This is a notice to data subjects pursuant to art. 13 of EU Regulation 2016/679 — the regulation on the protection of natural persons with regard to the processing of personal data (GDPR — General Data Protection Regulation, EU Regulation 679/2016) and the Italian Privacy Code (Legislative Decree 196/2003, as amended by Legislative Decree 101/2018).
Weblink Srl wishes to inform data subjects whose personal data is processed that personal data referring or attributable to the data subject is processed in full compliance with applicable law and the confidentiality obligations that have always guided us.
By "Processing of personal data" we mean any operation or set of operations, whether or not by electronic means, concerning the collection, recording, organisation, storage, consultation, processing, modification, selection, retrieval, comparison, use, interconnection, blocking, communication, dissemination, erasure and destruction of data, even if not stored in a database.
Pursuant to art. 13 of the GDPR (EU Regulation 679/2016), in relation to the personal data we process as a result of establishing mutual commercial and possibly contractual relations, we hereby provide the information set out below.
Data Controller
The Data Controller for all legal purposes is:
Weblink Srl
Registered office: Via Manin 30, 21100 Varese (VA), Italy
Tel.: +39 0332 239546
Email: privacy@weblink.it
Purposes of processing
The data subject's personal data is processed in connection with contractual needs and the consequent fulfilment of legal and tax obligations, as well as to enable effective management of financial and commercial relations. Such processing will take place for the entire duration of the contractual relationship and also thereafter, for the fulfilment of legal obligations and for administrative and commercial purposes.
If you subscribe to the Newsletter service by registering on the dedicated page of www.weblink.it (or other websites owned by Weblink), the personal data voluntarily provided by the data subject will be processed:
- to send email communications regarding new products or new commercial initiatives, fairs or events;
- for phone contacts made by internal staff.
Within the purposes for which the personal data is collected, Weblink Srl carries out the processing of such data according to the principles of fairness, lawfulness, transparency and protection of the data subject's privacy rights.
Nature of the data provided
Personal data is always collected from the data subject. The provision of such data, necessary for the purposes described, is essential for the complete execution of communication, marketing, commercial and any contractual activity. Any refusal to provide such data may result in the failure or partial provision of the Company's services.
Processing methods
Data processing takes place according to the principles of fairness, lawfulness and transparency, using tools and procedures suitable to guarantee security and confidentiality, and may be carried out both on paper and through electronic means.
Processing is carried out with the application of security measures appropriate to minimise the risk of unauthorised third-party access, destruction and/or damage to data, and to guarantee confidentiality, pursuant to art. 32 of the GDPR.
Retention of personal data
Personal Data will be retained only for as long as necessary for the purposes for which it was collected, respecting the data minimisation principle under article 5(1)(c) of the GDPR, as well as the legal obligations to which the Controller is bound. More information on retention and processing periods is available from the Controller.
Communication of data
Personal data will in no way be disseminated, but may be communicated:
- to designated persons, duly appointed, processing the data within the Company;
- to entities and associations connected to the Company;
- to parties that need to access such data for purposes ancillary to the relationship between our Company and the data subject, strictly within the limits necessary to perform the ancillary tasks assigned to them (e.g. banks);
- to the administrative consultancy firm (accountant), duly appointed as an external data processor.
Special categories of personal data
When sending a CV, pursuant to articles 26 and 27 of the Italian Privacy Code and articles 9 and 10 of GDPR 2016/679, the data subject may voluntarily provide the Company with data qualifying as "special categories of personal data" (i.e. data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, genetic data, biometric data, data concerning health or sex life or sexual orientation). This category of data may be processed by the Company only with the prior written consent of the data subject.
Rights of the data subject
The data subject, pursuant to the GDPR (arts. 15, 16, 17, 18, 20, 21, 22), may exercise the following rights against the Company — by sending an email to privacy@weblink.it:
- Right of access (art. 15): obtain confirmation as to whether or not personal data concerning them is being processed, and where that is the case, access to the personal data and to all information set out in art. 15 of the GDPR.
- Right to rectification (art. 16): obtain rectification of inaccurate personal data without undue delay, and to have incomplete data completed.
- Right to erasure (art. 17): obtain the erasure of personal data without undue delay ("right to be forgotten").
- Right to restriction (art. 18): obtain restriction of processing where one of the cases set out in art. 18 of the GDPR applies.
- Right to data portability (art. 20): receive the personal data concerning them in a structured, commonly used and machine-readable format.
- Right to object (art. 21): object at any time, on grounds relating to their particular situation, to processing of data pursuant to article 6(1)(e) or (f) of the GDPR.
- Right not to be subject to automated decision-making (art. 22): not to be subject to a decision based solely on automated processing producing legal effects concerning them or significantly affecting them.
- Right to lodge a complaint: contact the Supervisory Authority (Italian Data Protection Authority, Garante per la protezione dei dati personali) if they believe their data has been unlawfully processed.
Weblink Srl — Data Controller
Via Manin 30, 21100 Varese (VA), Italy · privacy@weblink.it