Information pursuant to Articles 13 and 14 of the Top Nature by Rudy Debe Website

 

This page describes how to manage the site in relation to the processing of personal data of users who consult it.

This information is also provided in accordance with articles 13 and possibly 14 (i.e. data not collected from the data subject) of EU Regulation no. 679/2016.

This document identifies, among other things, which personal data are collected online, the purposes and methods of processing for which they are intended and the security measures adopted to protect them. The information is provided only for the Top Nature by Rudy Debe website.

 

Data Controller 

Rodolfo De Bernardi is the "Data Controller" for the processing of data relating to identified or identifiable natural persons.

Data processed, Purposes and Legal Basis

The data processed are those provided voluntarily by the user at the time of the request to use the online contact service (name, surname, email address). If necessary, the interested user may also attach .pdf or .word files for the request for information and the formulation by the firm of a quote. These data will be used to perform the requested service and are also necessary to process the commercial offer requested by the user and carry out the subsequent communications aimed at concluding the contract. The applicable legal basis is Article 6(1) (b) of the GDPR "contractual and pre-contractual measures".

During their normal operation, the computer systems and software procedures used to operate the Site acquire some personal data whose transmission is implicit in the use of internet communication protocols. This data is used only to obtain anonymous statistical information about the site and to make sure the site is operating and performing as intended. They are therefore not collected to be associated with identified subjects, but by their very nature could allow the identification of users. This category of data includes IP addresses or domain names of computers used by persons who connect to the site, the URI (Uniform Resource Identifier) of requested resources, the time of request, the method used to submit the request to the server, the size of the file received in reply, the numerical code indicating the status of the reply provided by the server (successful, error, etc.) and other parameters regarding the user's operating system and computer environment. 

Other purposes related to the exercise of the service are the legal obligations of the Data Controller (see 6(1(c) of the GDPR) as well as the same protection of the Data Controller in court (see 6.1.f) of the GDPR.

Storage

Personal data will be kept only for the time necessary to pursue the purposes for which they are collected, in compliance with the principle of minimisation referred to in Article 5.1.c) of the Regulation. After the retention period, the personal data will be destroyed, deleted, or made anonymous, and it will be compatible with the technical deletion and backup procedures of the Study. Please note that for accounting and tax data as well as contact data of customers with whom a collaboration relationship has been established, the retention period will be 10 years and no longer than the termination of this collaboration relationship. The data of those with whom a relationship has not been established will be deleted after 6/12 months from the first contact.

Processing methods and security measures

Automated tools process personal data for the time strictly necessary to achieve the purposes for which it was collected. Specific security measures are observed to prevent data loss, illicit or incorrect use and unauthorised access.

Place of data processing and recipients of data

The processing related to the Service takes place at the aforementioned company headquarters: Top Nature by Rudy Debe, Strada Barazzetto Vandorno 42°, 13900 Biella (BI).

Personal data will be processed alone by the Company's personnel adequately trained pursuant to Article 29 of the GDPR and authorised by the Data Controller.

They may be communicated to external parties, expressly appointed as data processors pursuant to Article 28 of the GDPR

Transfer of data outside the EU

 

The data will be transferred outside the EEA (i.e. European Economic Area) to the United States of America for any exhibitions. The data transferred will mainly be common data, which is guaranteed by the US-Eu Data Privacy Framework of July 2023. The Data Controller will not disseminate these data. If this occurs, it will be necessary to request the consent of the interested party pursuant to Article 6 (1) (a) of the GDPR-

 

Rights of interested parties

The "Interested" users to whom the personal data collected refer have the right, pursuant to articles 15 – 22 of the GDPR, or to know at any time what personal data the Company holds and how they are used (Right of access), to obtain updating, rectification or, if there is interest, integration, as well as deletion, transformation into anonymous form or limitation in the cases provided for by art. 18 of the Regulation, to obtain in a structured, commonly used and machine-readable format the data concerning them and to transmit them to another owner (Right to portability), in the cases provided for by art. 20 of the Regulation.

Data subjects may at any time revoke, where issued, the consent given to the processing of data for the purpose of sending commercial communications related to the Newsletter service.

Interested parties may also lodge a complaint with the Guarantor for the Protection of Personal Data pursuant to Article 77 of the Regulation, if they consider that the processing of their data is contrary to the legislation in force. They may, again, make a request to object to the processing of personal data pursuant to Article 21 of the GDPR.

These rights can be exercised by sending a written communication to the Data Controller at the address indicated above or an email to rodolfo@studiodan.net