INFORMATION ON THE PROCESSING OF PERSONAL DATA
PURSUANT TO ART. 13 OF REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL OF 27 APRIL 2016 ("GENERAL DATA PROTECTION REGULATION")
- INTRODUCTION: THE ROLE OF TONINO LAMBORGHINI SPA AND REVERT SRL IN THE PROCESSING OF PERSONAL DATA COLLECTED THROUGH THE ARBLUECLEAN.IT WEBSITE
2. IDENTITY AND CONTACT DETAILS OF REVERT SRL AS INDEPENDENT CONTROLLER
3. DATA PROCESSING BY REVERT SRL FOR THE PURPOSE OF CONCLUDING AND EXECUTING THE PURCHASE CONTRACT
4. DATA PROCESSING BY REVERT SRL FOR CUSTOMER ASSISTANCE/CUSTOMER CARE PURPOSES
5. DATA PROCESSING BY REVERT SRL FOR FRAUD PREVENTION PURPOSES IN CASE OF CREDIT CARD PAYMENT
6. DATA PROCESSING BY REVERT SRL FOR ADMINISTRATIVE, ACCOUNTING AND TAX PURPOSES
7. DATA PROCESSING BY REVERT SRL TO ALLOW THE USER TO EXERCISE RIGHTS
8. DATA PROCESSING BY REVERT SRL FOR THE PURPOSE OF ASCERTAINING, EXERCISING OR DEFENDING A RIGHT
9. CATEGORIES OF SUBJECTS TO WHOM REVERT SRL COMMUNICATES THE USER'S PERSONAL DATA (RECIPIENTS)
10. TRANSFERS TO THIRD COUNTRIES
11. RIGHT TO OBJECT
12. RIGHT OF ACCESS
13. RIGHT TO RECTIFICATION
14. RIGHT TO ERASURE
15. RIGHT TO RESTRICTION OF PROCESSING
16. RIGHT TO DATA PORTABILITY
17. TIMES AND METHODS OF RESPONSE IN CASE OF EXERCISE OF DATA SUBJECT'S RIGHTS
18. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
-
INTRODUCTION: THE ROLE OF TONINO LAMBORGHINI SPA AND REVERT SRL IN THE PROCESSING OF PERSONAL DATA COLLECTED THROUGH THE WWW.ARBLUECLEAN.IT WEBSITE
The following information notice is intended for all subjects who make purchases on the following e-commerce website:
The website is owned by TONINO LAMBORGHINI SPA ("TONINO LAMBORGHINI"). The Website is managed, on behalf of TONINO LAMBORGHINI, by REVERT SRL ("REVERT") which sells "Tonino Lamborghini" branded products marketed on the website.
REVERT SRL is responsible for managing sales and transactions carried out through the Website (e.g., order management, product sales and delivery, returns and legal warranty management, and other activities necessary for product sales through the website). TONINO LAMBORGHINI provides services that allow access, browsing and registration on the website. TONINO LAMBORGHINI SPA and REVERT SRL will process the personal data you provide for registration on the website and, respectively, for the conclusion of the purchase contract through the Website as independent controllers (each, an "Independent Controller" and jointly "Independent Controllers"), in compliance with the provisions of EU Regulation 679/2016 (the "Regulation") and Legislative Decree no. 196 of June 30, 2003 (the "Privacy Code").
In particular:
- TONINO LAMBORGHINI will process your personal data, as an Independent Controller, in order to manage access to the Website's services and facilitate the online purchase of products, as well as to allow your registration on the Website and the possible conclusion of the purchase contract through the Website and, subject to your consent, for marketing purposes;
- REVERT SRL will process your personal data, as an Independent Controller, to allow the conclusion of the purchase contract, to execute the obligations arising from this contract, to comply with all legal obligations, including tax and administrative ones, related to it, as well as for other purposes related to this contract and/or the execution of pre-contractual measures, as described in this information notice;
The processing carried out by TONINO LAMBORGHINI, as an Independent Controller, is described in the TONINO LAMBORGHINI Privacy Policy, to which reference is made in full, available in the footer of the website at the link "TONINO LAMBORGHINI Privacy Policy".
This information notice is therefore provided solely with reference to the processing carried out by REVERT SRL as an Independent Controller.
2. IDENTITY AND CONTACT DETAILS OF REVERT SRL AS INDEPENDENT CONTROLLER
REVERT SRL is the Independent Controller of the data you provide when concluding a purchase contract through the Website, for the purposes referred to in sections 4, 5, 6, 7, 8 and 9 of this information notice. The identification details and contact details of REVERT SRL are as follows: REVERT SRL with registered office in Via Lorenzo Mascheroni 14 20145 Milan (MI) | VAT no. 00816700256 and registration number in the Modena Companies Register 03854490368;
- telephone number: 0331 1090043
- email address: tl@revert.it
3. DATA PROCESSING BY REVERT SRL FOR THE PURPOSE OF CONCLUDING AND EXECUTING THE PURCHASE CONTRACT
REVERT SRL, as an Independent Controller, will process your personal data:
- to allow the conclusion of the purchase contract through the Website (e.g., adding products to the cart and choosing the payment method);
- to execute the obligations arising from this contract for REVERT SRL, such as, for example, the delivery of the products sold;
- to allow you to fulfill the obligations arising from the purchase contract concluded through the Website, such as, for example, online payment for the purchased products;
- to execute pre-contractual measures requested by you (e.g., notification of product availability).
The legal basis for this processing is the performance of the contract (Art. 6.1.b) of the Regulation). For this purpose, REVERT SRL will process your data for the time strictly necessary to carry out the individual processing activities (e.g., data necessary for the execution of the purchase contract, until product delivery or, in case of non-delivery, until contract termination), it being understood that, once this term has expired, REVERT SRL may store the data for the purposes and for the maximum retention periods referred to in sections 4, 5, 6, 7, 8 and 9 of this information notice and/or, in any case, in the cases established by the Regulation and/or by law.
Further Information:
The provision of data for the purpose in question is optional: there is no legal or contractual obligation to communicate the data; however, it is a necessary requirement for the conclusion of the purchase contract through the Website. Failure to communicate the data will therefore make it impossible for the user to conclude such a contract and therefore to make purchases through the Website.
-
DATA PROCESSING BY REVERT SRL FOR ASSISTANCE/CUSTOMER CARE PURPOSES
REVERT SRL, as an independent Data Controller, will process user data for general assistance and customer care activities, and therefore to respond to information requests from users or to respond to complaints, reports, and disputes concerning online orders only.
The legal basis for this processing is the execution of pre-contractual measures taken at the request of the data subject (Art. 6.1.b, last paragraph, of the Regulation) or, as the case may be, the legitimate interest of REVERT SRL (Art. 6.1.f) of the Regulation).
It is a legitimate interest of REVERT SRL to respond to information requests and/or reports and/or disputes and/or complaints from website users (to which, moreover, REVERT SRL is obliged to respond, also based on the provisions of the Consumer Code). This legitimate interest of REVERT SRL also coincides with the legitimate interest of the website users themselves who make the requests and/or reports and/or disputes and/or complaints in question and who, therefore, in the context of their relationship with REVERT SRL, can reasonably expect their personal data to be used by REVERT SRL to provide them with a response.
The legitimate interest of REVERT SRL, thus identified, can therefore be considered to prevail over the fundamental rights and freedoms of the data subject, also due to these reasonable expectations and the existing relationship between the data subject and REVERT SRL, as well as considering the nature of the data processed and the coinciding interest of the data subjects themselves.
You have, in any case, the right to object, at any time, for reasons related to your personal situation, to the processing of personal data concerning you for the purpose in question (i.e., assistance and customer care).
To exercise this right, you can contact REVERT SRL at the following addresses: Via email at tl@revert.it or at the operational headquarters of REVERT SRL Srl Via Strasburgo 31, 41011 Campogalliano (MO).
Further Information:
In the event of exercising the right to object to data processing for assistance/customer care purposes, REVERT SRL refrains from further processing users' personal data for this purpose, unless it demonstrates the existence of compelling legitimate grounds for the processing that override the interests and rights and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
The provision of personal data for the purpose in question is optional: there is no legal and/or contractual obligation to disclose the data; however, given the purpose of the processing, failure to communicate the data and/or exercise of the right to object may make it impossible to respond to users' requests and/or reports and/or complaints and/or disputes, if the response to such requests involves the processing of the user's personal data.
For this purpose, REVERT SRL will process user data for the time necessary to carry out the requested activities and, therefore, specifically, for the time necessary to provide the information requested by the user or to respond to complaints and/or reports and/or disputes submitted by the user.
5. DATA PROCESSING BY REVERT SRL FOR FRAUD PREVENTION PURPOSES IN CASE OF CREDIT CARD PAYMENT
REVERT SRL, as an independent Data Controller, will process users' personal data in order to manage and possibly block payment transactions relating to fraudulent orders, in the case of payment by credit card for purchases made on the Website. The data subject to this processing are the order data and the data of the credit card holder used for payment, in the event that T-DATA S.R.L, in order to ensure payment security, requests a copy of it from the user, as indicated in the general terms and conditions of sale governing the purchase. The processing in question does not concern confidential credit card data (card number, expiration date, and security code) which, together with the cardholder's name, are acquired directly by the payment service provider.
The legal basis for this processing is the legitimate interest of REVERT SRL (Art. 6.1.f) of the Regulation).
You have, in any case, the right to object, at any time, for reasons related to your personal situation, to the processing of personal data concerning you for the purpose in question (i.e., fraud prevention in case of credit card payment).
To exercise this right, you can contact REVERT SRL at the following addresses: Via email at tl@revert.it, or at the operational headquarters of REVERT SRL Via Lorenzo Mascheroni 14 20145 Milan (MI). For the purpose in question, REVERT SRL will process users' personal data for 24 months from collection.
Further Information:
Regarding the legitimate interest of REVERT SRL, the user is informed of the following:
- it is a legitimate interest of REVERT SRL to carry out activities for fraud prevention purposes, in the case of online payment by credit card, to protect its business interest, including the purpose of complying with the parameters defined by international circuits relating to the number of fraudulent payment attempts detected on the e-commerce website. This legitimate interest of REVERT SRL also coincides with the legitimate interest of the website users, as potential victims of fraud, who, like the entire community, in turn, have a legitimate interest in ensuring that fraudulent activities are discouraged and identified when they occur; it can, therefore, be considered that, in the context of the relationship with REVERT SRL, they reasonably expect their data to be processed also for fraud prevention purposes, for their own protection and guarantee.
- the provision of data for the purpose in question (i.e., credit card fraud prevention) is optional: there is no legal or contractual obligation to provide such data for this purpose; however, failure to send a copy of the identity card of the credit card holder with which the payment was made, if requested, will result in the termination of the purchase contract concluded through the Website.
- for the purpose in question, REVERT SRL also uses data initially collected for different purposes (and, specifically, to allow the conclusion of the purchase contract and its execution) whose further processing for credit card fraud prevention purposes is permitted, as it is based on the legitimate interest of REVERT SRL, given the compatibility of the purpose in question with the purpose for which the data are initially collected;
- in the event of exercising the right to object, REVERT SRL refrains from further processing users' personal data for this purpose, unless it demonstrates the existence of compelling legitimate grounds for the processing that override the interests and rights and freedoms of the data subject or for the establishment, exercise, or defense of legal claims.
6. DATA PROCESSING BY REVERT SRL FOR ADMINISTRATIVE, ACCOUNTING, AND TAX PURPOSES
REVERT SRL, as an independent Data Controller, will process user data for the purpose of fulfilling administrative and/or accounting and/or tax obligations, related to the purchase contract concluded through the Website, such as, by way of example, keeping accounting records and issuing the sales invoice.
The legal basis for this processing is the fulfillment of legal obligations to which REVERT SRL is subject (Art. 6.1.c) of the Regulation).
The provision of data for the purpose in question is mandatory, because their processing is necessary to allow REVERT SRL to fulfill legal obligations incumbent upon it. Any refusal to provide data for this purpose will make it impossible for the user to conclude the purchase contract through the Website. For this purpose, REVERT SRL will process user data until the expiry of the legal terms provided for the performance of each administrative, accounting, and tax obligation and/or for the retention periods provided by law for the retention of relevant documentation.
7. DATA PROCESSING BY REVERT SRL TO ALLOW THE USER TO EXERCISE RIGHTS
REVERT SRL, as an independent Data Controller, will process user data in order to:
- respond to requests for exercising the right of withdrawal and/or requests for exercising the legal guarantee of conformity and/or other rights arising from the purchase contract concluded through the Website and/or provided by law in relation to such contract;
- carry out activities that prove necessary as a consequence of the exercise of such rights and to proceed, if applicable, with related refunds;
- receive and respond to requests for exercising rights regarding personal data protection provided by the Regulation and carry out all consequent activities.
The legal basis for this processing is the fulfillment of legal obligations to which REVERT SRL is subject (Art. 6.1.c) of the Regulation).
Further Information:
The provision of data for the purpose in question is mandatory, because their processing is necessary to allow REVERT SRL to fulfill legal obligations as well as to allow the user to exercise the rights granted to them by law or contract. Any refusal to provide data for this purpose will make it impossible for the user to exercise such rights.
For this purpose, REVERT SRL will process data until the expiry of the legal terms provided for the exercise of the right (statute of limitations and/or forfeiture period) or, in the case of exercise of such rights, for the time necessary for the management and closing of the case; in the case of exercising the rights provided for by the Regulation, the data will be processed until the Data Controller certifies that the request has been fulfilled or until the fulfillment itself, whichever of the two events occurs last.
8. DATA PROCESSING BY REVERT SRL FOR THE PURPOSE OF ESTABLISHING, EXERCISING, OR DEFENDING A RIGHT
REVERT SRL, as an independent Data Controller, will process user data for the establishment, exercise, or defense of a right in all competent forums.
The legal basis for this processing is legitimate interest (Art. 6.1.f) of the Regulation).
It is a legitimate interest of the data controller to pursue legal remedies to ensure compliance with its contractual rights or to demonstrate that it has fulfilled the obligations arising from the contract with the data subject or imposed on the data controller by law. This legitimate interest is, in turn, based on the constitutionally protected right to defense. It can therefore be considered to prevail over the fundamental rights and freedoms of the data subject, also due to their reasonable expectations.
The user has, in any case, the right to object, at any time, for reasons related to their personal situation, to the processing of personal data concerning them for the purpose in question (i.e., defense of a right/justice purposes).
To exercise this right, the user can contact REVERT SRL at the following addresses: Via email at tl@revert.it, or at the operational headquarters of REVERT SRL Srl Via Strasburgo 31, 41011 Campogalliano (MO).
Further Information:
The user is informed that, in particular, REVERT SRL will store and eventually use the data:
a) for the purpose of proving compliance with the purchase contract and/or to initiate or respond to actions relating to such contract before any administrative and/or judicial authority and/or to protect its rights in the preparatory stages of judgment and/or proceedings; for this purpose, the data will be stored for 10 years from product delivery or contract termination, in the event of non-delivery of the product;
b) to prove having allowed the exercise of the rights provided for by the Regulation and/or by law (e.g., right of withdrawal; legal guarantee) and/or by the purchase contract and having carried out what is provided for by law and/or by the contract in this regard (e.g., refund, in case of exercising the right of withdrawal);
c) to prove having responded to users' complaints and/or reports and/or disputes;
d) in the case of exercising the rights provided for by the Regulation, the data will be stored for [5 years from the certification of having responded to the data subject's request or from such response, if later];
e) in the case of exercising rights provided for by the purchase contract or by law, the data will be stored for [10 years, starting from the closing of the case or from the action that defines it] (e.g., refund, in case of withdrawal; or delivery of the replacement product, in case of legal guarantee); closing of the case means the last correspondence relating to the exercise of the rights in question);
f) in the case of complaints and/or reports and/or disputes, the data will be stored for [three years from the closing of the case], understood as the last correspondence on the matter.
Furthermore, it should be noted that:
- the provision of data for this purpose is optional: there is no legal or contractual obligation that requires the data subject to provide data for this purpose;
- for the purpose in question, data initially collected for a different purpose are used, the further processing of which is permitted as it is based on the legitimate interest of the controller, given the compatibility of this further purpose with the initial purpose of collection, also taking into account that, to the extent that the processing is necessary for the establishment, exercise, and defense of a right, the data controller is also exempted from the obligation of erasure, by express provision of the Regulation;
- in the case of exercising the right to object, in fact, the data controller refrains from further processing personal data, unless he demonstrates the existence of compelling legitimate grounds for the processing that override the interests, rights, and fundamental freedoms of the data subject or for the establishment, exercise, or defense of a right in legal proceedings.
-
CATEGORIES OF SUBJECTS TO WHOM REVERT SRL COMMUNICATES THE USER'S PERSONAL DATA (RECIPIENTS)
The personal data provided by the user may be communicated by REVERT SRL to the categories of recipients indicated below.
The subjects to whom REVERT SRL communicates the data act as external data processors designated by REVERT SRL through a specific contract ("Data Processors") or as persons authorized to process personal data under the direct authority of REVERT SRL ("Authorized Persons") or, in the case of third parties used by the Data Processor, as "Sub-Processors," pursuant to Art. 28.4 of the Regulation, except in cases where the recipient acts as an independent data controller, such as, for example, in the case of the Payment Service Provider, or also as an independent data controller, as in the case of couriers.
Further Information:
Users' personal data may be communicated by REVERT SRL to the following categories of recipients:
- companies of the group to which REVERT SRL belongs and/or employees and/or collaborators of REVERT SRL, for the performance of administration, accounting, and IT and logistics support activities;
- to companies, consultants, or professionals possibly appointed for the installation, maintenance, updating, and, in general, the management of REVERT SRL's hardware and software, including cloud computing and chat service providers, and to third parties they use;
- to companies that carry out logistical support and/or warehousing and/or packaging and/or shipping and delivery or collection of products purchased on the Website and to third parties they use;
- to the Payment Service Provider and/or the acquirer and/or banks in order to allow payment for purchases made on the Website or their refund, if applicable, and to third parties they use;
- to all those subjects, including public authorities, who have access to the data by virtue of regulatory or administrative provisions.
- to all those public and/or private subjects, natural and/or legal persons (legal, administrative, and tax consulting firms), if the communication is necessary or functional to the correct fulfillment of the contractual obligations assumed in relation to purchases through the Website as well as obligations deriving from law or in the case of ascertainment, exercise, or defense of a right.
The list of recipients is available at REVERT SRL's headquarters.
10. TRANSFERS TO THIRD COUNTRIES
Users' personal data is transferred by REVERT SRL to the following third countries:
Regarding data transfer to India, please note the following:
• there is no adequacy decision concerning the level of data protection guaranteed in India;
• in the absence of an adequacy decision, data may be transferred to the third country only if appropriate safeguards are provided, as per Art. 46.2 of the Regulation, including standard contractual clauses adopted by the Commission and/or a national supervisory authority;
• the transfer of data to India by REVERT SRL takes place on the basis of the standard contractual clauses referred to in the "Commission Decision of 5 February 2010 on standard contractual clauses for the transfer of personal data to processors established in third countries under Directive 95/46/EC of the European Parliament and of the Council" [notified under number C(2010)/87/EU] and therefore on the basis of the consequent "Authorization for transfers to third countries via standard contractual clauses referred to in Commission Decision 2010/87/EU in the case of an importer established in a third country" issued by the Italian Data Protection Authority with provisions of 27 May 2010 and 15 November 2012, still in force pursuant to Art 46.5 of the Regulation.
11. RIGHT TO OBJECT
The data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them carried out for the purposes referred to in sections 4, 5 and 8 of this privacy policy and having as their legal basis the legitimate interest of the data controller.
The data subject can exercise the right to object by contacting REVERT SRL at the following addresses: Via email at tl@revert.it, or at the operational headquarters of REVERT SRL Via Lorenzo Mascheroni 14 20145 Milan (MI) .
Further Information:
In case of exercising the right to object, the data controller refrains from further processing personal data, unless they demonstrate compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject or for the establishment, exercise or defense of legal claims.
12. RIGHT OF ACCESS
The data subject has the right to obtain from the data controller (and therefore from REVERT SRL) confirmation as to whether or not personal data concerning them are being processed, and, where that is the case, access to the personal data and the information indicated below.
The data subject can exercise the right of access by contacting REVERT SRL at the following addresses: Via email at tl@revert.it, or at the operational headquarters of REVERT SRL Via Lorenzo Mascheroni 14 20145 Milan (MI) .
Further Information:
In case of exercising the right of access, the user can obtain access to personal data and the following information:
a) the purposes of the processing;
b) the categories of personal data concerned;
c) the recipients or categories of recipient to whom the personal data have been or will be disclosed, in particular recipients in third countries or international organisations;
d) where possible, the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period;
e) the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing of personal data concerning the data subject or to object to such processing;
f) the right to lodge a complaint with a supervisory authority;
g) where the personal data are not collected from the data subject, any available information as to their source;
h) the existence of automated decision-making, including profiling, referred to in Article 22(1) and (4) and, at least in those cases, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing for the data subject;
Where personal data are transferred to a third country or to an international organization, the data subject shall have the right to be informed of the appropriate safeguards relating to the transfer pursuant to Article 46 of the Regulation.
The data controller provides a copy of the personal data undergoing processing. For any further copies requested by the data subject, the data controller may charge a reasonable fee based on administrative costs. If the data subject makes the request by electronic means, and unless otherwise requested by the data subject, the information shall be provided in a commonly used electronic form.
13. RIGHT TO RECTIFICATION
The data subject has the right to obtain from the data controller (and therefore from REVERT SRL) without undue delay the rectification of inaccurate personal data concerning him or her. Taking into account the purposes of the processing, the data subject has the right to have incomplete personal data completed, including by means of providing a supplementary statement.
The data subject can exercise the right of rectification by contacting REVERT SRL at the following addresses: via email at tl@revert.it, or at the operational headquarters of REVERT SRL Via Strasburgo 31, 41011 Campogalliano (MO).
14. RIGHT TO ERASURE
The data subject has the right to obtain from the data controller (and therefore from REVERT SRL) the erasure of personal data concerning him or her without undue delay and the data controller shall have the obligation to erase personal data without undue delay where one of the following grounds applies:
a) the personal data are no longer necessary in relation to the purposes for which they were collected or otherwise processed;
b) the data subject objects to the processing based on the legitimate interest of the data controller for reasons related to their particular situation (and, therefore, in cases of objection to processing for the purposes referred to in sections 4, 5, and 8 of this privacy policy);
c) the personal data have been unlawfully processed;
d) the personal data have to be erased for compliance with a legal obligation in Union or Member State law to which the data controller is subject.
The data subject can exercise the right to erasure by contacting REVERTS.R.L. at the following addresses: via email at tl@revert.it, or at the operational headquarters of REVERT SRL Via Lorenzo Mascheroni 14 20145 Milan (MI)
Further Information:
Where the controller has made the personal data public and is obliged to erase the personal data, taking account of available technology and the cost of implementation, the controller shall take reasonable steps, including technical measures, to inform controllers which are processing the personal data that the data subject has requested the erasure by such controllers of any links to, or copy or replication of, those personal data.
The right to erasure shall not apply to the extent that processing is necessary:
a) for exercising the right of freedom of expression and information;
b) for compliance with a legal obligation which requires processing by Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller;
c) for reasons of public interest in the area of public health;
d) for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in so far as the right to erasure is likely to render impossible or seriously impair the achievement of the objectives of that processing;
e) for the establishment, exercise or defence of legal claims.
15. RIGHT TO RESTRICTION OF PROCESSING
The data subject has the right to obtain from the data controller (and therefore from REVERT SRL) restriction of processing where one of the following applies:
- the accuracy of the personal data is contested by the data subject, for a period enabling the data controller to verify the accuracy of the personal data;
- the processing is unlawful and the data subject opposes the erasure of the personal data and requests instead the restriction of their use;
- the data controller no longer needs the personal data for the purposes of the processing, but they are required by the data subject for the establishment, exercise or defence of legal claims;
- the data subject has objected to processing in cases of processing based on the legitimate interest of the data controller, for reasons relating to their particular situation (and, therefore, in case of objection to data processing for the purposes referred to in sections 4, 5 and 8 of this privacy policy), pending the verification whether the legitimate grounds of the data controller override those of the data subject.
The data subject can exercise the right to restriction by contacting REVERT SRL at the following addresses: via email at tl@revert.it, or at the operational headquarters of REVERT SRL Via Lorenzo Mascheroni 14 20145 Milan (MI)
Further Information::
Where processing has been restricted, such personal data shall, with the exception of storage, only be processed with the data subject's consent or for the establishment, exercise or defence of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State.
A data subject who has obtained restriction of processing shall be informed by the data controller before the restriction of processing is lifted.
Back to summary
16. RIGHT TO DATA PORTABILITY
The data subject has the right to receive the personal data concerning him or her, which he or she has provided to a data controller, in a structured, commonly used and machine-readable format and have the right to transmit those data to another data controller without hindrance from the data controller to which the personal data have been provided, where:
a) the processing is based on consent or on a contract; and
b) the processing is carried out by automated means.
The data subject can therefore exercise the right in question in relation to the purposes referred to in the following sections of this privacy policy: 3. The data subject can exercise the right to portability by contacting REVERT S.R.L. at the following addresses: via email at tl@revert.it, or at the operational headquarters of REVERT SRL Via Lorenzo Mascheroni 14 20145 Milan (MI)
Further Information
In exercising his or her right to data portability, the data subject shall have the right to have the personal data transmitted directly from one controller to another, where technically feasible.
The exercise of the right to data portability shall be without prejudice to the right to erasure.
The right to data portability shall not adversely affect the rights and freedoms of others.
17. RESPONSE TIMES AND METHODS IN CASE OF EXERCISE OF DATA SUBJECTS' RIGHTS
The data controller provides the data subject with information on the action taken on a request to exercise the rights recognized by Articles 15 to 22 of the Regulation (i.e. right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability, right to object) and referred to in sections 11, 12, 13, 14, 15 and 16 of this privacy policy ("Data Subject's Rights"), without undue delay and, in any event, within one month of receipt of the request. That period may be extended by two further months where necessary, taking into account the complexity and number of the requests. The data controller shall inform the data subject of any such extension within one month of receipt of the request, together with the reasons for the delay. Where the data subject makes the request by electronic form, the information shall be provided by electronic means where possible, unless otherwise requested by the data subject.
Further Information:
If the data controller does not take action on the request of the data subject, the data controller shall inform the data subject without delay and at the latest within one month of receipt of the request of the reasons for not taking action and on the possibility of lodging a complaint with a supervisory authority and seeking a judicial remedy.
Communications in response to the exercise of Data Subject's Rights and actions taken are free of charge. Where requests from a data subject are manifestly unfounded or excessive, in particular because of their repetitive character, the data controller may:
a) charge a reasonable fee taking into account the administrative costs of providing the information or communication or taking the action requested; or
b) refuse to act on the request.
Where the data controller has reasonable doubts concerning the identity of the natural person making the request referred to in the Data Subject's Rights, the controller may request the provision of additional information necessary to confirm the identity of the data subject.
18. RIGHT TO LODGE A COMPLAINT WITH A SUPERVISORY AUTHORITY
Without prejudice to any other administrative or judicial remedy, every data subject shall have the right to lodge a complaint with a supervisory authority, in particular in the Member State of his or her habitual residence, place of work or place of the alleged infringement if the data subject considers that the processing of personal data relating to him or her infringes the Regulation. The supervisory authority with which the complaint has been lodged shall inform the complainant on the progress and the outcome of the complaint including the possibility of a judicial remedy.