INFORMATION ON THE PROCESSING OF PERSONAL DATA
(art. 13 EU Regulation 2016/679)

Data controller

Cazzaniga Ilaria
with registered office in via Pellegrino Rossi 5 20161 Milano (MI)
VAT number: 11268490965
Email: inlab@ilariacazzaniga.it
PEC: cazzaniga.ilaria@pec.it
Phone number: +39 3341762507

Purposes and legal basis of the processing

The personal data you provide will be processed for the following purposes:
1. Execution of pre-contractual and contractual measures (art. 6.1.b GDPR):
– Handling of requests for quotations
– Execution of requested repair/sales services
– Communications related to services
2. Fulfillment of legal obligations (Art. 6.1.c GDPR):
– Issuance and storage of invoices and accounting documents
– Mandatory tax and administrative obligations
3. Legitimate interest of the owner (Art. 6.1.f GDPR):
– Possible defense of a right in court
– Service communications related to purchased/repaired items

Type of data processed

– Personal and contact data (first name, last name, address, phone number, email)
– Data related to items purchased or repaired
– Invoicing data (address, tax code, VAT number)

Method of processing

The processing of your personal data is carried out by means of computer and telematic tools, with logics related to the purposes indicated above and, in any case, in such a way as to guarantee the security of the data and its confidentiality.

Recipients of personal data

Personal data may be disclosed to:
– Technical and IT service providers (e.g., Aruba electronic invoicing service)
– Accountant and tax consultants
– Public bodies (Internal Revenue Service)
– Judicial or administrative authorities, for the fulfillment of legal obligations

Data retention

Personal data will be retained for as long as necessary to fulfill the purposes for which it was collected:
– For contractual purposes: for the entire duration of the contractual relationship and for 24 months thereafter
– For tax and accounting purposes: for 10 years as required by tax regulations
– For legitimate interest: until the statute of limitations of the actionable rights

Transfer of personal data

Data are stored on servers located within the European Union. It is understood that, where necessary, the Data Controller has the option to use cloud services, in which case the service providers will be selected from among those who provide adequate guarantees, as provided by Article 46 of the GDPR.

Rights of the Data Subject

As a data subject, you have the right to:
– Access your personal data (Art. 15 GDPR).
– Obtain rectification, integration or erasure of the same (art. 16 and 17 GDPR)
– Request the restriction of processing (art. 18 GDPR)
– Object to the processing (art. 21 GDPR)
– Receive the data in a structured, machine-readable format (Art. 20 GDPR)
– Withdraw any consent given
– To lodge a complaint with the Data Protection Authority (www.garanteprivacy.it)

The above rights may be exercised at any time by sending:
– a registered letter with return receipt to: Cazzaniga Ilaria via Pellegrino Rossi 5 20161 Milano (MI)
– an e-mail to: inlab@ilariacazzaniga.it

Nature of the provision of data

The provision of data for the purposes referred to in points 1 and 2 is mandatory. In their absence, it will not be possible to properly manage the contractual relationship and fulfill legal obligations.