PURPOSES AND METHODS OF PROCESSING PERSONAL DATA
The personal data provided by the data subject (the “data”) will be processed for the following purposes:
The processing of data for each of the aforementioned purposes may be carried out using paper-based, automated or electronic means, in particular via ordinary mail or by email, via telephone (e.g. automated calls, SMS messages), via fax and via any other IT channel (e.g. websites, mobile apps etc.).
CONSEQUENCES OF FAILURE TO PROVIDE CONSENT
The provision of consent as referred to in letters c), d), e) and f) above is optional. However, failure to provide this consent will render it impossible for CB SRL to carry out the activities referred to in letters c), d), e), and f).
OTHER PARTIES WHO MAY PROCESS THE DATA
The data may be processed by parties operating on behalf of the company in line with specific contractual obligations, in EU member states or in countries outside of the EU. The data may be disclosed to third parties in order to comply with legal obligations or orders from public authority bodies, or to allow the company to exercise its rights in court.
TRANSFER OF DATA OUTSIDE THE EUROPEAN ECONOMIC AREA (EEA)
Within the context of the company’s contractual relations, the data may be transferred outside the European Economic Area (EEA). This may occur via the insertion of the data into databases managed by third-party companies operating on behalf of the company. The management of the databases and the processing of the data therein must comply with the purposes for which this information was collected, and such activities shall be carried out in strict compliance with the applicable laws on the protection of personal data. In cases where the data is transferred outside the EEA, the company will take all appropriate contractual measures necessary and appropriate in order to ensure adequate levels of data protection. These measures may include agreements based on standard contractual clauses for the transfer of data outside the EEA, as approved by the European Commission, among other methods.
THE DATA CONTROLLER AND THE DATA PROTECTION OFFICER
The data controller is CB SRL, with registered office in Corso Garibaldi 50, 20121 Milano. The data subject may contact the Data Protection Officer and the company regarding these issues at the email address [email protected]
STORAGE OF PERSONAL DATA
The data processed in order to provide the service and to deliver customer satisfaction will be kept by the company for the period considered strictly necessary to achieve these ends. Furthermore, the data processed in order to provide the service may be stored for a longer period, to enable any disputes relating to the provision of the service to be handled. Data processed for marketing and profiling purposes will be kept by the company from the point at which the data subject provides his/her consent until this consent is revoked. In the event that consent is revoked, the data may no longer be processed for the aforementioned marketing and profiling purposes, but may still be stored in order to handle any disputes and/or disagreements and/or to ensure the safety of the customer. The time for which data for marketing and profiling purposes is kept by CB SRL is in compliance with local regulations and with the provisions set out by the Data Protection Authority.
THE RIGHTS OF THE DATA SUBJECT
The data subject shall have the following rights:
The data subject may exercise the rights listed above by writing to CB SRL, Corso Garibaldi 50, 20121 Milano. or to the email address [email protected]