Information provided pursuant to art. 13-14 of the GDPR (General Data Protection Regulation) 2016/679

We inform you that, for the establishment and execution of ongoing contractual relationships with you, our organization is in possession of your data, also acquired verbally, directly or through third parties, classified as personal by the Europe Regulation 2016/679 from ( GDPR).
According to the legislation indicated, this processing will be based on the principles of correctness, lawfulness, transparency and protection of your privacy and your rights.
Pursuant to article 13 of the GDPR 2016/679, we therefore provide you with the following information:

Nature of the data processed: We process your personal, fiscal and economic data necessary for the performance of existing or future contractual relationships with your company. as well as to achieve effective management of commercial relationships.
The data are processed without your express consent (art. 24 letter a, b, c Privacy Code and art. 6 letter b, e GDPR), only and exclusively for the following Service Purposes: fulfilling pre-contractual and contractual obligations and tax deriving from existing relationships with you; fulfill the obligations established by law, by a regulation, by community legislation or by an order from the Authority; exercise the rights of the Owner, for example the right of defense in court.

We are not in possession of your data that can be classified as particular or of a judicial nature (articles 9 and 10 of the GDPR).

Purpose of processing and duration: Your data is processed for the entire duration of the contractual relationship and also subsequently, for contractual needs and related fulfillment of legal and fiscal obligations, and for effective management of financial and commercial relationships, operations indicated in art. 4 Privacy Code and art. 4 no. 2) GDPR.
The Data Controller will process personal data for the time necessary to fulfill the aforementioned purposes and in any case for no longer than 10 years from the termination of the relationship for the Service Purposes.

Processing methods: The processing will be carried out both with manual and/or IT and telematic tools with organization and processing logic strictly related to the purposes themselves and in any case in such a way as to guarantee the security, integrity and confidentiality of the data themselves in compliance with the organizational, physical and logical measures envisaged by the provisions in force.

Obligation or right to provide data: As regards the data that we are obliged to know, in order to fulfill the obligations established by law, their failure to provide it on your part makes it impossible to establish or continue the relationship, within the limits in to which such data are necessary for the execution of the same.

Scope of knowledge of your data: The following categories of subjects may become aware of your data, as managers or persons in charge of processing, appointed by the undersigned company, data controller: managers, administrators and auditors; internal secretarial offices; accounting and invoicing staff; service marketing staff; agents and representatives.

Communication and dissemination:  Your data will not be disclosed by us to indeterminate subjects by making them available or consulting them.
Your data may be communicated by us, to the extent of their respective and specific competence, to entities and in general to any public or private entity with respect to which there is an obligation for us (or faculty recognized by laws or secondary regulations or community) or need for communication, as well as to our consultants, within the limits necessary to carry out their duties at our organisation, subject to our letter of appointment which imposes the duty of confidentiality and security.

Your rights: In your capacity as an interested party, you have the rights referred to in the art. 7 Privacy Code and art. 15 GDPR and precisely the rights of: i. obtain confirmation of the existence or otherwise of personal data concerning you, even if not yet registered, and their communication in an intelligible form; ii. obtain indication of: a) the origin of the personal data; b) the purposes and methods of processing; c) of the logic applied in case of processing carried out with the aid of electronic instruments; d) the identification details of the owner, managers and representative designated pursuant to art. 5, paragraph 2 Privacy Code and art. 3, paragraph 1, GDPR; e) of the subjects or categories of subjects to whom the personal data may be communicated or who may become aware of them in their capacity as designated representatives in the territory of the State, managers or agents; iii. obtain: a) updating, rectification or integration of data; b) the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, including those whose retention is not necessary in relation to the purposes for which the data were collected or subsequently processed; c) certification that the operations referred to in letters a) and b) have been brought to the attention, also with regard to their content, of those to whom the data have been communicated or disseminated, except in the case in which this requirement is proves impossible or involves a manifestly disproportionate use of means compared to the protected right; iv. object, in whole or in part: a) for legitimate reasons to the processing of personal data concerning you, even if pertinent to the purpose of the collection; b) to the processing of personal data concerning you for the purpose of sending advertising or direct sales material or for carrying out market research or commercial communication, through the use of automated call systems without the intervention of an operator by email and/or by traditional marketing methods by telephone and/or paper mail. Where applicable, you will also have the rights referred to in the articles. 16-21 GDPR (Right of rectification, right to be forgotten, right to limit processing, right to data portability, right to object), as well as the right to complain to the Guarantor Authority. At any time you can obtain confirmation of the existence or otherwise of personal data concerning you and the communication of such data and the purposes on which the processing is based. Furthermore, you will be able to obtain the cancellation, transformation into anonymous form or blocking of data processed in violation of the law, as well as the updating, rectification or, if you have an interest in this regard, integration of the data. You may object, for legitimate reasons, to the processing itself.
We kindly ask you to promptly report any changes to your personal data to the company's office in order to comply with the art. 11, letter (c) of the aforementioned legislation, which requires that the data collected be accurate and, therefore, updated.

Owner and data controller:

The data controller is [name]
with headquarters in Località Ondro Verdebio, 29, 11025 Gressoney-saint-jean AO

The Data Controller, who can be contacted to exercise rights and/or for any clarifications regarding personal data protection, can be reached at: info@firnelicht.com

Best regards.

The Data Controller
[callsign]