statistical purposes, for the assessment, exercise or defense of a right in court.
Right to limit the processing: you will be able to obtain the limitation of the treatment, in accordance with Article 18 of the Rules, if one of the following hypotheses occurs: a) you have contested the accuracy of your Personal Data (the limitation will continue for the period necessary for the Data Controller to verify the accuracy of such Personal Data); b) The processing is illegal but you are opposed to the deletion of your Personal Data asking, however, that it is limited use; c) although the Data Controller no longer needs it for the purposes of processing, your Personal Data are used for the assessment, exercise or defense of a right in court; d) you are opposed to the processing pursuant to Article 21, paragraph 1, of the Rules and you are awaiting the verification of the possible prevalence of the legitimate reasons of the Data Controller with respect to yours. In case of limitation of treatment, your Personal Data will be processed, except for storage, only with your consent or for the assessment, exercise or defense of a right in court or to protect the rights of a other natural or legal person or for reasons of significant public interest. We will inform you, in any case, before this limitation is revoked.
Right to data portability: you can, at any time, request and receive, pursuant to Article 20, paragraph 1 of the Rules, all of your Personal Data processed by the Data Controller and / or the Joint Data Controllers in a structured format, in common and legible or request transmission to another holder of the treatment without impediment. In this case, it will be your responsibility to provide us with all the exact details of the new data controller to whom you intend to transfer your Personal Data by providing written authorization.
Opposition right: pursuant to article 21, paragraph 2 of the Rules and as also reaffirmed by Recital 70, you may object, at any time, to the processing of your Personal Data if these are processed for direct marketing purposes, including profiling in the extent to which it is connected to such direct marketing.
Right to lodge a complaint with the supervisory authority: without prejudice to your right to appeal to any other administrative or jurisdictional office, if you believe that the processing of your Personal Data carried out by the Data Controller and / or the Data Controllers of the processing is in violation of the Regulations and / or applicable regulations, you can lodge a complaint with the competent Data Protection Authority.
To exercise all your rights as identified above, simply contact the Data Controller and / or the Joint Data Controllers in the following ways:
writing to the Privacy Office of Lid Srls as a single member;
by sending an e-mail to the firstname.lastname@example.org e-mail address to the kind attention of the Privacy Office of Lid Srls as a single member
by calling the telephone number (+39) 091 7478460 and asking for the Privacy Office Lid srls with a single member
We remind you that, at any time, you can also contact the DPO of Lid srls as a single member in the manner provided for in Section C of this Notice.
J. Where will your Personal Data be processed?
Your Personal Data will be processed by the Data Controller and / or by the Joint Data Controllers within the European Union.
If for technical and / or operational reasons it is necessary to make use of subjects located outside the European Union, we inform you from now on that these subjects will be appointed as Data Processors pursuant to and for the purposes of article 28 of the Regulations and the transfer of your Personal Data to these subjects, limited to the performance of specific treatment activities, will be regulated in accordance with the provisions of Chapter V of the Rules. All necessary precautions will therefore be taken to ensure the fullest protection of your Personal Data by basing this transfer: (a) on adequacy decisions of the third country recipients expressed by the European Commission; (b) on appropriate guarantees expressed by the recipient third party pursuant to Article 46 of the Rules; (c) on the adoption of binding corporate rules, c.d. corporate binding rules.
In any case, you can request more details from the Data Controller and / or the Joint Data Controllers if your Personal Data have been processed outside the European Union requesting evidence of the specific guarantees adopted.